Enough to control the records that a future submission and a future inspection will depend on — document control, design control, supplier control and training — and no more than the current headcount can sustain.
Build the four that create rework if deferred
- Document and record control — everything else depends on it
- Design control, before design outputs start accumulating
- Supplier and purchasing control for critical reagents and components
- Training records tied to the procedures people actually perform
Defer what scales later
Elaborate management review cadences, internal audit programs covering every clause, and heavy electronic systems can be added as the organization grows. What cannot be added later is the historical record of controlled design and controlled documents.
Sustainability is the test
A quality system that a twelve-person company cannot maintain will be abandoned quietly, and the abandonment is more damaging than never having built it. Size the system to the team you have, and plan the next layer against a headcount trigger.
Reviewed by the named consultant. Last updated July 14, 2026. General information only — not regulatory or legal advice for a specific situation.