• ByRouging Solutions Editorial Team  ·  25 August 2026

Rouging in WFI Systems: Prevention, Detection, and Remediation

Your WFI loop rouges because of the way you are required to run it. Annex 1 says water for injections should be stored and distributed in a way that limits microbial growth, “e.g. by constant circulation at a temperature above 70°C” (EU GMP Annex 1). Rouge, meanwhile, is discoloration found on stainless surfaces “operated at elevated temperature over 65°C” (A3P, La Vague 66).

Those two numbers sit on top of each other. The heat that keeps the loop sterile is the same heat that drives the iron out of the steel. You cannot design it out, which is why a WFI system needs watching on a schedule.

Why Does Rouging Start in WFI Loops First?

Because they combine the three things rouge needs. A3P lists them plainly: a high-purity water system built from stainless steel, a polished internal surface, and operation at high temperature. A WFI loop is all three at once.

High-purity water is the part engineers underestimate. Water this pure is chemically hungry, and it pulls at the iron in the steel in a way ordinary process water does not.

Annex 1 adds a second condition. Flow “should remain turbulent through the pipes in water distribution systems to minimize the risk of microbial adhesion”. Turbulent hot water is good microbiology and hard service for the steel.

The design is not wrong. The loop is doing what it was built to do, and rouge is the cost. For the chemistry, our guide to what rouging is covers how the oxide forms.

One route in has nothing to do with your steel. A3P describes migratory rouge arriving from an external source, such as carbon steel in the feed water. Establish that early, because the fix sits upstream and derouging inside the loop will not hold.

Where Does Rouging Show Up First in a WFI Loop?

On the fittings first. A3P's field observations put rouge in a consistent set of places.

1. Pump impellers, where flow is fastest and most turbulent
2. Vessel spray balls, which sit wet and hot between cycles
3. In-line filters and their housings
4. PTFE surfaces such as tri-clamp gaskets
5. Connection hoses in nylon, silicone or PTFE
6. Storage vessel surfaces

Read that against your own inspection routine. A swab of the tank and a look down a sight glass is the common check, and of those six places it reaches one. The impeller and the spray ball rarely get opened, and those two go first.

That list came from watching real systems. A3P names “PTFE surface such as tri clamp gaskets” among the places rouge turns up, which is not where a sampling plan drawn on a P&ID would send you. Hot turbulent water finds the fittings long before the pipe.

Which Class Are You Looking At?

There are three, and a hot loop can carry more than one at a time. A3P separates them by where the iron came from.

Class 3 is the one worth losing sleep over, because pitting is not cosmetic. Class 1 causes needless panic, since the steel underneath is often untouched. Telling them apart decides whether you clean or derouge, and our note on the signs a system needs derouging covers that call.

Will Your Continuous Monitoring Catch It?

Probably not on its own. Annex 1 asks that WFI systems “include continuous monitoring systems such as Total Organic Carbon (TOC) and conductivity, as these may give a better indication of overall system performance than discrete sampling”. That is sound advice for the system as a whole.

Rouge is the awkward case. A3P reports that a high amount of rouge “will affect definitely the conductivity”, then adds that it was found not to breach the conductivity limits in the pharmacopoeia edition of the day. So the reading moves, and the alarm does not.

There is a cheaper indicator in your instrument rack. A3P notes rouge discoloration turning up in the translucent silicone hoses used to connect TOC instruments, and suggests that area “could be used as a reference to check whether rouging is in the circuit”. A clear hose is a window into water you otherwise only see as a number, so look at it on the same walk as your gauge readings. It costs nothing and it changes before your trend does.

Does Electropolishing Prevent It?

Electropolishing helps, and it does not make you immune. This is where expectations and field experience part company.

A3P puts it carefully. Electropolishing “seems to offer protection from surface vessels because polishing occurs after the manufacturing is complete”, yet the same paper reports rouge appearing in pipework whether the material was mechanically polished or electropolished.

