CNC Machining For Medical Devices: What Your Supplier Owes You After The Drawing Is Approved

Oct 19, 2026 Leave a message

A German dental instrument maker approved a first article, then learned eight months later that the supplier had rebuilt the fixture and moved the run to a second machine. Eight hundred handles arrived with a different surface finish. Nothing on the drawing had changed, so nobody at the device company had looked. Re-validating the process and holding the lot cost more than the parts did.

When you buy CNC machining for medical devices, the drawing is the smallest part of the deal.

The Certificate Is The Easy Part

Every quote arrives with a certificate attached. ISO 13485 is the one buyers ask for. Read the scope line, not the logo.

A certificate tells you a system exists somewhere in that company. It does not tell you your lot was made inside it. A shop certified to do CNC machining for medical devices can still have finished your parts at a subcontractor whose work sits outside the certificate scope.

That gap is your problem, not theirs. Under the purchasing-control obligation in ISO 13485, the device maker is responsible for approving and monitoring its suppliers, and you cannot delegate that by collecting a PDF. The FDA's quality rule now leans on the same standard, which means the records your supplier keeps are effectively part of yours.

The test takes one question. Which processes sit inside the certificate scope. Milling and turning will. Anodising, heat treatment and laser marking usually will not. If you buy CNC machining for medical devices from a shop whose scope stops at the machine, the finishing step is outside the system you just audited. Our own precision CNC machining page lists what we keep in-house and what leaves the building.

Every Change Needs To Reach You Before It Happens

Every clause in a CNC machining for medical devices agreement that matters is about what happens after approval.

A supplier doing CNC machining for medical devices has to treat a tool change as something you hear about first. New tooling, a rebuilt fixture, a rewritten program, another machine, a different mill for the bar stock, a new heat-treatment partner. Each one moves your part, and each one can force you to revalidate.

Write the notification requirement into the purchase agreement. No change to any process touching the part without written notice and your approval. Then say what the notice must contain: what changed, why, which lots it covers, and the data behind it.

Silence is the usual failure, and it is rarely malicious. A supplier chasing a cycle time is not thinking about your validation file, because that file is not on its desk.

Lot Segregation Decides How Big A Recall Gets

Traceability is the part of CNC machining for medical devices that cannot be retrofitted. Either the heat number follows the part through every step, or it does not. The CNC machined parts that survive a device audit are the ones whose paperwork was built at the machine rather than reconstructed afterwards.

The practical failure is mixing. Medical and industrial work runs on the same floor, in the same week, sometimes from the same bar. Two grades of titanium that look identical sit in adjacent bins, which is where titanium CNC machining gets risky. When a question appears six months later, the shop has to guess which parts are in scope.

A US orthopedic instruments company learned this on 400 instrument blanks. Standard and ELI grade titanium bar had been commingled in one run, and with no heat-number separation the device maker could not tell how far the mixing reached. It quarantined 3,000 parts and traced six months of shipments. One bin label would have confined the problem to 400.

Ask a supplier of CNC machining for medical devices to produce the inspection record for one lot, by lot number, within an hour. If it takes a day and an email chain, your recall scope is whatever the floor remembers.

Nonconformance And CAPA: The Supplier Has To Be Inside Your System

When a part fails, CNC machining for medical devices suppliers are either inside your corrective action system or outside it. There is no middle position, whatever the contract says.

An out-of-spec lot needs an investigation you can close. That means the supplier writes down what happened, what it changed and how it proved the fix, in a form your quality team can file against the complaint. A supplier that answers with a phone call leaves the complaint open, and in a regulated audit an open complaint costs more than the bad part.

This is where the paperwork stops being an annoyance. Your corrective action closure rests on a document you do not control. If the supplier will not issue it, you have a supplier problem rather than a filing problem.

Cleaning, Packaging And The Right To Look

Cleaning and packaging are the two lines of a CNC machining for medical devices quote that buyers read least carefully, and the two that get quoted most loosely.

Machining leaves coolant residue and chips behind. Wiping a part down is not a validated cleaning process, and on a blood-contact or implantable part the difference shows up in validation, not on the drawing. Ask what the cleaning step is, how it is controlled, and what the acceptance criterion is. Then ask how the part stays that clean in the box.

Audit rights belong in the agreement too. Say you may audit the site, and any subcontractor handling your parts, on notice. Say the supplier must tell you before it changes who does the finishing. A supplier that argues about that clause is telling you how your first problem will go.

Quick Answers On CNC Machining For Medical Devices

Does CNC machining for medical devices require ISO 13485?

Your supplier should hold it, and you are still responsible for approving and monitoring them. Read the certificate scope before you lean on it.

How do I audit a supplier doing CNC machining for medical devices?

Pick one shipped lot and follow it backwards. Bar certificate, machine, operator, inspection record, finishing subcontractor, cleaning step. If the trail breaks, you have your answer in twenty minutes.

Is traceability expensive to set up?

It costs a bin label and a router card. Rebuilding it after a mixing incident costs a quarantine and a letter to your customer.

What clauses belong in the agreement?

Change notification, batch traceability by heat number, nonconformance reporting, a written cleaning specification, audit rights, and who keeps the records and for how long.

If you need CNC machining for medical devices and you want the records to survive an audit, send us the drawing, the material grade and the lot size. We will tell you which processes run in-house, which ones leave the building, and what the paperwork looks like before you place the order.