Supplier qualification is buyer risk management. The supplier's QMS is your QMS once you ship their product. Their regulatory standing becomes your import problem if it slips. Their financial stability becomes your project risk if they fail mid-delivery. Qualification done right prices those risks in before they become live.
A working qualification checklist covers five dimensions. Legal and corporate: company registration, ownership structure, beneficial-owner screening against sanctions and PEP lists. Manufacturing capability: site address, capacity, technology, key personnel. Quality management: ISO 13485 (or equivalent), scope of certification, last audit findings. Regulatory standing: device registrations in origin and target markets, inspection history with FDA / MHRA / EU notified bodies. Financial and reputational: statements, credit data, payment behaviour, complaint and recall history.
Capture every dimension in a Supplier File. The file should be standalone — meaning a reader who has never met the supplier can understand whether the supplier should be on your approved list. Refresh the file annually. Suspend the supplier if a re-qualification fails.
Common mistakes to avoid: relying on the supplier's marketing claims rather than independent evidence; treating ISO 13485 certificates as self-validating without checking certifying body and scope; failing to screen beneficial owners against sanctions databases; and skipping financial standing review on the assumption that 'big supplier = safe supplier' (it isn't always true).
Where you don't have the bandwidth to qualify suppliers yourself, work with a partner that already has — and that can demonstrate the documented qualification process. Inheriting a vetted supplier base is usually faster and safer than building one from scratch.