WHO PQ eCTD Validation Criteria: Every Rule, Explained


eCTD validation criteria · WHO Prequalification

WHO PQ eCTD validation criteria, every rule explained

All 87 criteria WHO Prequalification applies to eCTD sequences, in plain language: what each rule checks, how severe it is, and how to fix it before you submit.

87criteria
74pass / fail
13best / practice
How WHO Prequalification validates

What happens to a sequence before anyone reads it

Before a sequence is assessed, WHO Prequalification checks it automatically against its published eCTD validation criteria: the backbone and regional files, folder and file naming, checksums, lifecycle operations and PDF properties.

WHO PQ criteria are pass/fail or best practice. A pass/fail failure means the sequence is not accepted and must be corrected. Best-practice findings do not cause rejection but should be corrected.

Reference

Search all WHO PQ criteria

Open any rule to see what it checks and how to fix it. Filter by severity to see only the rules that stop a submission.

87 criteria · 74 pass-fail · 13 best-practice · source: WHO Prequalification eCTD validation criteria (extranet.who.int/prequal)

WHOPQT M1 DTD

A.01The specified filename is used for the WHO-PQT M1 DTDPass-Fail

What it checks. File is named whopqt-regional.dtd

A.02The file is placed in the correct folder for the WHO-PQT M1 DTDPass-Fail

What it checks. In the folder /XXXX/util/dtd

A.03A currently acceptable version of the WHO-PQT M1 DTD is used (checksum matches the published value)Pass-Fail

What it checks. A currently acceptable version of the DTD is used, with reference to any transition guidance. The checksum for the DTD for WHO-PQT M1 v1.0 is correct.

A.04The version number of the WHO-PQT M1 DTD used in the sequence being tested is higher than or equal to the version of the DTD used in the sequence numerically preceding the incoming sequence in the eCTD lifecycle.Pass-Fail

What it checks. With reference to any transition guidance, going back to an earlier version WHO-PQT M1 DTD is not allowed when a newer version has already been used for that eCTD. 'The sequence numerically preceding the incoming sequence in the eCTD lifecycle' refers to the highest numbered sequence that is numerically lower than the incoming sequence. For example if 0086 used DTD 1.0, 0087 was DTD 1.1, then 0088 must be built in either DTD 1.1 or higher. The criterion should only be tested if there are sequences with lower sequence numbers present.

A.05The version number of the WHO-PQT M1 DTD used in the sequence being tested is lower than or equal to the version of the DTD used in the sequence numerically succeeding the incoming sequence in the eCTD lifecycle.Pass-Fail

What it checks. This rule specifically tests in situations where sequences have been submitted out of order. 'The sequence numerically succeeding the incoming sequence in the eCTD lifecycle' refers to the lowest numbered sequence that is numerically higher than the incoming sequence. For example if 0010 used DTD 1.0, and 0012 was DTD 1.1, then 0011 must be built in either DTD 1.0 or 1.1. The criterion should only be tested if there are sequences with higher sequence numbers present.

A.06The specified filename is used for the WHO-PQT M1 leaf MOD filePass-Fail

What it checks. File is named whopqt-leaf.mod

A.07The file WHO-PQT M1 leaf MOD file is placed in the correct folderPass-Fail

What it checks. In the folder /XXXX/util/dtd

A.08The checksum for the whopqt-leaf.mod file used must match the published checksum for the who-leaf.mod file associated with the DTD used for the sequencePass-Fail

What it checks. The checksum for whopqt-leaf.mod must match the current version from WHO-PQT eCTD Module 1 v1.0.

