Uncontrolled Copy Watermarks for GMP Documents: A Guide

An uncontrolled copy watermark is a visible mark, such as "UNCONTROLLED COPY: valid on day of printing only", placed on every page of a GMP document copy that your document control system does not track. It tells the reader to check the current version before relying on the copy. It labels the copy; it does not control it.

Most QA teams meet the question when someone prints an SOP for training, sends a procedure to a contractor, or downloads a specification to read on a train. This guide sets out what the main GMP guidance documents say about copies, what a good uncontrolled copy mark contains, how to add one to a PDF, and the mistakes that cause findings. It is general information, not regulatory advice: your own SOPs and QA team decide the wording and the rules.

Controlled and uncontrolled copies: what is the difference?

A controlled copy is issued under document control. Someone records who received it and when, it is usually numbered, and it is retrieved or replaced when the document is revised. An uncontrolled copy is any other copy: printed or downloaded for information, not tracked, and not updated when the master changes. The reader, not the system, is responsible for checking that it is still current.

EU GMP Chapter 4 (Documentation, the January 2011 revision that came into operation on 30 June 2011) does not use the words "uncontrolled copy", but it sets the expectation behind them. Section 4.1 says that "relationships and control measures for master documents, official copies, data handling and records need to be stated for both hybrid and homogenous systems". Section 4.2 adds that reproducing working documents from master documents "should not allow any error to be introduced through the reproduction process".

The PIC/S guidance PI 041-1, Good Practices for Data Management and Integrity in Regulated GMP/GDP Environments (1 July 2021), is more specific. In section 8.4 it expects document issuance to be controlled by written procedures that include who issued copies and when, "clear means of differentiating approved copies of documents, e.g. by use of a secure stamp, or paper colour code not available in the working areas", and "numbering every distributed copy (e.g.: copy 2 of 2)". WHO's Guideline on data integrity (TRS 1033, Annex 4, 2021) lists similar paper controls in section 10.4, including "controlled issuance and reconciliation of sequentially numbered copies of blank forms with authenticity controls".

What PIC/S says about reference copies

The most useful passage for an uncontrolled copy policy is also in PI 041-1 section 8.4. Reconciliation of printed copies is normally expected, but:

"where copies of documents other than records, (e.g. procedures), are printed for reference only, reconciliation may not be required, providing the documents are time-stamped on generation, and their short-term validity marked on the document."

The same section tells inspectors to check that reference copies "are clearly marked with the date of generation, period of validity and clear indication that they are for reference only and not an official copy, e.g. marked 'uncontrolled when printed'".

Two practical points follow. First, the mark needs a date and a validity period, not just the words "uncontrolled copy". Second, the concession applies to documents other than records. Under its expectations for records, the same section says that "the use of uncontrolled documents should be prohibited by local procedures", because uncontrolled documents increase the potential for omission or loss of critical data and may be easier to falsify. A blank batch record or logbook page should never be issued as an uncontrolled copy.

What should an uncontrolled copy mark say?

Your SOP should fix the wording so every copy looks the same. A typical mark combines:

• Status words, for example UNCONTROLLED COPY, UNCONTROLLED WHEN PRINTED or FOR REFERENCE ONLY.
• The date the copy was generated, in an unambiguous format your site defines.
• The validity period, such as "valid on day of printing only" or "valid for 24 hours from printing". The period is a company decision; PIC/S asks only that it is short-term and marked.
• The document number and version, which should already be in the header of the approved document.
• Page x of y, so a reader can see whether the copy is complete.

Where to put it

Put the mark on every page, not only the cover. A common pattern is a short line of text in the header or footer margin, where it cannot cover content, plus a large, light diagonal watermark across the body so the status is obvious at a glance. Chapter 4 expects documents to stay legible, so check that the watermark does not make numbers, tables or signatures hard to read. If your site already distinguishes masters by paper or ink colour, as PIC/S suggests, print a test page in greyscale to make sure the mark still shows.

Why a watermark is not document control

A watermark marks one file. It does not stop anyone printing the unmarked master, it does not tell you who holds copies, and it does not withdraw a copy when the SOP is revised. Those controls belong to your document management system and the procedures around it: access rights, issuance records, copy numbering, print-time overlays applied by the system, and retrieval of superseded versions.

It also works only one way. Writing "CONTROLLED COPY" on a PDF does not make it one. A copy is controlled because its issue is recorded and it will be replaced when the document changes, not because of the words on the page. Treat any PDF tool, ours included, as a way to apply your agreed wording consistently, inside a process your QA team owns. Our article on online PDF tools in pharma and GMP work covers how to assess a tool before using it for regulated documents.

How to add an uncontrolled copy mark to a PDF

Priya LifePDF can apply both parts of the mark in your browser, without uploading the document:

1. Diagonal watermark. In Add Watermark, replace the default text (it starts as CONFIDENTIAL) with your wording, for example UNCONTROLLED COPY. The defaults are mid grey, 30% opacity and an angle of -45 degrees, which keeps the text underneath readable. Choose All Pages, or switch on tiling to repeat the mark across each page. The text is drawn into the page content of every selected page, so it prints with the document.
2. Date and validity line. In Header & Footer, add a footer such as "Uncontrolled copy. Generated {date}. Valid on day of printing only." and "Page {page} of {total}". The {date} placeholder inserts the date on your device when you process the file, in your device's local date format. If your SOP requires a specific format, such as dd/mm/yyyy, type the date instead.
3. Check the result. Page through the whole file, confirm the mark is on every page and covers nothing important, and print one page to check contrast.

Our step-by-step guide on how to add a watermark to a PDF explains each watermark setting. If you want a status stamp instead, the GMP Stamp tool has fixed presets such as CONTROLLED COPY, DRAFT and SUPERSEDED, but no UNCONTROLLED preset and no editable wording; see how to add a GMP status stamp.

Note what the generated date means: it records when the marked copy was created. If someone prints the marked PDF again a week later, the old date shows how stale the copy is, which is the point of the mark.

Common mistakes that cause problems

• Marking the master. Apply the mark to a copy for distribution, never to the effective document held in your document management system.
• First page only. Single pages get separated from printed documents. Mark every page.
• No date. Without the date of generation and a validity period, the copy does not meet the PIC/S description of a reference copy.
• Covering content. An opaque or dark watermark over a table of limits is a legibility problem, not a safety feature.
• Recording data on it. Results, signatures or checks written on an uncontrolled copy are records made on an uncontrolled form.
• Forgetting electronic copies. A PDF emailed to a contractor is a copy too. Your procedure should say whether exported files are marked, and how.

This article is general information, not regulatory advice. The wording, placement and control of copies are set by your quality management system; check them with your QA team.