Medical Device Quality Agreement
Medical Device Quality Agreement
Medical Device Quality Agreement
Prepared by
Dan O’Leary
Ombu Enterprises, LLC
3 Forest Ave.
Swanzey, NH 03446
www.OmbuEnterprises.com
603-209-0600
Note: Forming the Final Supplier Agreement – After evaluation of the potential supplier you
may need to include additional clauses to close the gap between Customer’s requirements and
the Supplier’s capabilities.
1 Administrative Elements
1.1 Scope
This agreement defines the Quality Agreement between the parties identified below. It defines
the commitment both parties make to ensure that their respective products and services satisfy
the quality and regulatory requirements called out in this agreement. Both parties agree to
cooperate in the success of this agreement.
This agreement does not define the forecasting, ordering, delivery, or pricing requirements for
either party.
This agreement does not define the specifications for the products or services covered.
Note: The Supplier Name and the Customer Name can be expanded to include further
descriptive information about the company such as Company X, a contract manufacturer of
medical devices duly organized and existing under the laws of <list appropriate jurisdiction>.
Accuracy – A statement of how close a measured value is to the actual (true) value. See also,
precision.
Complaint – A written, electronic, or oral communication that alleges deficiencies related to the
identity, quality, durability, reliability, safety, effectiveness, or performance of a device
after it is released for distribution.
Directed Procurement – A case in which the Customer directs the Supplier to obtain a good or
service from a particular third party. In a directed procurement, the Customer is
responsible for product qualification Supplier qualification, etc. The Supplier should
track and report the third party’s performance metrics to the Customer.
Product – Product is the output of a process and includes, but is not limited to, goods, services,
software, documentation, and consulting.
Promptly – Unless specified otherwise, promptly means within ten working days.
QMS – Quality Management System
Repair – Action on nonconforming material to make it acceptable for the intended use
Supplier – The Supplier delivers product to the Customer. The term Supplier includes, but is
not limited to, contractors, consultants, sister organizations, and parent organizations.
Note: List the products that the Supplier provides to the Customer. The list should be specific,
but should not include revision levels or other information at that specific level. For example, it
would be better to say
Power Supply Part Number: A1234
rather than
Power Supply Part Number: A1234 Revision C
You probably do not want to reapprove the Supplier Agreement for every revision change in
the product.
Note: The table is not intended to show the relationship between the Supplier’s production sites
and Distribution sites. This could be a one-to-one, one-to-many, or many-to-one relationships.
Entering a production site and a distribution site into the same row does not necessarily convey
a connection.
Note: If the Supplier’s Production Site or Distribution Site is outside the United States, then
Customs consideration may apply.
The Customer receives the product at any of the sites listed below.
Should the Supplier determine that a requirement of 21 CFR Part 820 is not appropriate or not
applicable to the product delivered, the Supplier shall notify the Customer within thirty days of
making that determination. The list of agreed not appropriate or not applicable requirements is
shown in Appendix 1.
The Supplier shall resister the QMS with a registrar acceptable to the Customer. The Supplier
shall provide a copy of the registration certificate to the Customer.
Should the Supplier determine that a requirement of ISO 13485:2003 is not appropriate or not
applicable to the product delivered, the Supplier shall notify the Customer within thirty days of
making that determination. The list of agreed not appropriate or not applicable requirements is
shown in Appendix 2.
The Supplier shall resister the QMS with a registrar acceptable to the Customer. The Supplier
shall provide a copy of the registration certificate to the Customer.
Should the Supplier determine that a requirement of ISO 9001:2008 is not appropriate or not
applicable to the product delivered, the Supplier shall notify the Customer within thirty days of
making that determination. The list of agreed not appropriate or not applicable requirements is
shown in Appendix 3.
Should the Supplier determine that a requirement of ISO 14971:2007 is not appropriate or not
applicable to the product delivered, the Supplier shall notify the Customer within thirty days of
Should the Supplier determine that a requirement of a listed standard is not appropriate or not
applicable to the product delivered, the Supplier shall notify the Customer within thirty days of
making that determination. The list of agreed exclusions is also shown in the table below.
