How to Qualify a Medical Manufacturer Before You Source

Most procurement failures in medical sourcing don't start with a bad product — they start with an unqualified manufacturer. In 2026, with new regulatory frameworks in force across the US and EU, the cost of sourcing from a non-compliant supplier has never been higher. This guide gives procurement managers a repeatable framework for qualifying medical manufacturers before any purchase order is issued.

Why Manufacturer Qualification Is Non-Negotiable in 2026

Regulatory bodies are tightening accountability at every level of the supply chain. On February 2, 2026, the FDA's new Quality Management System Regulation (QMSR) came into force, replacing the previous Quality System Regulation (21 CFR Part 820) and formally incorporating ISO 13485:2016 as the baseline standard for all medical device manufacturers supplying the US market (FDA, February 2026).

In the EU, the EUDAMED database registration deadline for economic operators — including manufacturers and authorized representatives — is May 28, 2026. Sourcing from a manufacturer not registered in EUDAMED now creates direct legal exposure for the buyer (European Commission, 2026).

At the same time, procurement leaders cite rising costs and supply chain fragility as their top concerns entering 2026. A survey of 102 US health system supply chain executives found that cost pressure and sourcing risk are now driving organizations away from single-source models toward diversified, pre-qualified supplier networks (Advisory Board, March 2026).

A Step-by-Step Manufacturer Qualification Framework

Qualifying a medical manufacturer is not a single check — it is a structured process with clear pass/fail gates. Apply the following steps to every new supplier before onboarding.

1. Confirm Active Certifications

Request current copies of ISO 13485 certificates, CE marking documentation, and any applicable FDA registration numbers. Verify these directly against issuing body records — do not rely on manufacturer-provided summaries alone. ISO 13485 certificates have defined validity periods; confirm the expiry date and whether a re-certification audit has been completed.

2. Check Regulatory Registration Status

For EU supply: confirm the manufacturer's Actor Registration Single Registration Number (SRN) in EUDAMED. For US supply: search the FDA's device registration and listing database using the manufacturer's establishment registration number. Both checks take under five minutes and eliminate a significant category of compliance risk.

3. Review Quality Management System Evidence

Ask for the manufacturer's most recent internal audit summary and management review output. Under ISO 13485 and the FDA's updated QMSR, these documents must exist and must show active corrective action processes. A manufacturer that cannot produce them within 48 hours is a risk signal.

4. Assess Production Capacity and Lead Times

Verify that stated production capacity is backed by actual infrastructure. Request a facility profile or, for high-value relationships, conduct a remote audit. Confirm minimum order quantities, standard lead times, and what backup production arrangements exist in the event of a disruption. Overdependence on single-facility manufacturers remains one of the most common causes of healthcare supply shortages (Minerva Health Solutions, March 2026).

5. Verify Financial and Operational Stability

A manufacturer with strong certifications but weak financials is still a supply chain risk. Request basic financial references or trade credit reports for new suppliers. Check how long they have been operating, whether they export to multiple markets, and whether any significant customer concentration exists that could divert capacity away from your orders.

6. Confirm Documentation Completeness

Before placing any order, confirm the manufacturer can provide all required documentation: Declaration of Conformity, technical files, product labeling in required languages, and shipping and customs paperwork. Documentation gaps at the point of order are a leading cause of customs delays and regulatory holds.

Regulatory agencies hold device manufacturers accountable for the performance of their entire supply chain — and that accountability does not stop at the first tier. As a buyer, your approved supplier list is a compliance document, not just a contacts list. (Kinmed Procurement Framework, March 2026)

Building a Repeatable Qualification Process

Ad hoc supplier checks create inconsistency and audit gaps. The most effective procurement teams standardize qualification into a documented Approved Supplier List (ASL) with defined onboarding criteria, risk tiers, and review cycles. Segment suppliers by criticality: high-volume consumables, single-source critical devices, and standard commodity products each warrant different levels of due diligence.

Set a minimum review cycle — annually for critical suppliers, biannually for standard — and document every check. In the event of a regulatory audit or product recall, your ability to demonstrate supplier oversight is not optional.

Suplivia's network of over 10,000 verified manufacturers across 80 countries gives procurement teams a pre-screened starting point — every listed manufacturer has been reviewed for active certification status, including ISO 13485, CE marking, and FDA registration where applicable. For teams building or expanding their approved supplier lists, it removes the first and most time-consuming layer of qualification work.

---