The 2026 medical device compliance reset has changed what a credible supplier file should contain. A CE mark, an ISO 13485 certificate or an FDA registration screenshot may support a claim, but none proves by itself that a specific device, production site and legal manufacturer remain eligible for the target market.
Three developments make this year different: mandatory use of key EUDAMED modules in the European Union, enforcement of the FDA Quality Management System Regulation, and a critical IVDR transition milestone for class C legacy devices. Buyers must update due diligence before approving suppliers, while manufacturers must present evidence that connects every product to the correct regulatory pathway.
EUDAMED Changes EU Medical Device Verification
EUDAMED now gives procurement teams a stronger reference point for checking economic operators, devices and certificates. Manufacturers placing devices on the EU market must manage required data in the applicable modules, including UDI/device information and European Medical Device Nomenclature data (European Commission, May 2026).
Buyers should compare the EUDAMED record with the quotation, Declaration of Conformity, certificate, label and instructions for use. The legal manufacturer name, address, Basic UDI-DI or UDI-DI, device model, risk class and notified body details should align.
A mismatch may reflect outdated paperwork, an incorrect product family, a private-label arrangement that has not been explained, or a device outside the certificate scope. Procurement teams should resolve every material inconsistency before supplier approval or contract signature.
Manufacturers should not treat registration as a one-time administrative task. Product data, certificate status and economic-operator information must remain consistent across EUDAMED, technical documentation, labels, catalogues and distributor materials.
Commercial teams should use controlled data supplied by regulatory staff rather than copying old certificates into new tender files. Every document package should show its issue date, revision status and applicable product models.
FDA QMSR Raises the Evidence Standard
The FDA Quality Management System Regulation became effective on 2 February 2026. It incorporates ISO 13485:2016 into 21 CFR Part 820 while retaining additional FDA requirements. The FDA also replaced the former Quality System Inspection Technique with a new inspection process under Compliance Program 7382.850 (FDA, February 2026).
This means an ISO 13485 certificate is useful, but it does not prove complete FDA compliance. Buyers sourcing for the United States should confirm that the manufacturer understands the FDA-specific requirements applicable to its devices, establishment activities, records and reporting obligations.
Device listing and establishment registration also do not represent FDA approval or clearance. Procurement teams should verify whether the product requires 510(k) clearance, premarket approval, De Novo authorization or another applicable pathway.
Manufacturers should be ready to produce records that demonstrate QMSR compliance. FDA guidance confirms that investigators may review management review records, internal quality audits and supplier audit reports, including relevant records created before the effective date (FDA, February 2026).
Firms should complete a documented comparison between their previous quality system and QMSR requirements, close identified gaps, and verify that corrective actions are effective. Supplier controls, complaint handling, risk management and design documentation should operate consistently rather than exist only as written procedures.
IVDR Transition Claims Require Dated Proof
Class C legacy IVD manufacturers faced a decisive deadline on 26 May 2026. To remain eligible for the extended transition, qualifying manufacturers had to submit a formal conformity-assessment application to a notified body by that date.
They must also sign a written agreement with the notified body by 26 September 2026 and meet the other transition conditions. Qualifying class C devices may continue under the extended transition until 31 December 2028 when all applicable requirements are satisfied (European Commission, July 2024).
For buyers, a statement that a class C IVD is “under IVDR transition” is no longer enough. Request evidence of the formal application date, the device or substitute device covered, the notified body involved, the manufacturer’s IVDR-compliant quality system and the plan for signing the agreement before the September deadline.
Buyers should also confirm that the design and intended purpose have not changed significantly and that the device presents no unacceptable risk. A transition claim cannot protect a materially changed product that no longer meets the relevant conditions.
Manufacturers should prepare a concise transition statement for each affected product family. It should identify the legacy basis, IVDR class, application date, notified body, agreement status and expected certification path.
What Medical Device Buyers Must Demand
- Legal identity: Confirm the manufacturer, production site, authorised representative or US agent where applicable, and the entity named on certificates and declarations.
- Product-level evidence: Obtain the current Declaration of Conformity, relevant certificate, device classification, UDI information, labelling and intended use for the exact quoted model.
- Certificate verification: Check the issuing notified body or certification body, validity dates, scope, status and covered sites. Do not rely only on a PDF supplied by a sales contact.
- Quality-system readiness: Confirm that the ISO 13485 scope covers the relevant activities and manufacturing site. For US supply, request a QMSR readiness statement and evidence that FDA-specific gaps were assessed.
- Post-market history: Review recalls, field safety corrective actions, serious incidents, complaint trends and corrective actions relevant to the product family.
- Change control: Require notification of material changes to design, intended purpose, manufacturing site, critical suppliers, sterilisation, labelling or regulatory status.
What Manufacturers Must Prove Before Approval
Manufacturers should replace generic document folders with a controlled market-access evidence pack. Build a matrix linking every sellable SKU to its intended use, class, certificate, Declaration of Conformity, UDI, production site and authorised representative.
Add document owners, expiry dates and review dates so commercial teams know which version they may share. Outdated documents should be removed from shared sales folders to prevent accidental use in tenders or distributor applications.
Evidence should also explain the operating reality behind the certificates. Buyers increasingly need confirmation of production capacity, critical subcontractors, sterilisation arrangements, traceability, complaint handling, change notification and business continuity.
Manufacturers should disclose limitations directly. If a model is not yet registered for a market, an IVDR agreement remains pending, or a certificate excludes a production site, state it before quotation. A precise limitation protects the buyer and builds more trust than an ambiguous claim of “global compliance.”
A Practical 2026 Supplier Approval Decision
Procurement teams should classify findings as verified, pending clarification or disqualifying. Minor formatting differences may require correction, while an expired certificate, unexplained manufacturer mismatch, unsupported transition claim or device outside the approved scope should stop approval until resolved.
The 2026 compliance reset rewards manufacturers that can provide connected, current and product-specific evidence. Suplivia’s manufacturer verification tiers can support the first stage of supplier screening, but buyers should still match every document to the exact product, market and transaction before purchase.