A.09The specified filename is used for the WHO-PQT M1 envelope MOD filePass-Fail

What it checks. File is named whopqt-envelope.mod

A.10The WHO-PQT M1 envelope MOD file is placed in the correct folderPass-Fail

What it checks. In the folder /XXXX/util/dtd

A.11The checksum for the whopqt-envelope.mod file used must match the published checksum for the whopqt-envelope.mod file associated with the DTD used for the sequencePass-Fail

What it checks. The checksum for whopqt-envelope.mod must match the current version from WHO-PQT eCTD Module 1 v1.0

ICH DTD

A.12The specified filename for the ICH DTD is usedPass-Fail

What it checks. File is named ich-ectd-3-2.dtd

A.13The ICH DTD file is placed in the correct folderPass-Fail

What it checks. In the folder /XXXX/util/dtd

A.14A currently acceptable version of the ICH DTD is used (checksum matches the published value)Pass-Fail

What it checks. Currently acceptable versions are described in the current ICH eCTD Specification. (The checksum for the DTD in eCTD v3.2 (ich-ectd-3-2.dtd) is 1d6f631cc6b6357f0f4fe378e5f79a27)

A.15The version number of the ICH DTD used in the sequence being tested is higher than or equal to the version of the DTD used in the sequence numerically preceding the incoming sequence in the eCTD lifecycle.Pass-Fail

What it checks. With reference to any transition guidance, going back to an earlier version is not allowed when a newer version has already been used for that eCTD. 'The sequence numerically preceding the incoming sequence in the eCTD lifecycle' refers to the highest numbered sequence that is numerically lower than the incoming sequence. The criterion should only be tested if there are sequences with lower sequence numbers present.

A.16The version number of the ICH DTD used in the sequence being tested is lower than or equal to the version of the DTD used in the sequence numerically succeeding the incoming sequence in the eCTD lifecycle.Pass-Fail

What it checks. This rule specifically tests in situations where sequences have been submitted out of order. 'The sequence numerically succeeding the incoming sequence in the eCTD lifecycle' refers to the lowest numbered sequence that is numerically higher than the incoming sequence. The criterion should only be tested if there are sequences with higher sequence numbers present.

Index MD5 txt

A.17The Index MD5 file is placed in the correct folderPass-Fail

What it checks. The root folder /XXXX

A.18The file Index MD5 file is named correctlyPass-Fail

What it checks. The file is named index-md5.txt

A.19The regenerated checksum for the index.xml matches the value in the file index-md5.txt.Pass-Fail

Index XML

B.01The index.xml is placed in the correct folderPass-Fail

What it checks. The root folder /XXXX

B.02The index.xml file is named correctlyPass-Fail

What it checks. File is named index.xml

B.03The index.xml file is well formedPass-Fail

What it checks. Well formed with respect to the rules of the XML specification

B.04The index.xml file is validPass-Fail

What it checks. Valid with respect to the ICH eCTD DTD file included in the util/dtd folder

B.05The reference to the DTD in index.xml is directed to the DTD provided in the util folder.Pass-Fail

What it checks. This is the ICH DTD in /XXXX/util/dtd, and tested for validity by rules A.12 - A.16. A valid reference means a URI - see http://www.w3.org/TR/xml/ and http://www.ietf.org/rfc/rfc3986.txt (version 2005 page 22, section 3.3).

WHOPQT regional XML

B.06The whopqt-regional.xml file is placed in the correct folderPass-Fail

What it checks. The folder /XXXX/m1/whopqt

B.07The whopqt-regional.xml file is named correctlyPass-Fail

What it checks. File is named whopqt-regional.xml

B.08The whopqt-regional.xml file is well formedPass-Fail

What it checks. Well formed with respect to the rules of the XML specification

B.09The whopqt-regional.xml file is validPass-Fail

What it checks. Valid with respect to the WHO-PQT Module 1 DTD file included in the util/dtd folder.

B.10The reference to the DTD in whopqt-regional.xml is directed to the DTD within the util-folder.Pass-Fail

What it checks. This is the WHO-PQT Regional DTD and tested for validity by rules A.01 - A.05 A valid reference means a URI - see http://www.w3.org/TR/xml/ and http://www.ietf.org/rfc/rfc3986.txt (version 2005 page 22, section 3.3)

Leaf Attributes

C.01The leaf attribute 'checksum-type' has a value of md5 or MD5Pass-Fail
C.02The regenerated checksum for each file matches the value in the leaf attribute 'checksum'Pass-Fail

What it checks. Note that if the content file is in an earlier sequence within the same eCTD application then the checksum can only be regenerated if access to this file is available. The MD5 checksum is not case sensitive.

