Suppliers, facility and the readiness nobody audits until late
“How do I know my suppliers and my facility will survive an inspection I have not had yet?”
A first inspection rarely fails on the science. It fails on the parts of the operation that grew without being designed: a supplier qualified by invoice, a facility whose controls were never formally established, a change made because it was obviously better.
WHAT THIS IS NOT
Orientation for translating research toward a regulated product — not a determination of device status, regulatory pathway, submission type or clinical adequacy, and not a substitute for qualified regulatory advice. SPEQ is independent: linked institutions, incubators and agencies are third parties, and nothing here implies affiliation, endorsement or partnership with any of them.
ARE YOU HERE?
- You are buying materials or services that will be in or around a regulated product
- Supplier selection has been driven by lead time and price, which is normal and not yet a problem
- The facility works, and nobody has written down what makes it work
WHAT TO DECIDE NOW
- Which suppliers are critical — the ones whose failure reaches the product — and qualifying those first rather than all of them equally
- What a quality agreement with each critical supplier must assign, particularly change notification, which is the clause that matters most and is negotiated least
- Which facility controls need qualifying, based on what affects product quality rather than on what is easy to test
START KEEPING THESE RECORDS NOW
- Supplier qualification records including the rationale for criticality, so the depth of oversight is defensible rather than uniform
- Facility and equipment qualification with requirement-to-test traceability, which is what makes the qualified state provable rather than asserted
- Change records for anything altered after qualification, however obviously beneficial the change was
THE PROBLEM THIS ANSWERS
Work is placed with suppliers, CDMOs and CROs before anyone decides which of them are critical, so qualification and quality agreements arrive after the work they were meant to govern.
What it costs: Work already performed under no agreement stays unqualified. Re-qualifying the supplier does not retroactively qualify what they already did.
NOT YET MEASURED — Arrivals on the sector pages from startup-shaped queries rather than from CDMO-shaped ones.
Facility, utility and equipment work is commissioned by an engineering contractor and handed over without the qualification rationale, so the receiving quality unit inherits assets it cannot evidence.
What it costs: Qualification is repeated at the receiving end, or accepted on trust and then found wanting at the first inspection of the record behind it.
NOT YET MEASURED — C&Q scope planner runs from organisations at the earliest lifecycle phases.
WHERE THIS GOES WRONG
- Qualifying suppliers uniformly. Effort spread evenly leaves the critical ones under-examined and the trivial ones over-documented.
- Accepting a certificate as qualification. A certificate attests to a system; qualification is a judgement about this supplier for this material.
- Letting an unnotified supplier change reach the product. This is the single most common route by which a controlled process quietly stops being one.
WHAT THIS DOES NOT ANSWER
- Whether your facility requires registration, licensing or inspection before use, which depends on product type and jurisdiction
- Whether a supplier’s existing certification covers your intended use of them, which their certificate scope will say and their salesperson may not
OFFICIAL SOURCES · INDEPENDENT THIRD PARTIES
What registration is and — explicitly — what it is not: 21 CFR §207.77 states registration denotes no approval.
ICH Q7 — Good Manufacturing Practice for Active Pharmaceutical Ingredients ↗The expectations for materials upstream of the finished product, which founders often assume start later than they do.
GO DEEPER ON SPEQ