What 'Occluded Surfaces' Actually Mean for Your VHP Validation — and Why Parametric Control Is the Answer

The word "occluded" appears twice in the Catalent Indiana warning letter (November 2025) and once in the Simtra BioPharma warning letter (March 2026). Each time it appears, it is naming the same failure mode: a surface that the VHP cycle cannot reach at the concentration and dwell time required for sporicidal kill.

This is not a compliance problem that began with a missing procedure. It is a physics problem. Understanding it precisely — why occluded surfaces fail, what cycle parameters govern the failure, and why independent parametric control is the engineering solution — is the starting point for building a VHP validation program that does not produce the same findings.

The Physics of VHP Sporicidal Efficacy

Vaporized hydrogen peroxide achieves sporicidal efficacy through one mechanism: direct surface contact at a sufficient concentration-time product. The H₂O₂ molecule reaches a surface, adsorbs, and oxidizes the spore coat proteins and membrane lipids of *Geobacillus stearothermophilus* — the biological indicator organism used to qualify pharmaceutical VHP cycles — at a rate determined by the vapor concentration and the surface temperature. The ISO 22441:2022 validation framework is built entirely around this mechanism: demonstrate that the cycle delivers a sufficient concentration-time product at the most challenging locations in the system to achieve the required log reduction.

The corollary is equally exact: a surface that does not receive VHP at the required concentration for the required dwell time does not achieve sporicidal kill, regardless of what the cycle controller reports for the bulk chamber conditions.

This is not a theoretical risk. It is the mechanism that produced the Catalent and Simtra findings.

What Occluded Surfaces Do to VHP Vapor

Hydrogen peroxide vapor behaves as a gas in the decontamination chamber — it is transported by diffusion and bulk airflow. Its concentration at any point in the chamber at any moment in the cycle depends on the distance from the generator, the velocity and pattern of airflow, the temperature of the surfaces it encounters, and the presence of physical barriers that impede its transport.

An occluded surface is one that is physically blocked from direct vapor contact. The blockage can take several forms:

**Shadow occlusion.** A surface hidden behind or beneath another piece of equipment, a component, a wrapped item, or a structural feature does not receive vapor at the same concentration as the exposed face of that obstruction. The vapor must diffuse around the obstruction and into the shadow zone, arriving at reduced concentration and with a delay that compresses the effective dwell time at that location.

**Dead-zone occlusion.** Enclosed spaces within the isolator or RABS — the interiors of component holders, the undersides of shelving structures, recessed mounting features — may have insufficient airflow to transport fresh vapor into the space during the conditioning and dwell phases. The vapor that enters decomposes or adsorbs to walls before it can reach the deepest surfaces.

**Condensation-induced occlusion.** When a surface is colder than the bulk chamber temperature, vapor condenses at that surface preferentially — arriving as liquid hydrogen peroxide rather than as vapor. Liquid H₂O₂ on a surface does not provide the same sporicidal efficacy per unit time as vapor-phase contact at validated vapor concentrations, and the condensation event depletes the bulk vapor concentration at that location faster than the generator can replenish it.

**Wrapped component occlusion.** Items that are wrapped — in sterilization pouches, foil, or other packaging — create a vapor barrier. The space between the packaging and the item's surface is an enclosed volume that VHP vapor enters only by diffusion through packaging material. If the packaging material is impermeable or low-permeability, the surface inside it receives no vapor. At Simtra, the warning letter specifically identified that validation instructions permitted biological indicators to rest on the bottom of containers within the RABS — creating a configuration where the BI contact surface was occluded from vapor by the BI holder itself.

In each case, the cycle controller may report normal conditions in the bulk chamber — concentration within range, dwell time completed, aeration confirmed — while surfaces in the occluded zones remain at sporicidal-kill-insufficient exposure. The biological indicator at the convenient, accessible location passes. The biological indicator at the occluded location — if one was ever placed there — fails, or was never placed there at all.

What the Two Warning Letters Document

The Catalent Indiana warning letter is precise about the failure sequence. Catalent's own investigation identified "the most probable root cause" of an environmental monitoring failure as equipment surfaces that were occluded during VHP decontamination, with contamination occurring during an atypical intervention involving changes to parts integral to stopper seating. The occluded surfaces had not been decontaminated. The intervention exposed the Grade A environment to those surfaces. Contamination resulted.

In a second instance, Catalent identified occluded surfaces on wrapped components within the RABS as the potential cause of contamination of items used to install other equipment. The components were wrapped; the wrapped surfaces were not in the validated decontamination zone; the contamination transferred during installation.

What makes the Catalent finding particularly instructive: Catalent's own risk assessments had identified the intervention risk and advised against interventions that could disturb potentially occluded surfaces. The procedures permitted the intervention anyway. This is not a case of a facility that failed to recognize the risk. It is a case of a facility that recognized the risk, documented it in a risk assessment, and then permitted the practice that the risk assessment identified as unacceptable.