C.03For every leaf the 'title' attribute is not emptyPass-Fail
C.04All leaves with an operation attribute value of new, replace or append must have a value for the cross reference (xlink:href)Pass-Fail

What it checks. The value for the cross reference (xlink:href) should be valid, and not contain any illegal characters. (Legal characters are lower case characters a-z, digits 0-9 and hyphens, as documented in the ICH eCTD specification). A valid reference means a URI - see http://www.w3.org/TR/xml/ and http://www.ietf.org/rfc/rfc3986.txt (version 2005 page 22, section 3.3).

C.05All leaves with an operation attribute value of delete must have no value for the cross reference (xlink:href)Pass-Fail

What it checks. The attribute does not need to be included, or can be declared but with a null value.

C.06The file referenced by the cross reference (xlink:href) must exist in the same or a previously submitted sequence within the same eCTD applicationPass-Fail

What it checks. The link within the XML leaf element is valid, i.e. the target exists.

C.07All leaves with an operation attribute value of replace, delete or append must have a value for modified-filePass-Fail
C.08All leaves with an operation attribute value of new must have no value for modified-filePass-Fail

What it checks. The attribute does not need to be included, or can be declared but with a null value.

C.09The leaf referenced by the modified file must exist in a previously submitted sequence within the same eCTD application.Pass-Fail
C.10For all leaves (except leaves within node extensions and leaves in module 3.2.A) with an operation attribute value of replace, delete or append, the modified file must be present in the same CTD section of the dossier. Note: Using the operation attribute 'delete' to remove content placed in m1-additional-data is exempt from this rule.Pass-Fail

What it checks. Same CTD section' refers to the position in the table of contents. Sections are defined by the CTD and also by attributes in the eCTD. For example, applicants cannot replace content in the application form section with revised content that is being provided in the cover letter section. eCTD attributes also create applicant defined sections. For example, each 'substance' or 'manufacturer' attribute in m3-2-s-drug-substance, or 'product-name' attribute in m3-2-p-drug-product will create a new CTD section, and lifecycle between these sections is also not allowed.

C.11Two leaf elements should not have the same leaf ID.Pass-Fail

What it checks. ID must be unique within each sequence.

C.12For all leaves with an operation attribute value of replace, delete or append the modified file must not have been replaced or deleted by any other leaf element in any sequence including the current one.Pass-Fail

What it checks. Documents can be replaced or deleted just once. The modified file must not have been subject to another replace or delete operation in any of the available sequences.

ICH attributes

C.13For all leaves within node extensions or module 3.2.A with an operation attribute value of replace, delete or append, the modified file should be present in the same node extension or attribute-defined section.Best-Practice

What it checks. The definition of 'same CTD section' is as in criterion C.10. If the node extension is not in the same section the criterion C.10 still applies.

C.14ICH attributes must not contain leading or trailing spaces, nor start or end with hyphens.Best-Practice

What it checks. The problem is with attributes in the XML that define re-useable sections. Hyphens or spaces at the beginning or end of a attribute name are not allowed.

PDF Files

D.01No PDF has been created and saved as version 1.3 or earlierPass-Fail

What it checks. PDF 1.3 or earlier is not acceptable for technical reasons. No exceptions will be made. For example, if a literature reference is received in PDF 1.3 or earlier, then the applicant must provide it in PDF 1.4, 1.5, 1.6 or 1.7, even if this means copying the full text into a new document or even getting a paper copy and scanning it. Further guidance is provided about the best ways to check the PDF version in the comment to rule D.06

D.02There is no security setting to open any individual filePass-Fail

What it checks. This includes passwords, certificate security, or adobe policy server settings. This test should not be used to test for corrupted files, instead see D.05 corrupted files.

