ICH Is the Bridge to EU GMP

How Cannabis Operators Build Once for Europe's Grown-Up Medical Market

By Andrew Samann and Kate Evans, PhD · Intrepid Scientific · 2026-06-24

Companion pieces: Build Once, Build to the Highest Bar (why you build one quality system to the highest common bar) · One Pathway, Every Regulator (the method that absorbs any standard) · EU GMP vs. FDA GMP (the clause-level map of where the two rulebooks part company).

0. Read-Me-First Summary

In a recent essay for Business of Cannabis — "Europe's Medical Cannabis Market Has Grown Up, Now Its Supply Chain Needs To" — Oskar Fletcher of Blossom Pharma made a case we agree with almost entirely. Europe's medical cannabis market has scaled past the pilot phase: by his account, German imports more than doubled in 2025, the UK became the continent's second-largest market, and the European market is projected past €1.5bn in 2026. Growth, he argues, now exposes the part of the business nobody puts on a pitch deck — supplier qualification, GACP/GMP alignment, analytical testing, batch documentation, EU-GMP manufacturing, QP release, stability programmes, distribution. "A grown-up market needs grown-up infrastructure."

He is right about the destination. What the essay leaves out — deliberately, because it is an operator's positioning piece, not a how-to — is the road. EU GMP is where you have to arrive. It does not tell a cannabis operator how to build to it without ripping out and rebuilding the quality system they already have.

This piece supplies that road, and its name is ICH.

The International Council for Harmonisation publishes the technical guidelines — Q7, Q8, Q9, Q10, Q11, Q12, the Q1 stability series, Q2 and Q14 for analytical methods, Q3C and Q3D for impurities — that the world's pharmaceutical regulators agreed to share. EU GMP did not invent its science from scratch. It adopted ICH. EudraLex Volume 4 is, in large part, ICH guidance carried into European law. Build your quality system, your stability program, your risk framework, and your analytical methods to ICH from the start, and you are building to the structural bones of EU GMP — once, to the highest bar, for every fragmented European market at the same time.

That is the bridge. Below, we walk it span by span — and we are honest about the far end, where Europe departs from ICH and the genuinely EU-specific work begins.

1. The market grew up. The "how" got left out.

Fletcher's diagnosis is the correct one, and it is worth restating because it frames everything that follows: in the first phase, the European cannabis industry rewarded licence acquisition and market-entry narratives. The next phase rewards operators — companies that can move product reliably through a compliant pharmaceutical supply chain, repeatedly, without losing control of quality.

He also makes a point international cultivators routinely underestimate: Europe is not one market. Germany is not the UK; the UK is not Poland. Each has its own access model, prescribing behaviour, pharmacy structure, import process, and regulator. A product that is commercially attractive in Canada or Australia may still require significant work before it is ready for European medical channels.

All true. But notice what the essay does not say. It lists eleven operational bottlenecks — and then stops at the edge of the hard question every operator actually faces: given my cultivation-grade or state-compliance-grade operation today, by what method do I become the thing EU GMP demands? "Hire a CMO" is a real answer for manufacturing capacity. It is not an answer for the quality system, the data, the methods, and the documentation that an operator has to own regardless of who runs the autoclave.

The answer to that question is not a vendor. It is a framework.

2. EU GMP is the destination. ICH is the road.

Here is the fact that reframes the whole problem.

The European Union is a founding regulatory member of ICH. So is the UK's MHRA, post-Brexit. So are the FDA, Health Canada, Japan's PMDA, Swissmedic, and others. ICH exists precisely so that these regulators do not each write their own incompatible science — they harmonise it once, publish it as the Q-series (quality), and then each region implements it in local law.

EudraLex Volume 4 — the EU GMP rulebook — is that local implementation. And it is built on ICH at the load-bearing points:

Volume 4, Part II — the GMP requirements for active substances — is ICH Q7. Not "based on." It is the same document, adopted.
The Pharmaceutical Quality System that EU GMP Chapter 1 requires every manufacturer to operate is ICH Q10, published as part of Volume 4, Part III.
The quality risk management woven through EU GMP — the expectation that you make risk-based, documented decisions rather than blanket ones — is ICH Q9(R1), also in Part III.
The stability data that gates shelf-life and release traces to the ICH Q1A–Q1F series.
The analytical method validation an EU inspector expects traces to ICH Q2(R2), with method development now covered by ICH Q14.
The impurity limits that cannabis labs already wrestle with map directly: residual solvents to ICH Q3C, elemental impurities (heavy metals) to ICH Q3D.

