On this page
The Holdover Problem in Kenyan Last-Mile Delivery
A passive shipper is rated for a number of hours under a defined ambient profile. The label says 48 hours, the qualification report says 48 hours, and the dispatch team treats 48 hours as a promise. The trouble is that the clock does not start when the van pulls away. It starts the moment the box is sealed, and it runs through every hour the carton sits on a hot loading dock waiting for the driver, the manifest, or the next available vehicle. By the time the shipment actually moves, a meaningful slice of the validated window can already be gone.
That is the gap the Thermal Holdover Time Estimator closes. It takes the validated rating of your packout, the real packout configuration, and the ambient conditions the shipment will actually see, and estimates the safe holdover window: how many hours the payload stays inside its approved range before a boundary breach is expected. Just as important, it tells you the dispatch-by time, the latest moment you can release the box and still complete delivery inside that window. Under PPB Good Distribution Practice, an inspector wants to see that your transit time was planned against the validated capability of the shipper, not assumed from the number printed on the lid.
This guide walks one real-shaped example end to end, explains each output, and shows how to write the result up so it survives an audit. It is a companion to your distribution and packout SOPs, not a replacement for them.
Worked Example: A 48-Hour Shipper to a Nairobi Clinic
Take a distributor packing a 2 to 8C vaccine consignment into a passive shipper qualified for 48 hours. The qualification was run against a summer ambient profile averaging around 30C, which matches a typical warm Nairobi afternoon, so the rating is realistic for this lane. The payload was conditioned and loaded at the bottom of its range, near 4C, and the box was sealed at 08:00.
On paper the team has until 08:00 two days later. In practice the dispatch did not happen at 08:00. The carton sat on the goods-out dock for 6 hours, at an ambient close to 30C, waiting for the afternoon delivery run. Those 6 hours are not free. The shipper was already working against the heat, drawing down the conditioned phase-change capacity that buys the holdover time. By the time the van leaves at 14:00, the box has consumed roughly the first 6 hours of its 48-hour budget.
The estimator works the arithmetic explicitly:
- Validated rating: 48 hours at 30C ambient, payload starting near 4C.
- Dock holdover already spent: 6 hours at 30C before dispatch, leaving about 42 hours of usable window from the 14:00 departure.
- Estimated safe window from sealout: a breach above 8C is projected at roughly the 44 to 45 hour mark, slightly earlier than the rated 48 because the dock exposure ran warmer and longer than the gentle start the qualification assumed.
- Dispatch-by time: for a delivery that needs 8 hours door to door, the box must leave with at least 8 hours of remaining margin. With 42 usable hours left at 14:00, the run is comfortable today, but the same 6-hour dock delay on a 12-hour up-country route would leave the shipment finishing with single-digit hours of margin.
The lesson is not that 48 hours is wrong. It is that the safe window is the rated window minus what the loading dock already burned, and only the second number changes from day to day. A shipment is at risk long before the temperature ever crosses 8C, because the margin was eroded on the dock where nobody was watching the clock. If you want to see what a single warm leg does to that margin across a specific route, pair this estimate with the shipping lane risk tool.
What Data You Need and Why
Four inputs drive the estimate, and each one has a reason an inspector will recognise:
- Shipper validation rating: the qualified holdover hours from your packout qualification report, together with the ambient profile that rating was tested against. A 48-hour rating earned at 25C is not a 48-hour rating at 30C. Use the figure that matches the conditions your lane will actually see.
- Packout configuration: the same coolant quantity, conditioning state, and box loading used in qualification. A shipper packed with five conditioned bricks behaves nothing like one packed with three, and substituting components voids the rating you are relying on.
- Ambient profile: the temperature the box will be exposed to across dock holding and transit. A Nairobi afternoon near 30C, a Mombasa lane that runs hotter, and a refrigerated van are three different profiles and three different windows.
- Payload start temperature: where the product sat when the box was sealed. A payload conditioned to 4C has more room to climb before it reaches 8C than one loaded at 7C, so the start temperature directly sets how much of the budget is yours to spend.
