How to Verify a Medical Device Supplier Before Purchasing

Verification boundary

1. Supplier Verification Is Not the Same as Supplier Evaluation

Verification connects a claim to evidence: the legal company, its role, the relevant device record, and the quoted REF, label and pack.

Evaluation compares price, delivery, capacity and service after critical evidence is reconciled. Keep purchasing scores separate from unresolved identity or product gaps.

Before searching

2. Freeze the Exact Product and Quotation

A category name such as “sterile syringe” is insufficient. Obtain a quotation that identifies the seller and fixes the manufacturer REF, specifications, intended market, labeling and packaging before reviewing records.

Our insulin syringe supplier guide applies these checks to a specific product category. Other devices need their own classification, evidence and acceptance criteria.

Entity resolution

3. Identify Every Legal and Commercial Entity

The website, invoice, label and regulatory record may name different companies. Identify each party and document the relationship rather than requiring every name to be identical.

• Commercial seller named on the quote and contract
• Invoice issuer and the proposed payment beneficiary
• Legal manufacturer and physical manufacturing site
• Labeler or private-label entity shown on the device label
• Repackager, relabeler or specification developer, if applicable
• Initial importer for a foreign-manufactured device, if applicable
• U.S. agent for a foreign establishment, noting that this is a distinct role
• Warehouse or third-party logistics provider holding the inventory

Name differences can be legitimate. Require an explanation and supporting records sufficient to connect the contracting seller to the responsible manufacturer and quoted product.

Use the right expectation

4. Determine Whether the Seller Is a Manufacturer, Distributor or Importer

FDA registration duties depend on the activity. A U.S. distributor that does not import generally does not register or list for that role. An initial importer registers and identifies its manufacturers, but does not list devices in that role. Manufacturers, relabelers, repackagers and foreign exporters have different obligations. Use the current FDA activity table.

Official source: FDA: Who Must Register, List and Pay the Fee. Role-specific exceptions and the exact activities performed must still be assessed; this table is not a substitute for 21 CFR Part 807 analysis.

Commercial identity

5. Verify Business and Payment Identity

Match the contracting seller, invoice issuer and proposed payment beneficiary. Verify changes through an independently known contact; document any approved payment-agent arrangement.

Apply the business-registration, licensing and transaction-screening controls relevant to your organization and jurisdiction. FDA device records do not replace these checks.

Official database check

6. Search FDA Establishment Registration and Device Listing Correctly

1. Search the entity expected to register. Use the legal manufacturer, manufacturing site, relabeler, repackager or initial importer—not automatically the commercial distributor name.
2. Try controlled name variants. Search the full legal name, former name, address, owner/operator number or registration number supplied by the company.
3. Review the establishment activity. A record for an importer or contract sterilizer is not evidence that the same company manufactured the device.
4. Review the applicable device listing. Match the device name, product code, proprietary name and activity to the offer. For an initial importer, identify the manufacturers and check the relevant manufacturer listings rather than expecting an importer device listing.
5. Save dated evidence. Record the search terms, source URL, retrieved result and any unresolved gap. Public records and supplier documents may update at different times; investigate discrepancies before approval.

Use the official FDA Establishment Registration & Device Listing database and review FDA’s explanation of “FDA registered” and “FDA certified” claims.

Product-specific requirement

7. Determine the Device Classification and Premarket Pathway

Use the device name, regulation number and product code to establish classification and applicable controls before requesting a premarket number. The device may use 510(k), De Novo, PMA, another applicable pathway or a premarket-notification exemption.

Many Class I and some Class II devices are 510(k) exempt, subject to limitations. An exemption does not automatically remove other applicable registration, labeling, quality-system or reporting obligations.

Clearance or approval mapping

8. Verify the Applicable 510(k), De Novo or PMA Record

Search the claimed K, DEN or PMA number in the appropriate official database. Compare the applicant, device name, product code, regulation, intended use, decision and available public documents with the offer.

The seller and applicant may differ. Obtain a documented connection to the responsible manufacturer and exact product; a similar photo or device name is insufficient.

Core evidence test

9. Match the Quoted SKU Across Four Evidence Sources

A public record may describe a device family rather than every commercial REF. Reconcile the quotation, actual label, controlled product documents and official record to establish how the offered configuration fits that family.

Use our documentation support to organize questions for the selected SKU. Our published support scope defines the information we provide and the responsibilities retained by the buyer.

Identifier check

10. Verify UDI and GUDID Information Where Applicable

Where UDI applies, read the Device Identifier from the actual label and search AccessGUDID. Compare the labeler, brand, model or version, catalog number and package information.