Read that list again with a cannabis operator's eyes. The things Fletcher calls bottlenecks — testing, batch documentation, stability, manufacturing, supplier qualification — are not a wall of bespoke European rules. They are ICH guidelines wearing a EudraLex jacket. If you build to ICH, you are already most of the way across.

3. Why ICH is the build-once foundation

This is where Fletcher's "Europe is not one market" point becomes an argument for ICH rather than a complication.

Yes, Germany, the UK, Poland and the rest diverge — at the access layer. Prescribing rules, pharmacy structure, import permits, reimbursement, and national labelling genuinely differ market to market, and they are real work. But at the quality layer — the GMP, the stability, the analytical rigor, the quality system — they converge. They converge because they are all drawing from the same harmonised ICH source. Germany's BfArM, the UK's MHRA, and the rest are not auditing your science against eleven different rulebooks. At the technical core, they are auditing it against one.

That is the build-once thesis we argue in Build Once, Build to the Highest Bar, stated for Europe specifically: you do not build a German quality system and then a British one and then a Polish one. You build one ICH-grounded pharmaceutical quality system to the highest common bar, and then you bolt on the market-specific access layer — the labelling, the local licence, the import documentation — at the edges. The operator who internalises ICH early stops treating each new European market as a fresh compliance project and starts treating it as a configuration of a foundation they already own. That is also the method we describe in One Pathway, Every Regulator: specifications plus risk assessment, applied once, absorbing whatever the next regulator asks.

The alternative is the one Fletcher warns about: "manual workarounds, one-off shipments, loose planning and reactive problem solving." That is not a cheaper path. It is a deferred bill — the rebuild-it-later tax, paid with missed launch windows and failed inspections.

4. The bridge, span by span

Mapping Fletcher's bottleneck list to the ICH guideline that carries it:

Operational bottleneck (Fletcher)	The ICH span that bridges it	How it shows up in EU GMP
Quality system / "robust quality system"	Q10 — Pharmaceutical Quality System	Required by Vol. 4 Chapter 1 (PQS)
Risk-based decisions throughout	Q9(R1) — Quality Risk Management	Vol. 4 Part III; expected across all chapters
GACP → GMP for the active substance	Q7 — Active substance GMP	Is Vol. 4 Part II
Product/process development, specifications	Q8 / Q11 / Q6A — development, drug substance, specifications	Underpins the dossier and process validation
Analytical testing	Q2(R2) / Q14 — method validation & development	Method validation an EU assessor will accept
Residual solvents; heavy metals	Q3C / Q3D — impurities	Limits enforced at release
Stability programmes	Q1A–Q1F (+ Q5C) — stability	Shelf-life and storage justification
Batch documentation / lifecycle changes	Q12 — lifecycle management	Post-approval change control
Supplier qualification	Q9 + Q10 (risk + system)	Audits, technical/quality agreements

A few spans deserve emphasis, because they are where cannabis operations most often fall short of the European bar:

Stability (ICH Q1). Fletcher lists "stability programmes" almost in passing. In practice it is one of the most common gaps. A cannabis producer can have beautiful potency and terpene data and still have no ICH-compliant stability program — no defined storage conditions, no pull points, no stability-indicating methods, no shelf-life justification a QP can stand behind. There is no shortcut here; stability data accrues in real time. The operators who start an ICH Q1 program early are the ones who are not stuck waiting on it when a launch window opens.

Analytical methods (ICH Q2/Q14). State cannabis-compliance testing and EU pharmaceutical analysis are not the same discipline. The difference is documented validation to ICH Q2(R2) — accuracy, precision, specificity, robustness, measurement uncertainty — and increasingly the lifecycle, design-based approach of ICH Q14. This is the layer where a method that "works" becomes a method an assessor accepts.

The active substance (ICH Q7). Under the European framing, cannabis intended for medical use is handled as an active substance, with GACP governing cultivation and GMP — i.e., ICH Q7 as Volume 4 Part II — governing its processing. An operator who understands their extract or flower as an active substance under Q7, rather than as an agricultural commodity, is already thinking in the right regulatory language.

