A medical device audit rarely fails because someone forgot to sweep the warehouse floor. It fails because a product’s story has gaps: nobody can show where it sat, who handled it, which batch went where, or what happened when something went sideways. To prepare medical device audits properly, treat every carton, record and exception as evidence – not office admin with a lanyard.
For ecommerce brands and healthcare distributors, this is where operations stops being the quiet person at the party. It becomes the reason a regulator, customer or quality manager believes your business is in control.
Why medical device audits make ordinary fulfilment look adorable
A normal consumer parcel can survive a surprising amount of chaos. A missing tote may be irritating; a delayed gadget may earn a grumpy review. Medical devices live under a stricter social contract. Depending on the product, its classification and the markets involved, you may need to demonstrate traceability, controlled storage, trained personnel, complaint handling and documented decisions.
The auditor is not asking whether your team means well. They are asking whether the system works when the usual person is on leave, a scanner misbehaves, or a courier turns up early with the manners of a Labrador near a picnic.
This is also why a glossy policy folder is not enough. Policies matter, but an audit compares what the document says with what people actually do. If your procedure says stock is quarantined immediately, but the warehouse team points vaguely at a corner labelled “maybe”, the corner will have a very long day.
Start with the product journey, not the spreadsheet
Before gathering documents, walk a device from receiving to dispatch. Then walk it backwards from a customer complaint or a recall scenario. This exposes the awkward hand-offs that process maps tend to draw with suspicious optimism.
Ask simple, uncomfortable questions. Who verifies the delivery against the purchase order? How is damaged stock separated? Can the system distinguish sellable, quarantined and expired inventory? Are serial, lot or batch numbers captured at the right point? If temperature or humidity matters, can you produce the records for the relevant period rather than merely locate a thermometer on the wall?
The right controls depend on the device and its risk profile. A low-risk accessory stored at ambient conditions does not need the same operational treatment as a sterile product, an implantable device or equipment with narrow environmental requirements. But every business needs a clear answer to one central question: can we prove what happened to this unit?
Run a traceability drill before anyone asks
Pick one recently shipped unit at random. Give the team a reasonable deadline to retrieve its receiving date, supplier, storage location, lot or serial number, picker, dispatch record and customer destination. Then reverse the exercise: pick a supplier batch and identify every affected order.
Do not choose the neat example everybody knows. Pick a mildly irritating one: a partial receipt, a return, a split shipment or stock transferred between sites. These are the moments where systems earn their rent.
If it takes three people, two inbox searches and a hopeful message in a chat group to answer, that is useful information. Better to discover it on a Tuesday morning than while an auditor watches the clock with professional serenity.
Build an audit file people can actually use
An audit file should not resemble a digital attic. Group documents by the way an auditor will investigate the operation: governance, people, premises, equipment, inventory controls, traceability, complaints and corrective action.
Your exact requirements will vary by jurisdiction and quality system, including whether ISO 13485, local medical-device rules, good distribution practice or customer-specific standards apply. Get regulatory and quality advice for your product and markets. The operational principle is less exotic: retain controlled, current records that match the work being performed.
At minimum, make sure you can quickly retrieve these records:
- approved procedures and a clear revision history, so nobody is following a printout from the Palaeolithic era;
- staff training records, including role-specific training and evidence that competency was checked where relevant;
- receiving, storage, picking, packing and dispatch records, with lot, batch or serial-number controls where required;
- environmental monitoring, calibration, maintenance, cleaning and pest-control records for relevant facilities and equipment;
- deviations, complaints, returns, non-conforming product, corrective actions and evidence those actions were checked for effectiveness.
The final item is frequently where good intentions go to hide. Logging a problem is not the same as fixing it. If labels were repeatedly smudged, for example, an auditor will want to see the investigation, the decision made, the change introduced and whether the issue stopped recurring.
Prepare medical device audits by testing people, not just paperwork
A document can be perfect and still fail to describe reality. Schedule short floor interviews with receivers, pickers, customer-service staff and supervisors. Ask them to explain what they do when stock arrives damaged, a device is returned, a temperature alert occurs or an order contains an unexpected lot number.
This is not a memory contest. Nobody should recite a 30-page procedure like Shakespeare at a warehouse induction. They should know the practical next step, where to find the approved instruction and who to alert.
Watch for informal workarounds. They are usually invented for sensible reasons – a system is slow, labels run out, a shift is understaffed – but they can create a record gap. Fix the process rather than scolding the person who found a way to keep orders moving.
Reconcile physical stock with system truth
Medical-device inventory needs more than a respectable count accuracy percentage. Status accuracy matters. A unit marked as released in the system must not be physically sitting in quarantine. Expired, recalled, damaged or returned items must be unmistakably controlled so they cannot drift back into fulfilment by accident.
Use clear segregation, system permissions and regular cycle counts. If stock is held in more than one location, define who can move it and how the move is recorded. The more channels you sell through, the more this matters. One marketplace order, one direct-to-clinic order and one wholesale allocation can all compete for the same unit with the cheerful ruthlessness of airport boarding queues.
Treat outsourced fulfilment as part of your quality system
Handing products to a logistics partner does not hand away accountability. Auditors will still expect you to qualify the provider, define responsibilities, approve relevant procedures and monitor performance.
The contract should spell out practical details: storage conditions, inventory status controls, traceability data, recall support, incident notification, access to records, training expectations and change control. Ask what happens when the warehouse management system is unavailable, a delivery is refused or a carrier reports damage. “We’ll figure it out” is an admirable life philosophy, less so a quality arrangement.
For brands selling across Singapore and Malaysia, uParcel operates Multi Channel Fulfilment on cloud-based systems, manages marketplace operations, and keeps live studios beside its commerce activity. Its engineering, fleet network, warehouse and commerce teams are directly owned and controlled, which can reduce the awkward baton-passing between separate vendors. That does not replace supplier qualification. It does mean the conversation can begin with the full order journey rather than only the last mile.
The week before the audit: stop changing everything
Last-minute housekeeping is sensible. Last-minute reinvention is how a process becomes a crime scene with fresh labels.
Confirm the audit agenda, attendees, site access rules and document-request process. Assign one person to coordinate evidence and another to escort the auditor. Prepare a quiet workspace and ensure the people who own key processes are available. If a record is missing, say so plainly, document the gap and explain the corrective action. Invented certainty has a short shelf life.
Most importantly, keep the operation running normally. An auditor needs to see the real system, not a temporary museum exhibit where every shelf is colour-coded and nobody is allowed to touch anything.
A well-prepared audit is not a performance of perfection. It is proof that your business notices problems, contains risk and learns quickly. That is a much more reassuring thing to sell – especially when the parcel contains something people may genuinely depend on.
Leave a Reply