ICH M7: Mutagenic Impurities and the Five Control Options
ICH M7 covers the assessment and control of DNA-reactive (mutagenic) impurities in pharmaceuticals, to limit potential carcinogenic risk.
It applies to impurities that are actually or potentially mutagenic, which is a narrower and more demanding category than general impurity control under ICH Q3A and Q3B.
The threshold of toxicological concern
The TTC is the acceptable intake for a mutagenic impurity where no compound-specific data exists: 1.5 µg per day for lifetime exposure, corresponding to a theoretical excess cancer risk of one in one hundred thousand.
Shorter durations permit higher intakes on a staged scale, which matters for clinical-stage products where exposure is limited.
Two impurities are worth knowing separately. The cohort of concern covers aflatoxin-like, N-nitroso and alkyl-azoxy compounds, which are so potent that the TTC does not apply and compound-specific limits are required. That is the category nitrosamines fall into, and why they have been treated as their own problem since 2018.
Classification
M7 sorts impurities into five classes, from known mutagenic carcinogens (Class 1) through to those with no structural alerts (Class 5). Classification drives everything downstream, and it starts with an (Q)SAR assessment using two complementary methodologies: one expert rule-based, one statistical.
Where the two disagree, or where a structural alert exists, expert knowledge resolves it. A structural alert alone does not make an impurity Class 2.
The five control options
This is the part that decides how much testing you commit to.
Option 1. Test the drug substance with an acceptance criterion at or below the acceptable limit.
Option 2. Test a raw material, starting material or intermediate, with an acceptance criterion at or below the acceptable limit.
Option 3. Test upstream with a higher acceptance criterion, justified by demonstrating that the process purges the impurity to below the limit, with supporting data.
Option 4. No analytical testing for the impurity. Control is by understanding the process: you justify, with a purge argument, that the level in the drug substance is below the acceptable limit. This requires the strongest justification and is the option that saves the most routine testing.
Option 5. For a degradant, control through the specification of the drug product where the level is understood.
Option 4 is where the argument gets made and where reviewers push hardest. A purge factor calculation with no supporting spiking data is the usual gap.
The trap: shared mechanisms
Two impurities sharing a common mutagenic mechanism of action are expected to be considered together, against a combined limit, rather than each against its own.
This is easy to miss, because the analytical work naturally treats them as separate analytes and the specification lists them separately. A dossier that justifies each impurity individually and never addresses them jointly has a gap a reviewer will find, and closing it can require a multi-batch spike and purge study that nobody planned for.
Frequently asked questions
What is ICH M7?
The ICH guideline on assessment and control of DNA-reactive (mutagenic) impurities to limit potential carcinogenic risk.
What is the TTC?
The threshold of toxicological concern: 1.5 µg per day for lifetime exposure where no compound-specific data exists, with higher limits for shorter durations.
What is the cohort of concern?
Aflatoxin-like, N-nitroso and alkyl-azoxy compounds, which are too potent for the TTC and require compound-specific limits. Nitrosamines sit here.
What is an Option 4 control strategy?
Control without routine analytical testing, justified by process understanding and a purge argument showing the impurity is below the acceptable limit.
Do I need two (Q)SAR methodologies?
Yes. M7 expects two complementary approaches, one expert rule-based and one statistical, with expert review where they disagree.
What if two impurities share a mechanism?
They are assessed together against a combined limit, not individually. This is one of the most commonly missed requirements in the guideline.