D.03There are no further security settings applied to any individual file (except for files in Modules 1.0, 1.2.1, 3.3, 4.3 and 5.4)Pass-Fail

What it checks. All 'restrictions' should be 'allowed' when viewing the Document Preferences > Security settings. This includes any of the following document restrictions: printing, changing the document, document assembly, content copying, content copying for accessibility, page extraction, filling of form fields, signing, creation of template pages. Specific security settings of files in m1.0 and m1.2.1 are tested in criterion (D.04. security setting)

D.04Individual files in section 1.0 and 1.2.1 have no security settings except for the following: Changing the document Document assembly Page extraction Commenting Creation of template pages.Pass-Fail

What it checks. These limited security settings are allowable for the application form, because they are necessary for the functioning of the application form and similar forms.

D.05The submission does not contain corrupted filesPass-Fail

What it checks. This can be achieved by opening a PDF file in software which is compliant to ISO 32000-1; if the file opens without error, the PDF file is considered to be conformant. Absence of detection of conformance means corrupted PDF.

D.06Files have been created and saved as PDF 1.4, 1.5, 1.6, or PDF 1.7Best-Practice

What it checks. For PDF files with apparent versions of 1.3 or earlier, the version information should be taken from the first eight characters from the first line of the header in the file. For versions 1.4 and higher, the version should be taken from the document catalogue dictionary, if present. If both the header information and the catalogue information are present, then the document catalogue dictionary information takes precedent, see PDF 32000-1:2008 specification, chapter 7.5.2 for further details. Only the PDF versions specified are recommended by ICH. This test is important due to archiving and also that PDF files can be correctly open and read by assessors.

D.07Hyperlinks and bookmarks within documents, or between documents within the same sequence, have a valid target.Best-Practice

What it checks. Only links that open in the same software application are tested. Other links (e.g. web links and e-mail addresses) are not considered to link to essential content and should not be tested. If this BP criterion is not met, the assessor might not be able to conveniently find the relevant documents and read the submission as intended by the applicant.

D.08Hyperlinks and bookmarks to destinations in a different sequence in the same eCTD dossier have a valid target.Best-Practice

What it checks. Only links that open in the same software application are tested. Other links (e.g. web links and e-mail addresses) are not considered to link to essential content and should not be tested. If this BP criterion is not met, the assessor might not be able to conveniently find the relevant documents and read the submission as intended by the applicant.

D.09All hyperlinks and bookmarks are set to 'inherit zoom'Best-Practice

What it checks. Using 'inherit zoom' ensures that assessors do not need to spend time repeatedly setting the view when using the links for navigation to new documents.

D.10PDFs except the files from section 1.0 and 1.2.1 must have 'Fast Web View' activeBest-Practice

What it checks. The use of 'Fast Web View' helps ensure optimum performance of the review system. However, application form files are exempt from this rule as they cannot be provided as fast web view version.

D.11PDF Document Properties for the Initial View are set for 'Page Layout = Default' and 'Magnification = Default'Best-Practice

What it checks. Setting page layout and magnification to default allows the assessor to set his/her own preferences to define how the PDF is displayed, rather than the settings being taken from each individual PDF file.

D.12All PDF hyperlinks and bookmarks are relativeBest-Practice

What it checks. Relative links and bookmarks will continue to work when the submission is copied and loaded into new a environment at the agency side. Absolute (rooted) links and bookmarks will not.

D.13The bookmarks pane should be visible if bookmarks are included within a PDF documentBest-Practice

What it checks. Fulfilling this BP criterion make it more convenient for the assessor in knowing there are bookmarks without opening the pane.

D.14The bookmarks pane should not be visible if there are no bookmarks included within a PDF documentBest-Practice

What it checks. Fulfilling this BP criterion makes it more convenient for the assessor in knowing there are no bookmarks without opening the pane to check.