The DI identifies the device version or model. Conditional PI fields can contain lot, serial number, expiry or manufacture date; GUDID does not store those PI values. Read actual lot and expiry from the received labeling and records.

Investigate a missing result: check the identifier, packaging level, requirement and any exception. Use AccessGUDID with FDA’s UDI guidance.

Quality evidence

11. Validate ISO 13485 and Other Quality-System Evidence

If supplied, verify the ISO 13485 certificate with the issuer or an appropriate accreditation-backed source. Match the entity, site, certificate number, standard, scope, dates and current status to the supplied activity.

FDA’s QMSR became effective February 2, 2026 and incorporates ISO 13485:2016 with additional FDA requirements. FDA does not require or issue ISO 13485 certificates, and a certificate does not exempt a manufacturer from FDA inspection. A certificate is quality-system evidence, not product clearance or “FDA certification.”

• Confirm the certificate covers the relevant site—not only a headquarters address
• Read the scope; do not assume it covers every device in the seller’s catalog
• Check whether the certificate is current, suspended, withdrawn or superseded
• Ask how specifications, release, nonconformance, complaints and changes are controlled
• Request product-specific evidence at a level appropriate to the device and transaction

Official source: FDA QMSR Frequently Asked Questions.

Context, not a binary verdict

12. Check Recalls, Warning Letters, Import Alerts and Inspection Information

Search the responsible entities, former names, product and applicable premarket identifiers. Assess the event’s date, scope, status, affected lots and response. A recall is not an automatic rejection; an empty search is not proof of no risk.

Supply-chain authority

13. Verify Product Source and Distribution Authority

Trace the product to the manufacturer, importer or upstream distributor. For strategic or higher-risk purchases, confirm the relationship through an independently known manufacturer contact where practicable.

Check an authorization letter’s issuer, recipient, territory, product scope, dates and signatory. It is commercial evidence. If confidentiality limits disclosure, agree an alternative evidence route that still resolves the material question.

Private-label products require a separate responsibility map

For private label, document the manufacturer and labeler roles and applicable listing, UDI, complaint, reporting and recall responsibilities. Review our private-label support and labeling process before approving artwork.

Product and lot evidence

14. Verify Sterility, Shelf Life and Lot Traceability

For a device represented as sterile, match the label claim, sterilization method, packaging and shelf life to appropriate product evidence. Assess lot-release records relevant to the agreed transaction; a certificate for an unrelated product or run is insufficient.

Turn claims into order data

15. Test U.S. Inventory and Fulfillment Claims

Request dated, order-specific evidence for the exact REF, available-to-promise quantity, inventory status and applicable lot and expiry. Distinguish allocated or available stock from expected receipts. A U.S. address alone does not establish stock availability.

• Verify the exact manufacturer REF and package level held in stock
• State minimum remaining shelf life in the PO or supply agreement
• Separate warehouse handling time from carrier transit time
• Confirm backorder, allocation and partial-shipment rules
• Ask for upstream replenishment lead time and shortage-notification timing
• Use the first order to compare promised and actual processing milestones

Our fulfillment service and wholesale programs support supply planning. We confirm the selected SKU, availability, documentation and delivery terms in the quotation.

Before funds are released

16. Complete Payment and Purchase-Order Controls

Adapt the written controls to your transaction with the appropriate purchasing, quality and legal functions. The table is a decision checklist, not a universal contract.

Verify the real transaction

17. Inspect a Sample and a Controlled First Order

A sample supports physical, label and packaging review. Retain an approved sample or controlled images, then reconcile a limited first commercial receipt. A sample alone does not establish ongoing consistency, future-lot conformity or commercial stock.

First-receipt acceptance checks

• Seller, purchase order and packing slip are consistent
• Manufacturer REF and supplier SKU match the approved product
• Device, label, packaging and package count match the approved revision
• UDI, lot and expiration are present and readable where required
• Remaining shelf life meets the written requirement
• Packaging is intact, with no unexplained relabeling or over-stickering
• Agreed CoC or lot documents identify the received product or lot
• Actual processing, transit and communication match the quotation
• Received lot can be linked to the PO and inventory location

Document the outcome

18. Classify the Result: Verified, Conditional, Hold or Reject

Use these four statuses as an internal purchasing framework. They are not FDA classifications. Define who can approve the decision and its limits.

Limit approval to the named seller, responsible manufacturer, approved SKUs, label and pack versions, destination and agreed supply route. Record re-verification triggers; do not extend approval to the entire catalog.

Escalation triggers

19. Medical Device Supplier Verification Red Flags

Investigate a red flag using its severity, explanation and independent evidence. Record a hold or escalation when a material question remains; do not treat every discrepancy as proof of fraud.

