Outsourcing medical device production is a significant decision, and a well-structured quality agreement is what holds the partnership together. Without one, responsibilities blur, standards drift, and compliance gaps can emerge at the worst possible moment. A solid medical device quality agreement sets clear expectations for both parties before a single unit is manufactured, protecting your brand and ensuring that every product that leaves the facility meets the standards your customers and regulators expect.
This guide walks you through exactly how to structure that agreement, from the groundwork you need to lay before drafting begins to the final sign-off before production starts. Whether you are working with a new contract manufacturer or formalising an existing relationship, these steps will help you build an agreement that supports MDR compliance, reflects ISO 13485 requirements, and gives both sides a shared framework for quality. If you are also exploring outsourcing options for hygiene or healthcare product lines, our hygiene product manufacturing services offer a strong starting point.
What to Gather Before Drafting the Agreement
Before you open a document and start writing, take time to assemble everything you need. Drafting a quality agreement without the right inputs leads to gaps that only surface during audits or, worse, during a deviation. This preparation phase is not administrative busywork. It is what makes the agreement accurate and enforceable.
Start by pulling together the regulatory and technical documents that define your product’s requirements. For medical devices, this means your technical file, risk management documentation under ISO 14971, and any relevant clinical evaluation reports. You also need a clear picture of which regulatory frameworks apply, particularly whether the product falls under the EU Medical Device Regulation (MDR) and which ISO 13485 clauses are most relevant to your production scope.
Gather the following before drafting begins:
- Your product’s intended purpose and classification under MDR
- Existing risk management files and safety and performance requirements
- Any prior audit findings or non-conformance records from previous manufacturers
- Your internal quality policy and supplier qualification criteria
- Packaging, labelling, and shelf-life requirements
- Regulatory submission timelines and any notified body involvement
Once you have this material in hand, you are ready to define what the agreement actually needs to cover. The depth and specificity of your drafting will directly reflect the quality of your preparation here.
Define the Scope and Responsibilities of Each Party
The scope section is the foundation of the entire quality agreement. It defines what the contract manufacturer is responsible for, what you retain ownership of, and where the boundaries lie. Ambiguity here is one of the most common causes of quality failures in outsourced medical device production, so be precise.
State clearly which products and product families the agreement covers. Then assign ownership of each quality-related activity to either the brand owner or the contract manufacturer. Do not leave anything in a grey zone.
- List every product or product line covered by the agreement by name and regulatory classification
- Assign responsibility for raw material sourcing, incoming inspection, and supplier qualification
- Clarify who owns the product formula, the technical file, and the regulatory submissions
- Define who is responsible for labelling content, artwork approval, and final packaging sign-off
- Specify responsibilities for complaint handling, post-market surveillance, and vigilance reporting
After completing this section, both parties should be able to look at any quality activity and immediately identify who owns it. If there is any uncertainty during review, go back and resolve it before moving forward. A clean responsibility matrix, attached as an appendix if needed, is a practical way to make this section easy to reference during production.
Set Quality Standards and Acceptance Criteria
This is where the agreement moves from structure to substance. Quality standards and acceptance criteria define what a conforming product looks like, what testing it must pass, and what happens when it does not. For medical device contract manufacturing, these criteria must align with both your internal specifications and the applicable regulatory requirements under MDR and ISO 13485.
Define acceptance criteria for each stage of production, not just the finished product. Raw material specifications, in-process controls, and final release testing should each have documented, measurable thresholds. Vague language like “acceptable quality” is not sufficient. Every criterion should be specific enough that two people reading it independently would reach the same conclusion.
Include the following in this section:
- Raw material specifications and approved supplier lists
- In-process quality checkpoints and control limits
- Finished product release criteria, including microbiological and chemical testing where applicable
- Shelf-life and stability requirements, including accelerated testing protocols if relevant
- Packaging integrity and labelling verification requirements
- Reference to applicable test methods and standards (for example, ISO or pharmacopoeial methods)
Once these criteria are agreed and documented, both parties have an objective reference point for every batch. This removes subjectivity from release decisions and makes it much easier to identify and address non-conformances quickly. We follow ISO 13485 across our entire production process, which means these standards are already embedded in how we work, making alignment straightforward for our partners.