D.15All hyperlinks and bookmarks between two PDFs must be configured as specified in ISO 32000-1:2008Best-Practice

What it checks. Consult the PDF specifications as in ISO 32000-1:2008 for section 7.11.2.3 on how the paths need to be written in PDF. The paths cannot contain back slashes, only forward slashes. See also 12.6.4.3 for the remote goto action. The link to another PDF cannot be made with javascript code in the PDF. Please note, not all PDF tools display the path for the link with forward slashes. However, the presence of a backslash in a link as displayed in a PDF viewer or editor does not necessarily mean that the link is NOT according to the ISO specifications. Therefore, tests for backslashes must be performed in eCTD validation software. This BP criterion is important because links who are not according to section 7.11.2.3 may not work on certain devices, such as non-Windows operating systems or tablets.

Envelope Attributes

E.01The UUID is well formed according to ISO/IEC 11578:1996 and ITU-T Rec X.667 | ISO/IEC 9834-8:2005Pass-Fail

What it checks. This criterion will test whether the UUID is well formed.

E.02The UUID of a sequence must be identical to the one in the previous sequence.Pass-Fail

What it checks. This rule checks that the UUID is correct and the sequence is being loaded into the correct eCTD Application.

E.03If the submission unit type is 'initial' or 'reformat' then the related-sequence attribute must have a value equal to the current sequence.Pass-Fail

What it checks. Refer to WHOPQT Module 1 eCTD Specification. When submitting a first submission initialising a regulatory activity or proving a reformatted application, the related sequence attribute should be populated with the same number of that current sequence.

E.04If the submission unit type is not equal to 'initial' or 'reformat' then the entry for related sequence must not be equal to the value for the current sequence.Pass-Fail

What it checks. Refer to WHOPQT Module 1 eCTD Specification. When submitting additional lifecycle sequences within an ongoing regulatory activity, the related sequence attribute should be populated with the number of the sequence that started this regulatory activity.

E.06The sequence folder name is a 4 digit numberPass-Fail

What it checks. i.e. numbers between 0000 and 9999

E.07The sequence number (folder name) has not already been usedPass-Fail
E.08The sequence folder name matches the sequence number in the WHOPTQ envelope in whopqt-regional.xmlPass-Fail

Files/Folders

F.01All the lowest level heading elements in the XML (including node-extensions) included in the submission contain at least one leafPass-Fail
F.07The files provided in the folders for Module 1 are in acceptable formatsPass-Fail

What it checks. Refer to table in WHOPQT Module 1 eCTD Specification: this is XML (where a specification exists), PDF, JPEG/JPG, PNG, SVG and GIF.

F.08The files provided in the folders for Module 2-5 are in acceptable formatsPass-Fail

What it checks. ICH eCTD Specification 3.2.2 (Appendix 7: Specification for Submission Format) lists the documents allowed in Module 2-5: PDF, SVG (for graphics) and XML for the backbone (index.xml and whopqt-regional.xml) used in eCTD

F.09Total file folder path length must not exceed 180 charactersPass-Fail

What it checks. Counting starts from the first digit of the sequence number in the sequence number folder name, and includes the filename.

F.10File names, including the extension, must not exceed 64 charactersPass-Fail
F.11Folder names must not exceed 64 charactersPass-Fail
F.12Only valid characters are used in file namesPass-Fail

What it checks. Lower case characters a-z, digits 0-9 and hyphens are allowed (as documented in the ICH eCTD specification). This test should only be applied to the file names in the file system, for checks on the XML see test C.04.

F.13Only valid characters are used in folder namesPass-Fail

What it checks. Lower case characters a-z, digits 0-9 and hyphens are allowed (as documented in the ICH eCTD specification). This test should only be applied to the folder names in the file system, for checks on the XML see test C.04.

F.14There are no unreferenced files in M1, M2, M3, M4 and M5 foldersPass-Fail

What it checks. Including all subfolders within the m1-m5 folders but excluding 'util' folder and subfolders

F.15The only files in the sequence folder (/XXXX/...) are the index.xml and index-md5.txtPass-Fail
F.16There are no empty foldersPass-Fail
F.17Individual files do not exceed 500 MB in sizeBest-Practice

What it checks. Any deviation should always be reported by the validating tool. Files larger than 500 MB should be avoided due to potential archiving issues and to make the assessment easier.