One control matters more than the rest: the rating and the ambient profile must belong to the same packout that is actually shipping. If the box on the dock is not the qualified configuration, the estimate is fiction and so is the window. Note the qualification report reference against every estimate so the link is traceable.
Reading the Outputs
The tool returns four figures. Read them top down:
- Estimated safe window: the total hours, from sealout, before a breach above the upper limit is projected under the supplied ambient profile. This is the rated capability adjusted for the conditions you entered, not the number on the label.
- Remaining margin: the hours still available right now, after subtracting the time already spent on the dock or in transit. This is the figure that tells you whether the shipment can still make its destination in range.
- Dispatch-by time: the latest clock time the box can leave and still complete the planned delivery inside the safe window. Miss it and the shipment is no longer defensible without a documented risk decision.
- Risk flag: a simple status that turns when the remaining margin drops below the planned transit time plus your safety buffer. It is the line that tells dispatch to escalate rather than load.
Never read these in isolation. Pair the numbers with operational context: actual dock ambient, real route duration including known delays at weighbridges or checkpoints, and the conditioning state of the coolant when it was loaded. If the remaining margin is thin, the right move may be to recondition and repack rather than chase the delivery. If a breach has already occurred in transit, that is a different question, and the excursion impact assessor and the stability budget calculator are the tools for judging whether the product is still releasable.
Documenting the Window for PPB and GDP Audits
A dispatch decision based on a holdover estimate is a quality record. Capture it the way an inspector expects to see it:
- Reference the shipper qualification report by number, including the rated hours and the ambient profile they were earned against.
- Record the actual packout: coolant quantity, conditioning state, payload start temperature, and sealout time, so the estimate maps to a real box.
- State the estimated safe window, the remaining margin at dispatch, the dispatch-by time, and whether the risk flag was clear when the box was released.
- If a substitution or a longer dock hold forced a change to the packout or the route, route it through change control with QA sign-off rather than letting the dock improvise.
- Keep the dispatch records together with the delivery confirmation so transit time can be reconciled against the planned window at the next review.
That chain, from qualified rating to actual packout to dispatch-by decision, is what makes the window defensible under Good Distribution Practice. If you are still building these records, our GMP readiness checklist covers the distribution and deviation documentation an inspector will ask for.
Frequently Asked Questions
If my shipper is rated for 48 hours, why is my safe window shorter?
The rating is earned under a defined ambient profile and a gentle start. Real dispatch often runs warmer and holds the box on a hot dock first, so the time already spent before the van leaves comes straight off the 48 hours. The safe window is the rated window minus what the dock and the lane have already consumed.
Does the loading dock really matter if the box never goes above 8C there?
Yes. Even while the payload stays below 8C, every hour at 30C draws down the conditioned coolant capacity that buys the holdover time. The temperature can still read in range while the margin quietly erodes, which is exactly why a 6-hour dock hold shortens the usable window.
What ambient profile should I enter?
Use the conditions the shipment will actually see, not the average of a mild day. A Nairobi afternoon near 30C, a hotter coastal lane, or a refrigerated van each give a different window. Matching the profile to the qualification conditions keeps the estimate honest.
Can I rely on this estimate instead of a temperature logger in the box?
No. The estimate is a planning tool that sets the dispatch-by time and the safety buffer before the box moves. A monitoring logger still travels with the shipment to confirm what actually happened, and the two records are reconciled afterward.
What do I do when the remaining margin is below my planned transit time?
Treat the risk flag as a stop. The defensible options are to recondition and repack the shipper, switch to a faster route, or escalate for a documented risk decision through change control. Loading anyway, with no record, is what an inspector will challenge.
Estimate Your Own Dispatch Window
Enter your shipper rating, packout, ambient profile, and payload start temperature, and get a safe holdover window, remaining margin, and dispatch-by time you can take straight into your distribution record.
Open Thermal Holdover Estimator