Medical Devices · Supplier Quality
Medical Device Supplier Quality Consulting
The short answer
Purchasing controls make you responsible for the quality of what others make for you. We build supplier programs where qualification depth, audit frequency and monitoring are proportionate to what the supplier actually affects — and where the records show why.
Why this matters
- Critical components and sterilization, coating or contract assembly services carry device risk that inspection at receipt cannot detect.
- Supplier changes made without notification are a recurring source of field issues; the control for that is contractual and monitored, not inspected.
- Audit programs that visit every supplier annually spend the same effort on a fastener vendor as on a sterilizer.
Applicable regulations and standards
- 21 CFR 820.50 / QMSR
- Purchasing controls: evaluation of suppliers, purchasing data and agreements.
- ISO 13485 clause 7.4
- Purchasing process, information and verification of purchased product.
- ISO 14971
- Risk-based determination of supplier criticality.
- 21 CFR 820.80
- Receiving, in-process and finished device acceptance activities.
What our consultants actually do
- Classify suppliers by risk with a written, applied rationale rather than a default tier list
- Build qualification packages: capability assessment, initial audit, first-article and acceptance criteria
- Perform supplier audits, including sterilizers, contract manufacturers and specialty processors
- Draft quality agreements with real change notification and escalation obligations
- Establish performance monitoring, scorecards, requalification intervals and disqualification criteria
- Support supplier corrective action, on-site containment and transition planning
Across the product lifecycle
01 / DEVELOP
Supplier capability assessed while the design can still accommodate it.
02 / SCALE
Capacity, tooling and second-source strategy evaluated before ramp.
03 / TRANSFER
Quality agreements and acceptance criteria in place before first shipment.
04 / VALIDATE
Supplier process validation reviewed, not assumed.
05 / MANUFACTURE
Incoming acceptance, monitoring and nonconformance feedback.
06 / MAINTAIN
Requalification, audit cadence and change notification compliance.
Problems we are usually called about
- Approved supplier list with no evidence behind the approvals
- Quality agreements silent on change notification and sub-tier suppliers
- Audits performed but findings never verified as closed
- Incoming inspection unchanged after years of clean performance, or eliminated with no rationale
- Sub-tier supplier changes discovered only through a field complaint
Typical deliverables
- Supplier risk classification model and applied assessment
- Qualification and requalification procedures with record templates
- Supplier audit reports and corrective action follow-up
- Quality agreement templates and negotiation support
- Supplier scorecard and monitoring framework
Frequently asked
- Do we have to audit every supplier?
- No. Evaluation must be proportionate to risk. Some suppliers warrant an on-site audit, others a questionnaire and performance data. What matters is that the basis for the decision is documented and consistently applied.
- What belongs in a device quality agreement?
- Scope, specifications, change notification obligations, sub-tier control, records access, audit rights, nonconformance handling and communication timelines. Silence on change notification is the gap that causes the most damage.
- Can supplier quality be part of a QMSR transition project?
- Frequently, yes. Purchasing controls are one of the areas where terminology and record expectations shift, so it is efficient to address them together.
References
More for medical devices
QMSR, ISO 13485 and device manufacturing quality support.
- QMSR TransitionThe Quality Management System Regulation incorporates ISO 13485 into FDA's device quality system requirements.
- ISO 13485ISO 13485 defines a quality management system for organizations involved in the medical device lifecycle.
- Process ValidationDevice manufacturers must validate any process whose results cannot be fully verified by subsequent inspection and test.
- CAPACAPA is the system FDA examines first in a device quality system, because it reveals whether the organization detects and fixes its own problems.
- 510(k) Quality SupportThis page is about the part of a 510(k) that lives inside your quality system: the design history file, process and sterilization validation, supplier controls and the manufacturing description.
Start a project
Tell us what you're working on.
Describe the product, the process or the problem. We will tell you honestly whether we are the right people to help, and who should be on the team if we are.