HEPA Filter Leak Testing: What It Actually Verifies — And Why Precise Documentation Matters

If you operate a sterile compounding pharmacy, hospital cleanroom, or regulated laboratory, HEPA filters are central to your contamination control strategy. But knowing a filter is installed and knowing it is actually performing as intended in the field are two different things. That gap is what a properly executed HEPA filter leak test is designed to close.

This post walks through how HEPA filter leak testing works, which standards govern it, and what that distinction between mandatory requirements and best practice guidance means for your certification records.

Leak Testing Is Not a Filter Efficiency Test

A HEPA filter’s rated efficiency — whether 99.97% at 0.3 microns or higher — is established during factory testing of the filter media itself under controlled conditions. Field leak testing verifies something entirely different: that the filter was installed correctly, that the media was not damaged during shipping or installation, and that no bypass paths exist around the filter through the frame, housing, or seal.

A filter can carry a perfect factory rating and still fail a field leak test due to a pinhole in the media, a compromised gasket, or a gap in the grid structure. ISO 14644-3:2019 §4.2.7 is clear on this point — the installed filter system leakage test is not a media efficiency test. It is an installation integrity test.

A Note on Standards Language: “Shall” vs. “Should”

Before walking through the test methods, it is worth noting how ISO standards use language — because this matters when interpreting what is mandatory versus what is guidance.

In ISO documents, “shall” indicates a mandatory requirement. “Should” indicates a strong recommendation that is considered best practice but is not an absolute mandate. This distinction becomes important when reading ISO 14644-3:2019, because the main body of the standard (Sections 1–5) is normative, while Annexes A, B, and C are explicitly labeled informative. That means the detailed test procedures in Annex B — scan rates, probe distances, mixing verification — are guidance, not hard requirements from ISO 14644-3 alone.

Mandatory field certification requirements for pharmaceutical environments flow primarily from USP <797>, USP <800>, and CETA CAG-003. Those documents use “must” language that carries enforceable weight. ISO 14644-3 provides the technical framework and best practice guidance that supports how those requirements are executed.

What USP <797> Actually Requires

USP <797> §5 uses mandatory language throughout. Certification of classified areas including PECs must be performed initially and recertified at least every 6 months, and that recertification must include:

• Airflow testing to verify air velocity, air exchange rate, and room pressure differential under dynamic operating conditions
• HEPA filter integrity testing — filters must be leak tested at the factory and again after installation and as part of every recertification
• Total particle count testing under dynamic operating conditions using calibrated electronic equipment
• Dynamic airflow smoke pattern testing for each PEC

Classified areas must also be recertified following redesign, construction, replacement or relocation of any PEC, or any alteration in room configuration that could affect airflow or air quality. These are not recommendations — they are mandatory requirements under the chapter.

The Two Primary Field Test Methods

Aerosol Photometer (Scan) Method

The photometer method is the most widely used approach for ceiling, wall, and apparatus-mounted HEPA and ULPA filters. A challenge aerosol is introduced upstream of the filter and a photometer probe is traversed across the downstream face of the filter, covering the filter perimeter, gasket seal, and grid framework.

ISO 14644-3:2019 Annex B §B.7.2 provides detailed guidance on this method — including a recommended scan rate of no more than 5 cm per second and a probe standoff of approximately 3 cm from the filter face. These are best practice recommendations from an informative annex, but they are widely adopted as the de facto field standard and are the basis for what IEST-RP-CC034 and CETA CAG-003 build upon.

PAO (poly-alpha-olefin) has replaced DOP (dioctyl phthalate) as the standard challenge aerosol in pharmaceutical environments due to health and outgassing concerns. ISO 14644-3:2019 §C.5.3 lists PAO among the accepted test aerosol substances.

For filters rated at 99.995% efficiency or higher, a downstream reading exceeding 0.01% of the upstream concentration indicates a leak. For filters in the 99.95% to 99.995% range, the threshold is 0.1%. These acceptance criteria are stated in ISO 14644-3:2019 Annex B §B.7.2.4 as part of the informative guidance, but are directly adopted as mandatory limits in CETA CAG-003 §8.4 for LAFW certification.