Procurement tool

20. Supplier Verification Checklist and Evidence Tools

Use our blank checklist, evidence ledger and RFQ brief to record actual findings. The ledger adds a source, applicability basis, gap owner and disposition to each check. These are editorial working tools, not completed audits or evidence of a supplier’s performance.

1. Fix the product, seller and destination.
2. Map each party’s actual role.
3. Check applicable public and product records.
4. Reconcile labeling, quality evidence and source.
5. Confirm stock, lot, shelf life and order controls.
6. Inspect the first receipt.
7. Record scope, disposition and re-verification triggers.

TONMIT SUPPLIER VERIFICATION CHECKLIST
Revision: 2026-10-14. Blank working template; not a completed audit.

Seller / manufacturer / REF / destination:
Reviewer / check date / evidence file:

1. [ ] Record the seller’s full legal name, address and authorized contact.
2. [ ] Confirm the quote, contract, invoice and proposed payment beneficiary.
3. [ ] Freeze the legal manufacturer, brand, REF, supplier SKU, specification and pack.
4. [ ] Identify the manufacturer, labeler, importer, relabeler and distributor roles as applicable.
5. [ ] Search the entity expected to appear in FDA Registration & Listing.
6. [ ] Verify establishment activity, address and device listing; save the date and result.
7. [ ] Determine product code, device class, regulation and premarket pathway.
8. [ ] Verify the K, DEN or PMA number when applicable.
9. [ ] Document why an exemption applies when no premarket submission is required.
10. [ ] Match quote, label, controlled documents and official records.
11. [ ] Search the UDI-DI in AccessGUDID where applicable.
12. [ ] Validate the ISO 13485 certificate site, scope, issuer and current status if supplied.
13. [ ] Search relevant recalls, Warning Letters, Import Alerts and public inspection data.
14. [ ] Verify product source and any distribution-authorization evidence.
15. [ ] Confirm sterile status, shelf life, lot-release evidence and traceability as applicable.
16. [ ] Confirm exact-SKU inventory, lot, expiration and fulfillment terms.
17. [ ] Write no-substitution, shelf-life, acceptance, return and change controls into the PO.
18. [ ] Inspect and retain an approved sample or controlled comparison record.
19. [ ] Complete a controlled first-order receipt and reconcile every critical field.
20. [ ] Record Verified, Conditional, Hold or Reject status with scope, owner and date.
21. [ ] Set re-verification triggers for renewal, change, complaint, recall or performance failure.

For every check, record the source, date, finding and disposition.
If not applicable, record the basis. Resolve critical gaps before approval.
Approval scope / status / decision owner / date / next review:

TONMIT SUPPLIER EVIDENCE MATCHING LEDGER
Revision: 2026-10-14. Complete one record per claim or field.
Blank editorial worksheet, not a certification or a completed QC record.

Verification file / seller / manufacturer / exact REF:
Field or claim under review:
Expected value from approved quote / specification:
Observed value from label / sample / document / official record:
Source URL or controlled document identifier / revision:
Search terms / record number / packaging level:
Evidence captured on / checked by:
Match / unresolved / not applicable (record applicability basis):
Discrepancy and significance:
Required clarification or corrected evidence:
Temporary restriction or hold:
Action owner / deadline:
Buyer disposition / approval owner / date:
Approval scope / re-verification trigger:

Keep company identity, device regulatory mapping, quality-system scope,
and product or lot evidence as separate checks. One result cannot close
an unrelated field. Four-status decisions are internal purchasing controls.

RFQ TOPIC: MEDICAL DEVICE SUPPLIER VERIFICATION

Company / contact / business email:
Destination market / country / postal code:
Contracting seller / legal manufacturer / labeler / importer if applicable:
Product category / manufacturer REF / supplier SKU:
Critical specifications / label revision / packaging hierarchy:
Requested quantity / desired receipt date:
Applicable premarket or listing references supplied:
UDI-DI / package level if applicable:
Required product, quality-system and lot documents:
Exact mismatch or evidence gap to resolve:
Minimum remaining shelf life / inventory confirmation needed:
Standard stock or private-label scope:
No-substitution and first-receipt requirements:

Request support for the named product and transaction. Approval remains
with the buyer's authorized functions. Do not include bank credentials.

Final decision rule

21. Verify the Transaction, Not Just the Company

Approve a defined transaction only when the seller, responsible entities, product records, quoted configuration and received goods can be reconciled.

Keep a dated evidence file with source links, actual findings, unresolved gaps, owners and disposition. Follow the buyer’s approval process when a gap requires a hold, restriction or rejection.

Recheck when products, sites, labels, responsible entities, certificates or supply performance change. Verification supports a purchasing decision; it does not guarantee future conformity.