Establish Change Control and Deviation Procedures
Even the best-planned production runs encounter the unexpected. Change control and deviation procedures are what ensure that when something changes or goes wrong, it is handled in a way that protects product quality and maintains regulatory compliance. For outsourced medical device production, these procedures are not optional. They are a core MDR and ISO 13485 requirement.
Change control covers any planned modification to the product, process, materials, or equipment. Deviation procedures cover unplanned departures from approved processes or specifications. Both need to be addressed in the quality agreement with enough detail that the contract manufacturer knows exactly when to notify you and how quickly.
- Define what constitutes a significant change requiring formal notification and approval before implementation
- Set the minimum notice period for planned changes and the format for change requests
- Specify the impact assessment process, including who evaluates regulatory implications
- Establish the deviation reporting timeline, for example, within 24 hours for critical deviations
- Require root cause analysis and corrective action reports for all deviations above a defined severity threshold
- Clarify when a deviation requires batch quarantine, additional testing, or rejection
With these procedures documented, you avoid the scenario where a supplier makes a seemingly minor material substitution without realising it triggers a regulatory notification requirement. Clear escalation paths and response timelines keep both parties aligned and protect the integrity of your technical file throughout the product lifecycle.
Outline Audit Rights and Performance Review Cadence
A quality agreement without audit rights is largely symbolic. The ability to verify that your contract manufacturer is operating as agreed is fundamental to maintaining oversight of outsourced medical device production. This section should give you meaningful access without being so burdensome that it disrupts the manufacturer’s operations.
Define both scheduled and for-cause audit rights. Scheduled audits give you a regular opportunity to assess the quality management system, review records, and verify compliance with the agreement. For-cause audits allow you to investigate specific concerns, such as a cluster of deviations or a complaint trend, without waiting for the next scheduled visit.
Also establish a performance review cadence that keeps communication structured between audits. This might include monthly quality metrics reports, quarterly business reviews, or annual quality agreement reviews. Regular touchpoints prevent small issues from becoming large ones and build the kind of collaborative relationship that makes outsourcing work well over time.
- Minimum frequency for scheduled quality audits (typically annual for ISO 13485-certified suppliers)
- Notice period required for scheduled audits and access to documentation
- Conditions that trigger a for-cause audit and the expected response timeline
- Key performance indicators to be reported and reviewed, such as on-time delivery, batch rejection rates, and deviation frequency
- Format and frequency of performance review meetings
After completing this section, both parties should have a clear calendar of quality touchpoints and a shared understanding of what good performance looks like. This transparency is what turns a contractual obligation into a productive working relationship.
Review and Finalise the Agreement Before Production Starts
The final step is a structured review process that ensures the agreement is complete, accurate, and genuinely understood by everyone who will work under it. This is not a formality. It is your last opportunity to catch gaps, resolve ambiguities, and confirm alignment before production begins.
Involve the right people in the review. Quality managers, regulatory affairs professionals, and legal counsel should all have the opportunity to review the document from their respective perspectives. The contract manufacturer’s quality team should also participate, since they are the ones who will implement the agreement day to day. An agreement that surprises the production team is an agreement that will not be followed consistently.
- Conduct an internal review with your quality, regulatory, and legal teams and document any required changes
- Share the revised draft with the contract manufacturer’s quality lead and schedule a joint review meeting
- Work through any open points systematically, prioritising items that affect compliance or release criteria
- Confirm that all referenced documents, specifications, and test methods are current and accessible to both parties
- Obtain signatures from authorised representatives on both sides before any production activity begins
- Set a date for the first scheduled review of the agreement, typically 12 months after signing or following any significant change
Once the agreement is signed, make sure it is stored accessibly and that the relevant teams on both sides know where to find it. A quality agreement that lives in a filing cabinet and is never consulted provides little real value. Build it into your onboarding process so that anyone new to the project understands its requirements from day one.
Structuring a quality agreement thoroughly before outsourcing medical device production takes time upfront, but it pays dividends throughout the partnership. It reduces misunderstandings, accelerates issue resolution, and gives both parties a shared language for quality. If you are looking for a contract manufacturer that already operates within this kind of structured quality framework, with ISO 13485 certification, MDR expertise, and a genuine commitment to transparency, get in touch with us and we will be happy to walk you through how we work. You can also explore our hygiene and healthcare product manufacturing services to see the full range of what we can produce together.
This content was generated with the help of AI and it may contain mistakes