| Product classification |
Reusable, non-powered surgical hand instruments |
Define intended use, anatomical application, materials, dimensions, surface finish, cleaning method, and maximum reuse cycle. Classification must be confirmed for each target market. |
Obtain a written classification decision before requesting quotations so that suppliers quote the correct compliance package. |
Product specification, risk classification rationale, intended-use statement, drawings, material declaration, and sample inspection report. |
EU Medical Device Regulation 2017/745, including classification rules for surgically invasive and reusable instruments. |
| Material safety |
Metallic instruments and components |
Use controlled material grades suitable for the intended clinical environment. Verify corrosion resistance, biocompatibility where applicable, hardness, surface condition, and traceability. |
Require full material traceability from incoming material through final shipment and establish acceptance limits for corrosion, burrs, scratches, and dimensional variation. |
Material certificates, lot traceability records, dimensional inspection reports, corrosion testing, and biocompatibility assessment where relevant. |
ISO 10993 series for biological evaluation; ISO 13485 quality-management principles. |
| Reprocessing and reuse |
Reusable surgical tools |
Specify validated cleaning, disinfection, sterilization, drying, inspection, and maintenance instructions. The design should support effective reprocessing without hidden soil-retention areas. |
Approve only tools with documented reprocessing instructions and evidence that the stated reuse limit is technically justified. |
Validated reprocessing instructions, simulated-use testing, reuse-cycle data, packaging requirements, and visual inspection criteria. |
ISO 17664-1 for information supplied by the manufacturer for processing of medical devices. |
| Sterility assurance |
Sterile, single-use medical tools |
Define the required sterility method, packaging configuration, shelf life, sterile barrier performance, and environmental controls during manufacture and packing. |
Use suppliers able to demonstrate a validated sterilization process and maintain batch-level release records. |
Sterilization validation, bioburden data, packaging validation, seal-strength results, shelf-life evidence, and certificate of sterilization. |
ISO 11135 for ethylene oxide sterilization; ISO 11137 for radiation sterilization; ISO 11607 for packaging for terminally sterilized devices. |
| Electrical safety |
Powered diagnostic or therapeutic tools |
Define electrical input, essential performance, protection against electric shock, electromagnetic compatibility, alarms, environmental conditions, and maintenance requirements. |
Complete safety and EMC testing before commercial approval and require configuration control for hardware and firmware revisions. |
Electrical safety test report, EMC test report, software and firmware revision history, user manual, service manual, and risk-management file. |
IEC 60601-1 for basic safety and essential performance; IEC 60601-1-2 for electromagnetic compatibility. |
| Software and connectivity |
Connected instruments and software-enabled tools |
Define cybersecurity controls, user access, data integrity, update procedures, interoperability, backup, and failure-response behavior. |
Require secure development evidence and a documented vulnerability-management process throughout the product life cycle. |
Software architecture, threat model, cybersecurity risk assessment, penetration-test summary, update policy, and software bill of materials where applicable. |
IEC 62304 for medical-device software life-cycle processes; ISO 14971 for risk management. |
| Quality-management system |
All regulated medical tools |
The supplier should operate a documented quality system covering design controls, purchasing controls, production, nonconformity handling, corrective action, complaints, and change control. |
Prioritize suppliers with a current ISO 13485 certificate applicable to the proposed manufacturing site and product scope. |
Quality certificate, certificate scope, audit history, process map, nonconformity statistics, corrective-action records, and change-notification procedure. |
ISO 13485:2016 quality-management systems for medical devices. |
| Risk management |
All medical tools, especially invasive and powered products |
Identify hazards related to use, misuse, reprocessing, transport, storage, electrical energy, software, materials, and foreseeable failure modes. |
Require risk controls to be linked to verification evidence and reviewed whenever the design, supplier, material, or manufacturing process changes. |
Risk-management plan, hazard analysis, FMEA or equivalent analysis, verification records, residual-risk evaluation, and benefit-risk assessment. |
ISO 14971:2019 medical-device risk-management requirements. |
| Target-market registration |
Products intended for multiple jurisdictions |
Map the applicable regulatory pathway separately for each market. Classification, conformity assessment, labeling, importer obligations, and post-market duties can differ by jurisdiction. |
Create a market-entry matrix before supplier selection and avoid assuming that approval in one jurisdiction automatically transfers to another. |
Regulatory pathway matrix, classification decision, technical documentation index, labeling mock-up, authorized-representative or importer plan, and post-market surveillance plan. |
EU MDR 2017/745; United States medical-device requirements; applicable national legislation in each destination market. |
| Supplier qualification |
New or existing overseas suppliers |
Assess manufacturing capability, process validation, quality history, traceability, capacity, financial continuity, regulatory experience, and subcontractor control. |
Use a risk-based supplier scorecard and complete qualification before placing production orders, not only before the first shipment. |
Supplier questionnaire, remote or on-site audit, sample approval, process capability data, business-continuity plan, and approved-supplier record. |
ISO 13485 purchasing and supplier-control principles; risk-based quality-audit practice. |
| Inspection and acceptance |
Precision tools and critical components |
Define critical-to-quality characteristics, sampling plan, measurement equipment, visual standards, functional tests, and nonconforming-product controls. |
Set objective acceptance criteria before production and independently verify critical characteristics on initial and periodic shipments. |
Inspection plan, calibrated equipment records, first-article inspection, lot-release report, certificate of conformity, and defect classification. |
ISO 2859-1 sampling procedures for inspection by attributes; product-specific validation remains necessary. |
| Supply continuity |
Long-lead or single-source components |
Identify critical raw materials, sterilization capacity, special processes, tooling dependencies, transport routes, and alternate manufacturing sites. |
Maintain approved secondary sources or documented contingency plans for critical components and processes. |
Supply-chain map, capacity plan, business-continuity plan, disaster-recovery plan, safety-stock policy, and approved alternate-source list. |
ISO 13485 continuity and supplier-control practices; internal business-continuity requirements. |
| Logistics and packaging |
International shipments of medical tools |
Define packaging strength, temperature and humidity limits, transportation hazards, labeling, customs documentation, and storage conditions. |
Validate the shipping configuration for the intended route and preserve lot, expiry, and sterile-status information throughout transport. |
Transport simulation, packaging drawings, storage-condition statement, shipping label, commercial invoice data, packing list, and traceability records. |
ISO 11607 for sterile-barrier packaging; applicable international transport and customs requirements. |
| Commercial sourcing targets |
All categories |
Compare total cost of ownership rather than unit price alone, including tooling, testing, regulatory documentation, inspection, freight, duties, warranty, and supplier-change costs. |
Evaluate at least three technically qualified supply options where market conditions permit, while protecting quality and regulatory compliance. |
Should-cost model, landed-cost calculation, quotation comparison, payment terms, tooling ownership terms, warranty terms, and change-control clauses. |
Internal procurement policy and risk-based total-cost-of-ownership analysis. |
| Ethical and environmental sourcing |
All categories and manufacturing locations |
Assess labor conditions, restricted substances, waste handling, energy use, water use, and responsible sourcing of relevant materials. |
Include environmental and social criteria in supplier selection and require documented corrective actions for identified risks. |
Supplier code of conduct, restricted-substance declaration, environmental permits, audit results, emissions information, and corrective-action plan. |
ISO 14001 environmental-management practices; applicable labor, environmental, and chemical regulations. |