It's 3 AM. The FDA is calling. Are you ready?
How fast can you provide a complete trace? That's the line between a contained issue and a regulatory problem.
The 3 AM test
Here's a thought experiment that separates well-run medical device companies from the rest. It's 3 AM. The on-call line rings. A hospital reports an adverse event on one of your devices. The FDA is informed within hours. Your phone is going to ring next.
How fast can you provide a complete trace? Which raw material lots went into the unit in question? Which work centers and operators touched it? Which sterilization cycle? Which inspection records signed off each step? Which other finished units share any of those upstream lots — and where did they ship?
That's not a hypothetical question. That's the conversation that determines whether you're managing a contained issue or staring down a multi-month investigation, a Form 483, and a recall that takes a year to unwind. The difference between those outcomes is usually one report, generated in minutes, that the FDA can verify is complete.
Why generic traceability isn't enough
Most ERP and inventory systems will track lot numbers. That's table stakes. What they won't do is reconstruct a recall chain across suppliers, manufacturing, sterilization, distribution, and patient delivery in a single query.
The FDA expects forward and backward traceability. Backward: given a finished serial number, walk back to every component lot, every operator, every machine, every supplier batch. Forward: given a raw material lot from a supplier, identify every finished unit that contains it and every customer who received those units.
Generic systems weren't built with that requirement. They were built to track inventory movements and value the balance sheet. The lot field is there, but the relationships between lots — across stages, across systems, across years of records — aren't first-class concepts. Pulling the trace requires database joins that nobody documented and queries that take hours to run.
Where weak traceability shows up
Your traceability is only as strong as your weakest supplier link. If a contract manufacturer sends you components with a lot number printed on a packing slip — and that number gets re-keyed into your receiving system by a human under time pressure — you've introduced an error vector that will surface at the worst possible moment.
Leading companies require suppliers to provide electronic certificates of analysis that flow directly into incoming inspection. The CoA is parsed, the lot is created with full supplier metadata attached, inspection results are linked, and the material is released into inventory with a complete chain already established before it ever touches the floor.
From there, every downstream movement preserves the chain. Inspection results, in-process checks, sterilization cycles, distribution records — all land in a single searchable database. No re-keying. No reconciliation. No "let me check with the supplier and get back to you."
Test your current process
Run a recall scenario this quarter. Pick a finished lot at random. Ask your team to answer these questions, and time them:
Reading the results
If the answers take longer than ten minutes, or require pulling a spreadsheet from anyone's desktop, or involve the phrase "let me ask" — your process has a gap regulators will eventually find. They don't have to find it on the first inspection. They just have to find it eventually, and they're patient.
The fix is rarely "work harder." It's almost always "close the system gaps that are forcing humans to bridge data between disconnected tools." Every manual bridge is a future audit finding waiting to happen.
What complete traceability buys you
Beyond surviving inspections, complete traceability changes what you can do as a business. You can scope recalls precisely instead of pulling ten times more product than necessary. You can answer hospital quality audits in days instead of weeks, which closes deals faster. You can identify supplier-quality patterns before they become field failures.
And when the 3 AM call comes — and eventually it does — you can give the FDA a complete answer the same day. That changes the entire trajectory of the investigation. Confidence in your data buys you the benefit of the doubt. Gaps in your data buy you scrutiny that lasts years.
