GMP+ validity: how long is a GMP+ certificate valid?

A GMP+ certificate is valid for up to three years. The period starts from the positive certification decision of the recognised certification body. Within those three years, the company must pass two interim audits. Recertification must be finished before the certificate expires. This is set out in the GMP+ document CR 2.0 on assessment and certification, which you can find on gmpplus.org . Ask your certification body what a missed deadline means for your certificate.

Validity is separate from the requirements per module. A company that meets the requirements must also meet the audit deadlines. So there are two things to manage: the content of your system and the planning of the audits.

In short: valid for up to three years, with audits after 12 and 24 months. Plan recertification before the end date on the certificate, not after it.

How long is a GMP+ certificate valid?

The rule in CR 2.0 is straightforward. A certificate is valid for up to three years, counted from the positive certification decision. The certification cycle also lasts up to three years.

For inland waterway and short sea shipping of animal feed, a shorter period of up to two years applies.

Element	Period	Explanation
Maximum validity of the certificate	3 years	From the positive certification decision
Maximum certification cycle	3 years	Initial audit, interim audits and recertification
Inland waterway and short sea shipping	2 years	Shorter validity for these forms of transport
Temporary acceptance	4 months	The company is working towards certification, no GMP+ logo

When do the interim audits take place?

Between the initial audit and recertification there are two surveillance audits. Each has a fixed timeframe, counted from the certification decision:

The first surveillance audit must take place 12 months, plus or minus two months, after the certification decision.
The second surveillance audit must take place 24 months, plus or minus two months, after the certification decision.

In addition, unannounced surveillance audits exist. Separate rules in CR 2.0 apply to their conditions, such as the advance notice period (section 5.2.1.4.2). A company therefore cannot always see exactly when the auditor will arrive.

How does recertification work?

Recertification is a new assessment before the end date. Ask your certification body which deadlines apply. The GMP+ database is also relevant at that point.

An example, fictional: Diervoederbedrijf Van Dam BV receives its initial certificate on 1 March 2026. The first surveillance audit falls around March 2027, the second around March 2028. The certificate is then valid until 1 March 2029. Van Dam does not want to do recertification on the very last day. It schedules the audit for January 2029, so there is room for findings and the database update.

Plan recertification at least six months ahead

Request a quote from your certification body and record the date in your calendar. This prevents the certificate from expiring while the audit is still running.

Carry out your own internal audit beforehand

Go through the requirements per module and close any open points. A second improvement cycle is tight if recertification falls just before the end date.

Check the date in the GMP+ database

After the audit, check yourself that the status and the end date in the database are correct.

What happens when a certificate expires?

An expired certificate means the company is no longer GMP+ certified. It may then not offer GMP+ assured products or services. Ask your certification body what is needed after that.

This is also a problem for customers. They check the status in the database before they do business, and an expired certificate does not appear as certified. As a result, customers may end contracts or look for a new supplier themselves.

A company that is working towards certification may receive temporary acceptance. This lasts up to four months, and the company may not yet use the GMP+ logo.

What happens when there is a finding during the audit?

Findings during an audit have direct consequences for validity. CR 2.0 uses three categories: minor, major and critical. A critical finding can lead to suspension or withdrawal. The full overview is on the GMP+ audit page.

A suspension lasts up to three months. During that period, the company may not supply GMP+ assured products or services. The suspension is lifted if the certification body closes the critical finding during a stricter follow-up audit. If that does not happen, the certificate is withdrawn. A withdrawn certificate excludes the company from the scheme for at least one year.

A finding that you do not close in time can have more serious consequences. Plan the corrective actions immediately after the audit.

How does validity change when something changes?

A change in the company may require an interim notification. Think of a new site, a different production scope or a takeover. You must pass these changes on to your certification body. Which changes apply and how quickly you must report them is set out in the scheme documents. Ask your certification body if you are unsure.

Frequently asked questions

Can I extend a GMP+ certificate without a new audit?

No. Extension is a recertification, with an assessment by a recognised certification body.

Does my certificate lapse if I miss a surveillance audit?

Contact your certification body as soon as possible to agree a new date. Also ask what the missed audit means for your certificate.

Who checks whether my validity date is correct?

Your certification body sets the date and updates the GMP+ database. Check the status and end date yourself in the GMP+ database, especially after an audit.