HAZOP Study for a Multipurpose API Manufacturing Facility

Executive Summary

A multipurpose API (Active Pharmaceutical Ingredient) manufacturing facility operating six multi-purpose batch reactors required a structured HAZOP study following a series of process route changes introduced over a two-year period without a corresponding hazard re-review. The facility produced multiple API products across overlapping campaigns, with reactors reconfigured between products as frequently as every three to six weeks. This representative example illustrates the methodology, hazard categories, and findings typical of HAZOP work in multipurpose batch API environments — a category of facility where conventional single-product HAZOP assumptions frequently break down.

Facility Background

The facility operated as a multipurpose batch plant: six jacketed glass-lined and stainless-steel reactors, shared utility systems (chilled brine, plant steam, nitrogen), and a campaign-based production schedule in which each reactor could be dedicated to different chemistry across a calendar year. Process routes for three of the facility's eight registered products had been modified in the preceding two years — typically to improve yield, reduce solvent load, or substitute a raw material following a supply disruption — without a documented re-HAZOP of the affected nodes. This pattern is common in multipurpose API manufacturing: route optimization is continuous, driven by yield improvement, cost reduction, and raw material availability, and the operational pressure to implement an approved route change quickly can outpace the facility's process safety review cycle if Management of Change (MOC) discipline does not explicitly gate on hazard re-assessment.

Hazard Profile

• —Reactive chemistry risk — several process steps involved exothermic reactions (acid-base neutralizations, hydrogenations, and a diazotization step) with documented but not recently re-verified thermal stability margins
• —Solvent handling and flammable atmosphere control — multiple steps used Class I flammable solvents (acetone, methanol, ethyl acetate) in vessels with nitrogen blanketing, where blanket integrity depended on instrumentation not present in the original reactor design
• —Cross-contamination and incompatible chemical storage — shared utility headers and changeover procedures between campaigns created potential cross-contamination pathways not present in continuous single-product operations
• —Batch sequencing complexity — several process steps required strict addition-order and rate control to avoid runaway conditions, with safe operating limits dependent on assumptions from the original, pre-modification process route

Study Methodology

1. 1.Change history reconciliation — cross-referencing the facility's MOC log against the existing HAZOP register to identify exactly which nodes were affected by the three route changes
2. 2.Node prioritization — affected nodes were scoped for full guide-word HAZOP; unaffected nodes were scoped for a lighter-touch confirmation review verifying no upstream/downstream interaction effects
3. 3.Node-by-node deviation analysis on the affected nodes using standard guide words applied to flow, temperature, pressure, concentration, and addition rate
4. 4.Safeguard verification against current process chemistry — for each deviation, existing safeguards were checked against the actual current chemistry, not the chemistry assumed at original design
5. 5.Risk ranking using the facility's existing risk matrix, calibrated against severity categories for personnel exposure, fire/explosion, and product quality/regulatory consequence
6. 6.Action register development with named engineering and operations owners and target closure dates

Key Findings

• —Six findings related to thermal hazard margin — the modified routes had altered the heat of reaction or addition rate in ways that reduced the safety margin against the reactor's cooling capacity, without safe operating limits being formally revised
• —Four findings related to nitrogen blanket integrity during the modified addition sequence — the new route's addition order created a longer window where flammable solvent vapor concentration in the headspace was not actively monitored
• —Three findings related to procedural gaps — operating procedures had been updated for new raw material specifications but not for new hold-time or temperature-control requirements implied by the route change
• —One finding related to a relief system sizing assumption that no longer matched the modified reaction's worst-case credible scenario

Risk Reduction Measures

• —Safe operating limits formally revised and re-issued for the three modified routes, with explicit reference to updated thermal margin calculations
• —Nitrogen blanket monitoring upgraded on two reactors to provide continuous oxygen concentration trending during the identified vulnerable addition window
• —Operating procedures revised to incorporate hold-time and temperature-control steps specific to the modified routes, with operator sign-off fields added
• —Relief system sizing assumption recalculated against the modified reaction's credible worst case, confirming adequate margin and formally redocumenting the basis of safety
• —All 14 actions closed within 8 weeks, ahead of a scheduled regulatory inspection

Lessons Learned

Technical Takeaways

• —Maintain a living cross-reference between the MOC log and the HAZOP register, not two independent systems reconciled only at revalidation time
• —Build an explicit hazard-screening gate into the MOC procedure for any change affecting reaction stoichiometry, addition rate, solvent ratio, or raw material specification
• —Treat thermal margin recalculation as a mandatory checklist item for any process route change in an exothermic batch system, regardless of how minor the change appears
• —Scope HAZOP revalidations as gap-focused exercises driven by documented change history, reserving full re-studies for facilities without reliable change documentation