The Simtra warning letter adds a second layer to the occluded surface analysis: the long-term BI trend. Between June 2023 and September 2025 — a 27-month span — Simtra recorded at least 47 microbial recoveries from ISO 5 and RABS environments, with 14 exceeding action limits. The organisms — Sphingomonas, Methylobacterium, Bradyrhizobium, Ralstonia — are environmental gram-negative species whose repeated presence in validated aseptic zones is diagnostic of persistent, undecontaminated surface reservoirs. Simtra attributed recurring BI positives in validation studies to a specific BI lot rather than investigating cycle adequacy as the root cause. FDA's characterization was direct: recurrent BI failures are indicative of poor cycle robustness and require further investigation.

The two findings together describe a complete failure mode profile: the physics of why occluded surfaces resist decontamination, the operational sequence by which undecontaminated occluded surfaces produce contamination events, the investigative error of attributing recurring BI signals to lot variability rather than cycle inadequacy, and the systemic quality consequence of permitting interventions that expose the aseptic environment to surfaces outside the validated decontamination zone.

Why Cycle Parameters Are the Engineering Answer

The instinctive response to occluded surface findings is geometric: identify the occluded surfaces and redesign the equipment or configuration to eliminate them. This is correct where it is feasible. EU GMP Annex 1 (2022) Section 4.22 explicitly requires that isolator decontamination methods render all interior surfaces and the critical zone free from viable microorganisms, which implies that surface accessibility to vapor must be a design criterion for isolator configurations used in aseptic manufacturing.

But geometric redesign is not always feasible, and the problem goes deeper than geometry. The physics of VHP transport in complex enclosures means that even geometrically accessible surfaces may receive inadequate vapor concentration if the cycle parameters are not calibrated to deliver sufficient concentration at challenging locations.

The five independent variables that govern VHP sporicidal efficacy at any surface are:

Generator output rate — the rate at which H₂O₂ is vaporized and introduced to the enclosure. Higher output increases the steady-state vapor concentration but also drives condensation at cool surfaces earlier in the cycle.

Conditioning phase management — the thermal and humidity conditions established in the enclosure before the injection phase begins. Surface temperature and relative humidity at the start of injection determine where condensation will occur preferentially during the dwell phase.

Dwell phase concentration profile — the vapor concentration maintained throughout the dwell period. Some cycle designs hold constant concentration; others are pulsed. The area under the concentration-time curve at the most challenging location determines sporicidal efficacy at that location.

Dwell phase duration — the total time the enclosure is held at the dwell concentration. Increasing dwell time increases the concentration-time product at all locations, including those receiving lower concentration due to occlusion.

Aeration profile — the rate and duration of hydrogen peroxide removal after decontamination. While aeration does not affect sporicidal efficacy, it determines residue levels at surfaces and re-entry timing.

A system in which these five variables are independently programmable can be calibrated specifically for the most challenging locations within a given configuration. If biological indicator testing during process development reveals that a recessed surface location receives inadequate concentration during a standard cycle, the response options include: increasing generator output rate to raise concentration throughout the enclosure, extending dwell phase duration to increase the concentration-time product at lower-concentration zones, adjusting conditioning parameters to shift condensation patterns away from critical surfaces, or modifying aeration to extend the exposure window. Each response requires a distinct parameter adjustment that can only be made if the system allows independent control.

A system with fixed cycle phases, or with concentration and temperature linked to a single control curve, reduces these degrees of freedom. The cycle can be run longer, or at higher concentration, but the independent tuning of each variable that site-specific cycle development requires cannot be performed.

The Validation Design Implication

FDA's remediation requirement from Catalent establishes the expected validation design standard: a comprehensive identification of all locations in the system not reliably exposed to VHP decontamination, and BI placement at those locations specifically. This is the direct application of the parametric control logic — if the most challenging locations in the system are identified, BI placement at those locations during process development reveals whether the cycle parameters deliver adequate efficacy there.

The sequence that site-specific VHP cycle development should follow is:

**Surface exposure mapping first.** Before cycle parameters are set and before BI locations are chosen, the physical configuration of the enclosure must be mapped for vapor transport. This means identifying all surfaces with potential occlusion characteristics: wrapped components, recessed features, shadow zones behind equipment, surfaces with different thermal properties than the enclosure bulk. This mapping is the precondition for BI placement design.

**BI placement at worst-case locations.** Biological indicators belong at the locations identified by surface exposure mapping as most challenging — not at the convenient locations that are easiest to install and retrieve. If the most challenging location is inside a recessed mounting feature or behind a stopper bowl, that is where the BI must go during process development. If the cycle cannot achieve kill at that location, the cycle parameters must be adjusted until it can — or the configuration must be redesigned to reduce the occlusion.

**Cycle parameter development against worst-case performance.** Once BI placement reflects worst-case locations, cycle parameter optimization is performed against the criterion of achieving required log reduction at all monitored locations simultaneously. Each parameter adjustment is made independently, with its effect on all BI locations evaluated before the next adjustment.