Particle Counter (LSAPC) Method

For environments where oil-based aerosols cannot be tolerated, the discrete particle counter method provides an alternative. This approach uses a light-scattering airborne particle counter to detect individual particles at or above 0.3 microns.

ISO 14644-3:2019 Annex B §B.7.3 describes a two-stage process: a scan stage that identifies potential leak locations, followed by a stationary re-measurement at any flagged location to confirm or rule out a true leak. The calculations required to set acceptable count thresholds and scan rate are detailed in that annex and require more upfront setup than the photometer method, but the method is highly sensitive and well-suited for critical pharmaceutical environments.

What Gets Scanned — And Why It Matters

A complete scan covers the entire downstream face of each filter, the perimeter, the seal between the filter frame and the grid structure, and the grid joints. Integrity failures are more commonly found at edges, gasket compression points, and grid connections than in the center of the media itself — especially following a filter replacement or maintenance event.

ISO 14644-3:2019 Annex B §B.7.2.7(c) and §B.7.3.8.1(c) both state that scanning should be performed over all of these areas. This is informative guidance, but any certifier skipping the perimeter or grid joints is not following recognized industry practice and leaves your facility with an incomplete record.

Upstream Aerosol Concentration and Mixing Verification

One detail that separates a thorough leak test from a superficial one is verification that the challenge aerosol is uniformly mixed upstream of the filter before scanning begins. ISO 14644-3:2019 Annex B §B.7.2.6 and §B.7.3.7 both address this — guidance states that upstream concentration measurements should not vary more than ±15% from the average, and that the first time a system is tested, sufficient mixing should be confirmed with all injection and sampling points defined and recorded.

Again, this is informative guidance from ISO 14644-3. But it reflects a sound technical principle: if the upstream challenge concentration is uneven, your downstream leak readings are unreliable. A reading that appears to be a pass may simply reflect a low-concentration zone rather than a clean filter. Certifiers who skip this step are cutting a corner that matters.

Repair and Retest Requirements

ISO 14644-3:2019 Annex B §B.7.6 provides guidance on repairs — noting that repair methods should be agreed between customer and supplier, that outgassing of repair materials should be considered, and that any repaired location should be rescanned after a suitable cure time using the same defined method. CETA CAG-003 §8.5 requires that the certification report document the test procedure used and any deviations from established industry practices.

What Your Certification Report Must Include

USP <797> §5 requires that all certification and recertification records be reviewed by the designated person to confirm that classified environments meet minimum chapter requirements. CETA CAG-003 §8.5 specifies that a formal certification report shall include at a minimum:

• Name, address, and contact information for the certifying organization, with applicable accreditations listed for key personnel
• A statement that testing was performed in accordance with CETA CAG-003 (current version)
• The test procedure used and justification for any deviations from established industry practices
• Required reporting values for each test section
• A list of test equipment with make, model, serial number, and calibration date
• Current calibration documentation when requested
• A statement of compliance or non-compliance

ISO 14644-3:2019 §5 — which is normative — further requires that test reports shall include the testing organization name and date, a reference to the standard used, clear identification of the physical location and sampling coordinates, the specified designation criteria including ISO classification and occupancy state, details of the test method and any departures from it along with instrument calibration certificate identification, and the test result with a compliance statement.

If your current certification report is missing these elements, it may not hold up to a regulatory review or USP compliance audit.

How LabCertTech Approaches This Work

At LabCertTech, our field certifiers perform HEPA and ULPA filter leak testing as part of comprehensive cleanroom and PEC certification services across Houston and the greater Texas region. We follow ISO 14644-3:2019 test method guidance, apply IEST-RP-CC034 for leak detection, and structure our PEC certification work in accordance with CETA CAG-003 requirements for sterile compounding environments. Our reports document the full picture — the method, the instrumentation, the data, and the standard behind every result.

We also know the difference between what a standard requires and what it recommends — and we document both clearly, so your records can stand up to scrutiny from inspectors and industry professionals alike.

Ready to schedule your next HEPA certification? Contact LabCertTech today.