So a polished vessel behaves better than a mill-finish one, and a polished distribution loop still rouges. If you were told an electropolished system would never need derouging, that was oversold, and our explainer on what electropolishing does sets out what it buys you.

Surface finish is still worth specifying. A3P's own prevention list asks for 316L at Ra 0.4 to 0.6 μm with a 3.1.B material certificate. Where a surface has degraded, mechanical and electropolishing can be done at your site, which is usually the only practical option once a loop is installed.

What Does Commissioning Miss?

Usually nothing at handover, and a lot afterwards. A3P is direct about the starting point: a newly installed, commissioned and validated water system “starts free of rouge”. The clock begins the day you heat it.

Commissioning runs degreasing then chemical passivation, often nitric acid at 2 to 3 percent by volume. That builds the chromium oxide layer the loop lives on. The gap is that nobody schedules the second one.

The WHO guidance is useful here. It says passivation “should be considered for stainless steel systems, for example, for non-electropolished surfaces (after initial installation and after significant modification) in accordance with a documented procedure defining the solution to be used, its concentration, the temperature and contact time” (WHO TRS 1033, Annex 3). It ties passivation to modification as well as installation, and expects a written procedure with numbers in it.

A passivation done once at handover buys a warranty and nothing more. Loops that stay clean for years treat it as a repeating task tied to the shutdown calendar, with somebody owning the date. Our passivation service works that way, on site, in citric chemistry.

How Do You Set Up Observation Points?

By choosing them once and never moving them. A3P's prevention list closes with exactly this: “Select observation points in the system and check regularly the rouge.” It sounds obvious until you try it on a live loop.

1. Pick 4 to 6 points you can open without breaking sterility elsewhere, including one impeller, one spray ball and one gasket
2. Photograph each one under the same light at the same distance, so a change shows up in the file
3. Fix the interval to your shutdown calendar, say every quarter and after any hot excursion
4. Record who looked and on what date, with the photograph attached
5. If discoloration appears, note the class before deciding

The photographs are the part people skip and the part that pays. Rouge changes slowly, and nobody recalls a spray ball from six months ago.

Here is a fictional illustration, not a specific project. A pharma plant in the Hyderabad corridor sets five points during its April shutdown, then finds at the October check that only the spray ball has darkened. That points at localized heat, and it changes the response. The scenario is fictional.

What If Rouging Is Already in the Loop?

Then the class decides the work. A Class 1 deposit “can usually be easily wiped away”, and the steel beneath it “usually remains unaltered” (Pharmaceutical Technology). Class 2 and Class 3 have altered the surface, so cleaning alone puts you back here next quarter.

The sequence that holds up is inspection, then derouging matched to the class, then passivation, then a documented check that it worked. Skipping the last step is how a plant does this twice. Routine cleaning between treatments is set out in our WFI system cleaning protocol.

The documented check matters for a second reason. An auditor who asks why a loop was opened wants to see what you found, what you did and what the surface looked like afterwards. Without closing evidence it reads as a repair. With a before-and-after record it reads as a controlled process.

Rouging Solutions runs this work on live systems, with 60+ combined years across pharma, semiconductor and food processing. The derouging service is on site. Inspection and monitoring uses imported, fully calibrated instruments, and the output is a remedy now plus a frequency for checking it again, which is what the observation points above are for.

Where to Start

With a look. Open the loop at its next planned stop and inspect an impeller, a spray ball and one gasket. That single hour tells you more than another quarter of conductivity trending, because you are looking where A3P's field observations say rouge turns up.

If you find discoloration you cannot classify, that is the moment to bring somebody in. Misreading Class 1 as Class 3 wastes money. Misreading Class 3 as Class 1 costs you the steel.

Our team responds within 24 hours, works from Ahmedabad with coverage across West, South and North India, and 26+ clients in 8 industries. We will say plainly if what you have does not need treating yet. Talk to us before your next shutdown, while the loop is open anyway.

Frequently Asked Questions