**Intervention procedure review.** The Catalent finding establishes that the validation program must extend beyond the decontamination cycle itself to include the procedures for interventions after the cycle. Any intervention that exposes the aseptic environment to surfaces that were outside the validated decontamination zone is a contamination hazard regardless of how well the cycle performed. Permitted interventions must be reviewed for this risk, and those that cannot be redesigned to eliminate it must be eliminated from the permitted procedure list.

The Enforcement Signal Going Forward

The Catalent and Simtra warning letters are not isolated. They are the enforcement articulation of a standard that FDA and EMA have been building through guidance since the FDA's Guidance for Industry: Sterile Drug Products Produced by Aseptic Processing and the EU GMP Annex 1 (2022) revision. Both documents establish, in different regulatory idioms, the same requirement: VHP decontamination cycles in isolators and RABS must demonstrate performance at all surfaces, not performance at convenient surfaces.

The enforcement record for 2025–2026 makes the scrutiny criteria explicit. The physics of the problem have not changed. The regulatory tolerance for validations that paper over the physics has.

For facilities that use VHP decontamination in aseptic manufacturing — regardless of whether they have received a warning letter — the question is whether the current validation program would survive the same inspection scrutiny applied to Catalent and Simtra. The warning letters make the specific criteria of that scrutiny public. The cycle parameter logic described here is the engineering path to satisfying those criteria.

Frequently Asked Questions

**Why does VHP fail to reach occluded surfaces if the bulk chamber concentration reads within specification?**

Bulk chamber concentration — typically measured at a single sensor location — represents the average vapor condition in the accessible volume of the enclosure. Vapor transport to occluded surfaces requires diffusion or bulk airflow into geometrically restricted zones, which is slower and less efficient than transport in open space. The concentration at an occluded surface can be substantially lower than the bulk reading throughout the dwell phase — and since sporicidal efficacy is a function of concentration at the surface (not concentration in the bulk), the cycle can report "in spec" while the occluded surface receives sub-sporicidal exposure. This is why BI placement at occluded locations is required for genuine worst-case validation.

**What is the relationship between condensation and occluded surface failure?**

Condensation and occlusion are distinct mechanisms that interact. Condensation occurs when H₂O₂ vapor contacts a surface cooler than the dew point of the vapor mixture — it converts from gas-phase to liquid-phase at that surface. This depletes the local vapor concentration faster than diffusion can replenish it at the same rate as in the bulk. An occluded surface that is also cooler than the bulk (because it is behind another surface, receives less radiant heat, or is near a cold spot in the RABS structure) is doubly challenged: vapor arrives at it more slowly and condenses more readily when it arrives. The conditioning phase — establishing thermal equilibrium before the injection phase begins — is the cycle design tool that reduces this interaction.

**Can occluded surfaces be eliminated by isolator redesign, or are they unavoidable?**

Some occlusion can be eliminated by design. Surfaces that are recessed, wrap-mounted, or hidden behind equipment can be redesigned or repositioned for better vapor access. EU GMP Annex 1 Section 4.22 implies that design-phase consideration of vapor access is required — "all interior surfaces and the critical zone" must be rendered free from viable microorganisms. But complete elimination of occlusion is rarely achievable in complex pharmaceutical filling configurations, which is why cycle parameter optimization against worst-case surface locations is required alongside any geometric remediation.

**What BI organisms should be used for VHP validation at occluded locations?**

*Geobacillus stearothermophilus* (ATCC 7953 or equivalent certified strain) is the standard biological indicator organism for VHP validation under ISO 22441:2022, selected for its documented resistance to hydrogen peroxide vapor. The same organism used at accessible locations is used at occluded locations — the organism selection does not change based on surface accessibility. What changes is the cycle parameter requirement: the cycle must deliver adequate concentration-time product to achieve the required log reduction at the occluded location, which may require longer dwell, higher concentration, or both compared to what is needed at more accessible surfaces.

**How does parametric control differ from a "longer cycle" as a response to occluded surface risk?**

Simply running a longer cycle — extending dwell time at fixed concentration — increases the concentration-time product at all locations uniformly. This is a crude instrument: it may achieve adequate kill at the occluded surface, but at the cost of increased residue load, longer cycle time, and potentially increased material compatibility stress across the entire system. Parametric control — independent adjustment of conditioning phase, generator output rate, dwell profile, and aeration — allows the cycle to be calibrated specifically for the occluded surface performance deficit without proportionally penalizing all other aspects of the cycle. The ability to, for example, extend the conditioning phase to shift thermal equilibrium toward problematic cold spots, while holding dwell duration constant, is available only in a system where those variables are independently programmable.

**What does FDA's required remediation from Catalent mean for facilities that have not received a warning letter?**

FDA's remediation requirements from Catalent represent the agency's current enforcement standard for VHP decontamination validation in aseptic manufacturing — they are what FDA has said, publicly, a compliant program must include. For facilities that have not received a warning letter, these requirements define the prospective standard: surface exposure mapping to identify occluded locations, BI placement at those locations, retrospective review of interventions that expose the aseptic environment to surfaces outside the validated decontamination zone, and redesign or elimination of high-risk interventions. The relevant question is not whether a warning letter has been received, but whether the current validation program would meet the same scrutiny criteria that produced those requirements.