F.18The recommended folder structure and folder names in the ICH eCTD Specification and WHOPQT Module 1 eCTD Specification are usedPass-Fail

What it checks. Any deviation, including additional subfolders, should always be reported by the validating tool. Although navigation of an eCTD is typically carried out via the XML backbone, it is also helpful if the underlying files and folders follow the ICH and WHOPQT naming guidance.

F.19The recommended file names from the ICH eCTD Specification and WHOPQT Module 1 eCTD Specification are used for all files.Pass-Fail

What it checks. Note that the components of the file names in italics in Appendix 4 of the ICH eCTD Specification are to be specified by the applicant (i.e. this is variable text). The potential presence of STF files in m4 or m5 should not be tested. Although navigation of an eCTD is typically carried out via the XML backbone, it is also helpful if the underlying files and folders follow the ICH and WHOPQT naming guidance.

Valid Values

G.01The Application Type attribute value is valid .Pass-Fail

What it checks. The Application Type attribute value must be a valid version according the Application-Type.xml code definition file

G.02The Application Sub Type attribute value is valid.Pass-Fail

What it checks. The Application Type attribute value must be a valid version according the Application-Sub-Type.xml code definition file

G.03The Product Type attribute value is valid.Pass-Fail

What it checks. The Product Type attribute value must be a valid version according the Product-Type.xml code definition file

G.04The Product Sub Type attribute value is valid.Pass-Fail

What it checks. The Product Sub Type attribute value must be a valid version according the Product-Sub-Type.xml code definition file.

G.05The Submission Unit Type attribute value is valid.Pass-Fail

What it checks. The Submission Unit Type attribute value must be a valid version according the Submission-Unit-Type.xml code definition file

G.06Only specified combination for Product type, Application type and Application sub-type are valid.Pass-Fail

What it checks. Allowed combinations from WHO's ePQS matrix of Product and Application types, 18 October 2024 (extranet.who.int/prequal/node/31509). SRA-IN is struck through in that matrix and is not allowed. '-' means no value is expected.

G.07Only specified conbinations of Application type and Submission Unit type are valid for the first eCTD formatted submission for a product.Pass-Fail

What it checks. All applications to re-format an existing product to the eCTD format must be submitted as application type "Post-PQ change", application subtype "eCTD baseline" and submission unit type "reformat".

Node extensions

H.03For every node-extension the 'title' attribute is not emptyPass-Fail
Validate early

Run the criteria while the sequence is being built

A validation report run the evening before a deadline tells you what is wrong when there is no time left to fix it. The same check run every time the sequence changes turns each finding into a few minutes of work for the person who just made the change.

DnXT Publisher runs WHO Prequalification’s criteria at WHO Prequalification’s own severity, continuously while a sequence is assembled, and on sequences you import from partners or previous vendors. The same engine covers 16 eCTD regions and more than 2,500 criteria.

Questions

Frequently asked

What does a failed WHO PQ eCTD validation rule mean?

A pass/fail failure means the sequence is not accepted until it is corrected. A best-practice finding does not stop the submission but should be fixed.

How do I validate a sequence before sending it to WHO Prequalification?

Run it through a validator that applies WHO Prequalification’s current criteria at WHO Prequalification’s own severity, fix every finding that stops the submission, review the rest, and keep the validation report with the sequence you send.

How current is this list?

It is generated from the criteria DnXT runs in production, which track WHO Prequalification’s published criteria. Always confirm against WHO Prequalification’s current documents before relying on a single rule.

Catch every WHO PQ finding before WHO Prequalification does

See DnXT Publisher validate a sequence against WHO Prequalification’s criteria while it is being built.

Criteria are summarised from WHO Prequalification’s published validation criteria for information. WHO Prequalification’s own documents are authoritative.