Content updated: .
Sterile fill-finish is the last and most exposed step in making an injectable: the drug product is metered into vials, syringes or cartridges, stoppered, capped and packed, all inside or behind a controlled environment. It is also where the most automation, the most moving mechanism and the most operator intervention collide with the tightest contamination requirements anywhere in the plant. So the safety engineer on this line carries an unusual brief — the guard has to protect the person and respect the sterile boundary.
The two rulebooks are genuinely separate, and the most common mistake is to assume one covers the other. It does not. Let us take them in turn, then show where they meet on the machine.
Annex 1 sets the cleanliness brief, not the safety brief
The revised EU GMP Annex 1, “Manufacture of Sterile Medicinal Products,” became applicable on 25 August 2023 (with point 8.123 following on 25 August 2024). Its through-line is the Contamination Control Strategy (CCS) — a documented, holistic view of every source of contamination and every control that addresses it — together with a strong push toward barrier technology: isolators and restricted access barrier systems (RABS) to separate people from the critical zone.
What Annex 1 does not do is tell you which light curtain to buy or where to put a safety scanner. It does, however, constrain those choices heavily, because anything you bolt onto the line becomes a surface that has to be cleaned, a potential particle source, and a feature in your CCS. A safety device with ledges that trap cleaning fluid, threaded fasteners that harbour biofilm, or a housing that cannot take the sanitiser regime is a contamination liability even if it is a perfect guard.
Machinery requirements set the safety brief
Operator protection on the same line comes from the machine-safety stack, not from GMP. In the EU that means the EU Machinery Regulation (EU) 2023/1230, which becomes mandatory on 20 January 2027 and replaces Machinery Directive 2006/42/EC. Relevant technical standards include the following; check applicable EN editions and Official Journal references separately: ISO 12100 for risk assessment, IEC 61496-1 and -2 for electro-sensitive protective equipment (ESPE / safety light curtains), IEC 61496-3 for safety laser scanners, ISO 13855 for the safety-distance calculation, and ISO 13849-1 (or IEC 62061) for safety-control design and verification. The required target comes from the risk assessment and applicable machine requirements.
None of that changes because the product is a sterile drug. A point-of-operation hazard on a capper or a cartoner is assessed and guarded exactly as it would be on any packaging machine. The pharma context changes the physical form of the device you may use, not the safety logic behind it.
Where the two briefs meet: cleanability of the sensor
This is the practical core of the article. The sensor that satisfies both rulebooks is the one that is fully cleanable while still being a compliant guard. In practice that points at the same design language the food-and-beverage industry already standardised on for washdown lines:
- Smooth, flush housings with no liquid-trapping ledges, recesses or exposed fastener pockets — nothing for residue or biofilm to sit in.
- Stainless or washdown-grade enclosures that have documented compatibility with the actual sanitiser, concentration, temperature and exposure duration.
- High ingress protection. Specify the actual cleaning regime; where high-pressure hot-water jets are used, an IP69K rating (per ISO 20653) specifically covers the high-pressure, high-temperature close-range jets that ordinary IP65/IP67 devices are not tested against.
- Robust optical-window sealing, so repeated wet cleaning does not creep behind the lens and fog or fail the device.
The point worth making to a validation engineer is that this is not a new product category invented for pharma. It is the food-grade washdown safety light curtain, which can provide relevant design ideas. Suitability does not transfer automatically: sterile-line materials, mounting and chemical exposure need project-specific qualification.
Guarding around isolators and RABS
Barrier technology changes where the safety sensors live. The fill zone itself is increasingly inside an isolator or behind a RABS, so assess both the barrier and glove-port access for machine hazards. A contamination barrier is not automatically a validated machine guard. Electro-sensitive protective equipment therefore tends to sit at the interfaces:
- Closed isolator: the sealed barrier controls the critical zone; its personnel-protection function requires a separate assessment. Safety sensors guard the loading and unloading machinery, transfer ports, and any open-door maintenance or intervention position — outside the sealed decontamination volume.
- RABS: doors are normally closed during production. Opening a door is the access event, so guard-locking interlocks and, where the risk assessment calls for it, a light curtain or packaging-zone protective-device assessment address that event.
- Upstream / downstream: depyrogenation tunnel exits, cappers, labellers, tray loaders and cartoners are conventional machine-guarding problems — point-of-operation light curtains and perimeter scanners, chosen and placed per ISO 13855.
The governing design rule is simple to state and easy to violate: adding a safety sensor must not breach the barrier classification or introduce an uncleanable feature. If mounting a curtain means drilling a new penetration through a grade boundary, or a bracket creates a horizontal ledge inside a graded area, the safety win has bought a GMP problem. Plan the mounting with the cleaning and qualification team, not after them.
The contamination-vs-access tension
Every point where a person can reach a moving machine is also a point where the person — the largest particle source in any cleanroom — can enter a controlled zone. The contamination-control strategy should minimize interventions and justify barrier choices. The machine risk assessment separately determines guarding, isolation and permitted access; there is no universal identical sequence of devices for both disciplines. A guard-locked door that keeps people out during production is good for both the operator and the product; a light curtain that allows quick, frequent manual reach-in may be convenient for throughput but works against the contamination strategy.
So on an aseptic line the two disciplines actually pull in the same direction more often than not: design out the intervention. Where access genuinely cannot be removed — format changeover, fault clearance, in-process loading — the residual hazard is covered by ESPE chosen to support the closed-barrier philosophy: cleanable, flush, no new openings, and interlocked so the machine is in a safe state before the boundary is opened.
A note on VHP and material compatibility
Isolators are commonly bio-decontaminated with vaporised hydrogen peroxide (VHP / H2O2). If a sensor will ever be exposed to that cycle, material compatibility becomes a project-specific question, not a catalogue line. Confirm the housing material, window material and seal compatibility with your specific sanitiser and peroxide concentrations, and — wherever the safety function allows — place the device outside the sealed decontamination volume so it is not in the VHP exposure at all. Treat any “VHP-compatible” claim as something to verify against published materials of construction, not assume.
How DAIDISIKE devices fit, factually
Compare the DAIDISIKE safety light curtain families for the defined access hazard, then obtain the exact model's safety, material and enclosure evidence. DLD and SDLD are non-safety LiDAR and cannot provide perimeter personnel protection. ST27 is separately confirmed Type 3, PL d and SIL 2, but no pharmaceutical or VHP qualification follows from those ratings.
Check the actual sensor output and receiving device manual. A supported OSSD pair must be evaluated by compatible rated logic; ordinary process networking and a generic DA31 recommendation do not establish safety-bus capability. No native fieldbus, EDM or VHP qualification is inferred for a model from the catalog. Request materials of construction and validate the installed arrangement.
Evidence to collect before qualification
- Hazards and access modes, including glove ports, transfer openings and maintenance.
- Sensor and controller manuals, safety evidence and the actual stop/reset circuit.
- Housing, optical-window, seal and cable materials, plus cleaning-agent concentration, temperature and cycle exposure.
- Mounting drawings, contamination-control assessment, protective-function tests and change records.