5. The far end of the bridge is genuinely EU-specific

A bridge that pretended the far bank looked exactly like the near one would be selling something. It does not. ICH gets a disciplined operator roughly to the technical-quality core of EU GMP — call it the 80% that is harmonised science. The remaining stretch is genuinely European, and it is exactly the 20% we mapped clause by clause in EU GMP vs. FDA GMP:

The Qualified Person (QP). The EU requires a named, legally accountable individual to certify every batch before release (Annex 16). ICH has no equivalent. This is the single most distinctly European requirement, and it cannot be built — it must be engaged.
Good Distribution Practice (GDP). The EU runs a distinct distribution regime (the EU GDP Guidelines) that ICH does not cover. Fletcher's "distribution readiness" lives here.
National licensing, import permits, and market-specific labelling. This is the access layer — the part that genuinely differs market to market, and the part ICH was never meant to harmonise.
Pharmacopoeial compliance (Ph. Eur.). European monograph expectations sit alongside, not inside, ICH.

Naming this honestly is the point. The ICH foundation makes the EU-specific last mile tractable — you arrive at the QP, the GDP partner, and the national filing with a quality system, validated methods, and stability data already in hand, instead of trying to assemble all of it under deadline pressure. The bridge does not eliminate the far bank. It gets you to it standing up.

6. What this means for the operator

This is where we agree with Fletcher again, and extend him. He argues — persuasively — that not every cultivator should build a European manufacturing site, and that independent EU-GMP CMOs will become strategic infrastructure. We think that is correct. A good CMO supplies regulated capacity, QP release, and GDP reach that most operators should not try to internalise before they have proven demand.

But a CMO cannot hand you a quality system you do not have. The QP certifying your batch is certifying your documentation, your methods, your stability data, your risk decisions. The operator still has to own the ICH-grounded core. The division of labour is clean:

The operator builds the foundation to ICH — Q10 quality system, Q9 risk framework, Q1 stability, Q2/Q14 methods, Q7 handling of the active substance.
The CMO and QP provide the EU-specific capacity and certification — manufacturing, batch release, GDP distribution.

Get the sequence wrong — chase the CMO relationship before the foundation exists — and you become the supplier whose product stalls at the QP's desk for want of data. Get it right, and you arrive CMO-ready and QP-releasable, which is exactly the operator the next phase rewards.

So the move, concretely, is this: adopt ICH as the architecture now, not at the border. Stand up the Q10 quality system. Start the Q1 stability program before you need the data. Validate to Q2/Q14. Treat your product as a Q7 active substance. Use Q9 to decide where to spend first. Then engage the European last mile — QP, GDP, national filings — from a position of readiness rather than scramble.

Europe's medical cannabis market did grow up. The infrastructure behind it has to grow up too. The fastest, cheapest way to grow it up once — for Germany and the UK and Poland and whatever market opens next — is to build it on the framework Europe already adopted. Build it on ICH.

How Intrepid Scientific helps you build the ICH foundation

This is the work we do. Intrepid builds the ICH-grounded core that makes a cannabis operator EU-ready — and CMO- and QP-ready — before the border, not at it. Every engagement is phased and decision-gated: either party can exit after Stage 1, so you prove the value before you commit the budget.

Start here — EU GACP + GMP Gap Assessment (Export Readiness). A scoped Stage 1 assessment that maps your cultivation (GACP) and processing (EU GMP Part I & II — i.e., ICH Q7) against the European bar, flags the deltas that actually gate export (the QP, Annex 1 contamination control, the Site Master File, Annex 15 validation, EU GDP), and delivers a sequenced remediation roadmap — QP timeline on the critical path — plus a binding Stage 2 recommendation. It is the diagnostic that turns "build to ICH" from a slogan into a costed plan for your operation.

