You can have perfect batch records and a spotless clean room. If the polymer, adhesive, or sterile barrier material entering your facility does not meet specification, none of it matters.
Supplier quality is one of the most under-audited areas in medical device manufacturing — until an auditor traces a non-conformance back to raw material and asks: "How was this supplier approved? What incoming checks did you perform on this lot?"
ISO 13485 clause 7.4 covers purchasing and supplier control. CDSCO expects you to demonstrate control over materials that affect finished device quality.
The supplier qualification process
Before you buy production-critical material from a new vendor:
1. Define requirements
Document what you need — specifications, regulatory certificates, packaging requirements, shelf life, change notification obligations. Your purchase specification should reference approved material specs.
2. Evaluate the supplier
Methods proportional to risk:
- Questionnaire — quality system, certifications, regulatory history
- Certificate review — ISO 13485, ISO 9001, test reports
- Sample evaluation — incoming testing on trial lots
- On-site audit — for critical or high-risk suppliers
- Historical performance — if switching from an existing qualified supplier
3. Approve and maintain an approved supplier list (ASL)
Only approved suppliers for production materials. The ASL includes supplier name, material supplied, approval date, approval status, and re-evaluation due date.
Buying from an unapproved supplier for production — even once — is a finding.
4. Re-evaluate periodically
Annual or biannual review based on risk. Review incoming rejection rates, complaint data linked to supplier lots, audit findings, and certificate currency.
Incoming inspection: what to check
Every production material lot received should go through incoming inspection before release to stores:
- Verify quantity against delivery note
- Verify identity — correct material, correct grade
- Verify lot number and expiry/retest date
- Review Certificate of Analysis (COA) against your specification
- Perform inspection or testing as defined in your incoming inspection SOP
- Assign quarantine status until released by QA
Document results on a goods receipt note (GRN) or incoming inspection report. Link the GRN number to every batch that consumes that material lot — this is your traceability foundation.
COA review is not enough — usually
Many manufacturers file the COA and release material without independent testing. For some low-risk packaging materials, COA review alone may suffice if your risk assessment supports it.
For critical materials — polymers, adhesives, active components, sterile barriers — independent testing against specification is expected. Auditors will ask for your incoming inspection SOP and verify testing was actually performed, not just COA filed.
Supplier non-conformances
When incoming material fails inspection:
- Quarantine the lot immediately
- Notify the supplier with documented NCR
- Investigate impact — was any material already issued to production?
- CAPA if systemic — recurring failures from the same supplier trigger re-evaluation or delisting
- Document disposition — return, destroy, concession (with justification and approval)
Concessions on failed incoming material require authorized approval and must not become routine.
Approved supplier list maintenance
Common ASL problems:
- Supplier approved years ago, never re-evaluated
- ASL includes suppliers no longer used; missing suppliers currently in use
- Production purchases from "emergency" unlisted suppliers without post-hoc qualification
- No link between ASL and actual purchase orders
Your QMS should enforce that production material can only be received from approved suppliers — ideally at the GRN stage.
Incoming inspection records auditors request
For a selected batch, auditors trace backward to material lots, then ask:
- GRN for each material lot
- COA from supplier
- Incoming inspection test results
- QA release signature and date
- Supplier approval record on ASL
All links must be intact. Missing GRN for a material lot in a released batch is a major finding.
Digital supplier and incoming quality management
Spreadsheets for ASL and paper GRNs break at scale. Digital systems provide:
- Approved supplier enforcement at goods receiving
- GRN with mandatory inspection checklists
- COA attachment and spec comparison
- Quarantine/release workflow with QA sign-off
- Automatic forward link to batch material issue
- Supplier scorecards from rejection and complaint data
Incoming inspection still on paper? RapidFacto manages supplier qualification, goods receiving, and material traceability in one system. Book a demo to see the workflow.