When used on, applied to, or incorporated into the product provided to the Customer, the
Supplier shall purchase the listed goods or services from the designated Third Party Supplier.
The Supplier shall provide the Customer with monthly performance reports on these Third
Party Suppliers that includes the number of purchase order lines placed with the Third Party
Supplier, the percentage of shipments received late, and the percentage of shipments rejected at
receiving acceptance (21 CFR §820.80(b) or ISO 13485:2003 Clause 7.4.3).
In selecting Third Parties Suppliers, the Supplier shall apply the requirements of 21 CFR
§820.50 and ISO 13485:2003 Clause 7.4. In addition, the Supplier shall apply the principles in
GHTF/SG3/N17:2008.
Medical Device Quality Agreement Template Page 8 of 17
Note: If the Supplier considers the list of Third Party Suppliers as confidential, define the
methods to protect the intellectual property. This could include non-disclosure agreements,
confidentiality agreements, etc.
1.10 Assignment
Neither party shall have the right to assign any or all of its rights or obligations under this
agreement without the other party’s prior written consent, which shall not unreasonably be
withheld. The foregoing notwithstanding, prior written consent shall not be required in
connection with a merger, consolidation, or a sale of all or substantially all of party’s assets to a
third party, except if such merger, consolidation or sale is with a competitor of the other party.
2 Compliance
2.1 Specifications
The Customer shall define the specifications for the product the Supplier provides. This could
take many forms including drawings, reference to commercial specifications, identify of brand
names, and standards. The specifications may be paper documents, electronic documents or
other appropriate media.
The Supplier undertakes to deliver product in full conformance to the agreed specifications.
When the specifications include references to brand names, the Supplier and Customer will
mutually agree on the implementation of any changes made in the brand name product.
Upon the Customer’s request, the Supplier shall disclose the results of any inspections or audits
and the associated cause and corrective action.
The Supplier shall promptly notify the Customer of any inspection or audit findings that impact
the safety, effectiveness, conformity, or availability of product the Supplier provides to the
Customer.
The Supplier shall keep records of these activities and make them available to the Customer
upon request.
3.2 Personnel
If contact between personnel and the product could reasonable be expected to have an adverse
effect on product quality, the Supplier shall establish and maintain requirements for the health,
cleanliness, personal practices, and clothing of personnel to adequately control this contact.
The Supplier shall keep records of these activities and make them available to the Customer
upon request.
3.3 Equipment
The Supplier shall ensure that all equipment used in the manufacturing process for product is
appropriately designed, constructed, placed, and installed.
The Supplier shall establish and maintain schedules for the adjustment, cleaning, and other
maintenance of equipment to ensure that manufacturing specifications are met.
The Supplier shall keep records of these activities and make them available to the Customer
upon request.
The Supplier shall keep records of these activities and make them available to the Customer
upon request.
The Supplier shall establish and maintain schedules for the calibration, adjustment, cleaning,
and other maintenance of equipment to ensure that manufacturing specifications are met.
Calibration standards used for IM&TE shall be traceable to national or international standards.
The Supplier shall keep records of these activities and make them available to the Customer
upon request.
The validation process shall create a validation protocol (describing the planned activities) and
a validation report (documenting the outcome of the planned activities). All validated process
changes shall be similarly validated prior to use.
The Supplier shall keep records of these activities and make them available to the Customer
upon request.
When the Supplier ships products produced using a validated process, the Supplier shall
include process documentation showing the date the process was operated, the name of the
operator, the identity of major equipment used, the identity and calibration recall date of the
IM&TE used in the process, and the setting of each input process parameter.
The Supplier shall keep records of these activities and make them available to the Customer
upon request.
The Supplier shall keep records of these activities and make them available to the Customer
upon request.
Upon the request of the Customer, the Supplier shall make all records available within two
working days.