From there, the foundation gets built span by span — the same spans this piece walks:

Pharmaceutical Quality System — ICH Q10 / Q9. The quality system and risk framework EU GMP Chapter 1 requires, designed to run the floor rather than sit in a binder.
Stability program — ICH Q1. Stood up early, so the data exists when a launch window opens: storage conditions, pull points, stability-indicating methods, and a shelf-life justification a QP can certify.
Analytical method development & validation — ICH Q2(R2) / Q14. Led by ISO/IEC 17025 lead assessors and analytical chemists who build the dossiers assessors read — the layer where a method that "works" becomes a method Europe accepts.
Active-substance handling — ICH Q7 — and the integrated build. Your extract or flower treated as an active substance under Part II, inside one quality system built to the highest common bar.

We are not a CMO, and we do not compete with one. We build the readiness; the CMO and QP supply the capacity and certification. That clean division of labour is the whole point — and the reason an operator who starts with us arrives at the European last mile standing up, with the quality system, methods, and stability data already in hand.

Free companion tool: Which guidelines apply to your operation? — a decision-tree PDF that takes you from product class and markets to your applicable ICH / GMP guideline set.

Building toward Europe — or just trying to find out how far away you are? Talk to us about EU export readiness → Senior scientists, direct engagement, no junior hand-off.

Sources & Further Reading

The essay this piece responds to

Oskar Fletcher, "Europe's Medical Cannabis Market Has Grown Up, Now Its Supply Chain Needs To," Business of Cannabis, 4 June 2026. (Market figures cited above — German import volumes, UK market size and patient base, the €1.5bn 2026 projection, and the 2025 German tightening of online prescribing — are as reported in that essay and its cited sources; we reproduce them as attributed, not independently verified.)

International (ICH)

ICH Q1A(R2)–Q1F and Q5C — Stability
ICH Q2(R2) — Validation of Analytical Procedures · ICH Q14 — Analytical Procedure Development
ICH Q3C — Residual Solvents · ICH Q3D — Elemental Impurities
ICH Q6A — Specifications
ICH Q7 — Good Manufacturing Practice for Active Pharmaceutical Ingredients
ICH Q8(R2) — Pharmaceutical Development · ICH Q11 — Development and Manufacture of Drug Substances
ICH Q9(R1) — Quality Risk Management · ICH Q10 — Pharmaceutical Quality System · ICH Q12 — Lifecycle Management

European Union

EudraLex, Volume 4 — EU Guidelines for Good Manufacturing Practice (Parts I, II = ICH Q7, III = ICH Q9/Q10, and Annexes)
EU GMP Annex 16 — Certification by a Qualified Person and Batch Release
EU Good Distribution Practice (GDP) Guidelines (2013/C 343/01)
EMA Guideline on Good Agricultural and Collection Practice (GACP) for starting materials of herbal origin

About the Authors

Andrew Samann is a Cofounder of Intrepid Scientific. Recognized as a Processing Pro on The Cannabis Scientist's Power List for 2021 and 2022, Andrew has led over 100 GMP and quality-system engagements across North America, South America, and the European Union — including international compliance work against FDA, EU GMP, EMA, Australian TGO, and ICH guidelines. He led the ASTM D37.02 Quality Management Systems Subcommittee for Cannabis, has certified multiple Canadian cannabis Licensed Producers, and is also Founder & CEO of Orion GMP Solutions.

Kate Evans, PhD is a Cofounder of Intrepid Scientific and principal of Longboard Scientific Consulting Corporation. She holds a PhD in analytical chemistry / pharmaceutical analysis and serves as a lead assessor for both ANAB and A2LA under ISO/IEC 17025. She is the Technical Contact for ASTM D8493-23 (cannabis/hemp sample preparation) and a technical consultant to the ASTM proficiency-testing program. Her pharmaceutical-analysis (cGMP) work spans analytical method development and validation, instrument qualification, and FDA test-method submission, alongside expert-witness testimony in cannabis and hemp testing and manufacturing.

About Intrepid Scientific

Intrepid Scientific is an independent scientific consulting firm offering ISO/IEC 17025 lab accreditation readiness, GMP and cGMP compliance, analytical method development and validation, microbiology and environmental monitoring, expert witness, and Federal Pathway / Schedule III advisory across cannabis, hemp, food and beverage, pharmaceutical, and dietary-supplement industries. Senior scientists. Direct engagement.

Cofounders: Andrew Samann; Kate Evans, PhD; Tess Eidem, PhD; Julie Kowalski, PhD.

Learn more at intrepidscientific.com.