The Workbench · Craft
Clause 7.4.3 checks the shipment, not the supplier
This blog has already covered why ISO 13485 puts a separate, risk-based control duty on an outsourced process that Clause 7.4's purchasing controls for parts never reach, and what a supplier qualification file actually has to prove before an organization will buy from someone. Both essays stop at the moment a supplier gets approved. ISO 13485:2016 Clause 7.4.3 picks up after that moment, on a different clock: not whether this supplier can be trusted, but whether this shipment, specifically, is what the purchase order said it would be.
7.4.1 is a judgment made once, then revisited
Clause 7.4.1 requires evaluating and selecting a supplier based on its ability to supply product that meets the organization's own requirements, and re-evaluating that judgment at defined intervals rather than treating the first approval as permanent. That's a standing determination about a source: this supplier, overall, can be trusted to ship conforming product. It's necessarily backward-looking — built on audits, history, and documented performance — and it says nothing about any single shipment that hasn't arrived yet.
7.4.3 is a check repeated every time
Clause 7.4.3 requires establishing and implementing the inspection, or other verification activity, necessary to confirm that purchased product meets the purchasing requirements specified for it, and it ties the extent of that verification to the supplier's own evaluation results and to risk. A fully qualified supplier doesn't exempt its own shipments from this clause; what the qualification can do is justify a lighter verification — a reduced sampling plan, a certificate of conformance accepted without full remeasurement — never a decision to skip verification because the source is already trusted.
A good supplier file doesn't say what's in the box
Supplier qualification establishes confidence in a source's process over time; it was never built to confirm what that process actually produced and shipped this time. Mislabeling, transit damage, a wrong revision level, a mixed lot, or a deviation the supplier's own system didn't catch can all put nonconforming material into a shipment from a source that remains, on paper, fully qualified. A quality system that treats “qualified supplier” as a stand-in for “verified shipment” has nowhere left to catch any of that before the material reaches production.
Verifying at the supplier's own site moves the record, not the duty
Clause 7.4.3 also covers the case where the organization, or its customer, intends to carry out verification at the supplier's own premises rather than on receipt. When that's the plan, the purchasing information itself has to state the intended verification arrangements and the method of product release. Moving the inspection upstream doesn't remove it from the system — it moves which document has to name it, and a purchase order silent on that arrangement leaves the verification undocumented no matter how carefully it was actually performed on site.
What a verification record has to carry to survive an audit
A record under this clause has to tie to a specific lot or shipment, name the purchasing requirement it was checked against, state the method used, and record the disposition — not a generic note that “incoming inspection was performed.” When a shipment fails that check, the record it feeds is a different one: a nonconforming-product record under Clause 8.3, with its own decision between rework, scrap, and a documented concession. A verification record that stops at “failed” without that handoff has recorded a problem without deciding anything about it.
Where this meets the file
A purchasing-control record needs these two clauses tracked as separate lines: the supplier's own standing qualification status, re-evaluated on its own schedule, and the verification result for each shipment that actually arrives against it. A template built around that split, alongside the launch catalog's other quality-system templates, is previewed there now. If your program scores these two differently, the shelf takes that correction directly.
The Regulatory Toolkit launches soon — a free shelf of source-mapped templates, checklists and browser-only tools for regulatory teams. Get one email when it opens, or contribute a template.