The Supplier shall ensure that all products are stored to facilitate proper stock rotation and that
product is retrieved from stock using First In, First Out (FIFO) methodology.
Reusable containers are initially purchased by the Customer and provided to the Supplier as
Customer owned material.
The Supplier will repair or replace damaged reusable containers as necessary to keep the
circulating stock at the agreed level.
6 Change Control
6.1 Change Requests
If the Supplier requests to change a document, specification, drawing, etc. under the
Customer’s control, the Supplier shall document the request including the specific change, the
reason for the change, the benefit derived from approving the request, the loss incurred from
disapproving the request, and the anticipated lead time before the change is reflected in the
product.
The Customer shall make a decision to accept or reject the change within thirty days of
acknowledging receipt. For accepted changes, the Supplier and Customer will work together to
develop a plan to implement the change.
6.2 Deviations
If the Supplier needs to deviate from a document, specification, drawing, etc. under the
Customer’s control, the Supplier shall document the deviation request including the specific
deviation, the reason for the deviation, and the period (time, lots, etc.) the deviation will be in
effect.
If the Supplier requests authorization for a repair or concession disposition, the Supplier shall
document the disposition request including the inspection or test conducted, the actual results,
and, if applicable, the proposed repair.
The Supplier shall update the production monitoring portion of the ISO 14971 Risk
Management File to include information on the nonconformity.
The Supplier shall keep records of these activities and make them available to the Customer
upon request.
The Supplier shall initiate corrective action upon receipt of the Customer’s initiation. The
Supplier’s Corrective Action shall include the following steps.
1. Determining the cause(s) of nonconformity
2. Evaluate the need for action to ensure the nonconformity doesn’t recur
3. Determine the action needed to prevent recurrence
4. Implement the action needed to prevent recurrence
5. Review the effectiveness of the corrective action
The Supplier shall report the results of the corrective action to the Customer within 15 working
days of initiation. When the Corrective Action is not completed within 15 working days, the
Supplier shall provide a status report every 5 working days until the corrective action is
completed.
7.3 Complaints
7.3.1 Supplier Received Complaints
If the Supplier receives a compliant related to the product, or any similar product, the Supplier
provides to the Customer, the Supplier shall promptly notify the Customer.
The Customer will enter the complaint into the Customer’s Complaint Management System (21
CFR §820.198) and review and evaluate the complaint to determine whether an investigation is
necessary. The Customer will notify the Supplier of the decision to investigate or not.
If the Customer requires the Supplier’s assistance in the investigation, the Customer will follow
the Customer Initiated Corrective Action described above.
If the Customer requires the Supplier’s assistance in the investigation, the Customer will follow
the Customer Initiated Corrective Action described above.
The Supplier and the Customer shall cooperate in the exchange of information required to
effectively manage the Supplier’s medical device report in the Customer’s Medical Device
Event files.
The Supplier and the Customer shall cooperate in the exchange of information required to
effectively manage the Supplier’s Correction or Removal Report in the Customer’s Corrections
and Removals Records.
8 Audits
8.1 Customer Audits of Supplier Facilities
The Supplier shall allow the Customer, or its authorized representative, to perform audits of the
Supplier’s facilities, systems, documentation, and other requirements related to this agreement.
Medical Device Quality Agreement Template Page 15 of 17
The Supplier and Customer will agree upon methods to protect intellectual property such as
confidentially agreements, non-disclosure agreements, etc.
The Supplier shall issue a plan to determine the correction, cause, and corrective action for
each finding within thirty days of the Audit Report’s issue date.
The Supplier, Customer, and Third Party Supplier will agree upon methods to protect
intellectual property such as confidentially agreements, non-disclosure agreements, etc.
Annex 2
The list of agreed not appropriate or not applicable requirements from ISO 13485:2003
Annex 3
The list of agreed not appropriate or not applicable requirements from ISO 9001:2008
Annex 4
The list of agreed not appropriate or not applicable requirements from ISO 14971:2007