Supplier and Purchasing Controls
A supplier relationship affects quality before a delivery arrives and after it is accepted. Supplier and purchasing controls connect what the organization needs with what an external provider can reliably supply.
In this lesson, watch the full sequence: selecting a supplier, communicating requirements, verifying the purchased output, and monitoring performance. Also notice what happens when a supplier proposes a change and what responsibility remains with the manufacturer when work is outsourced.
Select for the actual need
Establish evaluation and selection criteria before relying on the supply. Consider the supplier's ability to meet requirements, its performance, the effect of the product or service on the medical device, and associated risk.
A calibration service and a safety-critical component supplier provide very different outputs, but both can affect quality. The evaluation needs to fit the actual purchase.
The question is not simply whether the supplier is a respected business. It is whether the available evidence supports confidence that this supplier can provide what your organization needs.
A certificate is one input
Certification can support a supplier evaluation. It does not by itself demonstrate that the supplier will meet the requirements of a particular component, service, or order.
The evaluation still needs to connect the supplier's capability with the intended supply and its effect on the device. A certificate cannot resolve an unclear specification or a gap in the evidence for the work being purchased.
Use certification as relevant information within that evaluation. Keep the purchasing decision grounded in the actual need and the controls appropriate to its risk.
Communicate an adequate order
Purchasing information describes or references what is required. That may include a specification and revision, acceptance conditions, and appropriate requirements for processes, equipment, personnel qualifications, or the quality management system.
Review the information for adequacy before communicating it. A part number can be sufficient in some circumstances, but a vague phrase such as equivalent component may leave important requirements unresolved.
The supplier and the person accepting the output need a consistent basis for the work. Clear purchasing information supports that connection before the order is placed.
Make change expectations clear
Purchasing arrangements should include applicable expectations for the supplier to notify the organization before implementing changes that affect conformity.
A supplier may change a material, software, a process, or a specification. What appears equivalent to the supplier may have a different effect in your device or production process.
Notification gives the organization a chance to assess that effect. Do not accept an unreviewed change merely because the supplier describes it as equivalent. Design or process verification and validation may need attention as part of the assessment.
Verify the purchased output
Define verification using supplier evaluation results and product risk. Incoming testing is one possible control; it is not the only method for every purchase.
Appropriate supplier evidence, certificates, and other defined controls may contribute to the needed confidence. Keep the verification records and make sure required supporting evidence is available.
The method should provide a justified basis for the actual acceptance decision. A familiar routine is not enough if it does not address the requirements and risks of what was purchased.
Evidence must match the requirement
Suppose a delivery includes a certificate, but the certificate refers to the wrong specification or revision. Its presence does not resolve the mismatch.
Check whether the evidence supports conformity to the actual purchasing requirements. If the delivery is nonconforming, identify and control it and route it through the applicable process.
This is another handoff between connected activities. Purchasing, receiving, technical personnel, and the supplier may each hold part of the information. The decision needs a consistent, documented basis rather than an assumption that paperwork alone proves acceptance.
Monitor and reevaluate
Supplier control continues after initial approval. Planned monitoring and reevaluation use performance information such as acceptance failures, complaints, service issues, and responses to problems.
Address failures in proportion to risk and applicable requirements. A pattern of recurring problems may reveal a weakness that individual delivery decisions do not solve.
The Quality Manager can help maintain the evidence and coordinate follow-up. Monitoring becomes useful when what the organization learns about performance influences the controls and decisions applied to future supply.
Outsourcing keeps responsibility connected
Consider a manufacturer that outsources a product test to a laboratory. A written quality agreement defines responsibilities and relevant requirements. The manufacturer retains responsibility and oversight.
The Quality Manager can maintain supplier evidence, monitor performance, and coordinate issues. Authorized technical personnel evaluate methods and acceptance criteria.
Concise records can be useful if they show what was evaluated, why the control was appropriate, what was received, and what action followed. The purpose is a dependable decision about the outsourced work, supported by evidence.
What to carry into your work
Connect supplier selection to the actual need, purchasing information to clear requirements, and acceptance to relevant evidence. Continue learning from performance and assess changes. External providers can perform the work, while the manufacturer keeps its responsibility for conformity.
This lesson draws on the AAMI and ISO practical guide to ISO 13485, section seven point four and section four point one point five. It is introductory education. Applicable requirements and your company's approved procedures govern actual work.
SOURCE CREDIT AAMI/ISO 13485:2016 — Medical Devices: A Practical Guide (ISO 2017), §7.4; §4.1.5 for outsourced processes; purchased through ANSI. This video presents original educational explanations informed by the guide. It is not an official AAMI, ISO, ANSI or FDA course. Applicable requirements and company procedures govern actual work.