SOP Manufacturing

​

Summary

The Standard Operating Procedure (SOP) for Manufacturing establishes systematic processes for design transfer, manufacturing transfer, and production control activities for medical devices. This SOP ensures consistent manufacturing processes, proper documentation control, and seamless transfer of designs from development to production while maintaining regulatory compliance and product quality throughout the manufacturing lifecycle.

​

Why is SOP Manufacturing important?

Manufacturing controls for medical devices exist because production processes must consistently produce devices that meet safety and performance specifications established during design and development. Poor manufacturing controls can introduce defects, contamination, or variability that compromises patient safety even if the original design was sound. Regulatory authorities require manufacturing SOPs because they need assurance that every device produced will perform as intended throughout its lifecycle. This SOP is critical for your certification because it demonstrates you have systematic controls to prevent manufacturing errors, ensure traceability, and maintain design integrity during production scaling and site transfers.

​

Regulatory Context

​

Guide

​

Establishing Manufacturing Transfer Framework

Create a systematic manufacturing transfer process that ensures design integrity is maintained when moving from development to production or between manufacturing sites. Define transfer phases including planning, execution, and post-transfer monitoring with specific deliverables and approval criteria for each phase. Establish cross-functional teams including design, manufacturing, quality, and regulatory personnel with clearly defined roles and responsibilities. Document transfer plans that address scope, timeline, resources, risk assessment, and success criteria for each transfer project.

​

Design History File and Device Master Record Management

Maintain comprehensive Design History Files (DHF) containing all design development documentation and link them to corresponding Device Master Records (DMR) that specify exactly how devices should be manufactured. Ensure DMRs include detailed manufacturing procedures, specifications, acceptance criteria, and quality control measures. Implement version control and change management processes that maintain traceability between design changes and manufacturing updates. Document the complete bill of materials (BOM) with approved suppliers, specifications, and qualification status for all components.

​

Process Validation and Control

Implement process validation for all manufacturing processes that could affect device safety, effectiveness, or performance. Conduct installation qualification (IQ), operational qualification (OQ), and performance qualification (PQ) for manufacturing equipment and processes. Establish statistical process controls with appropriate control limits and monitoring procedures. Document process capability studies demonstrating that manufacturing processes consistently produce devices meeting specifications within defined confidence intervals.

​

Supplier Management and Contract Manufacturing

Develop robust supplier qualification processes including on-site audits, quality agreements, and ongoing monitoring of supplier performance. For contract manufacturers, establish clear quality agreements defining responsibilities, specifications, and oversight requirements. Implement supplier change control procedures requiring approval before suppliers modify processes, materials, or facilities that could affect your device. Maintain approved supplier lists with documented evaluation criteria and re-qualification schedules.

​

Manufacturing Site Management

Establish facility controls including environmental monitoring, contamination prevention, and equipment maintenance programs appropriate to your device type and risk level. Implement personnel qualification programs ensuring manufacturing staff are trained and competent to perform assigned tasks. Create batch records or device history records that document the manufacturing history of each device or batch including materials used, processes performed, and quality control results.

​

Quality Control and Testing

Integrate in-process quality controls at critical manufacturing steps to detect and prevent defects before final assembly. Establish acceptance testing procedures that verify each device meets specifications before release. Implement statistical sampling plans appropriate to your device risk level and production volume. Document corrective and preventive actions when manufacturing issues are identified, including root cause analysis and effectiveness verification.

​

Post-Market Manufacturing Monitoring

Establish manufacturing surveillance processes that monitor production quality trends, customer complaints, and field performance data. Implement change management procedures for manufacturing modifications that assess impact on device safety and effectiveness. Create manufacturing metrics and key performance indicators that track process capability, defect rates, and customer satisfaction. Maintain manufacturing records according to regulatory retention requirements and ensure availability for regulatory inspections.

​

Example

​

Scenario:

You’re transferring production of a mobile health monitoring app from your internal development team to a contract software manufacturer. Your transfer plan includes validation that the contract manufacturer’s build environment produces identical software artifacts, verification of code signing and security controls, and demonstration that deployment processes maintain cybersecurity requirements. Process validation includes testing automated build pipelines, validating software bill of materials (SBOM) generation, and confirming that release procedures produce traceable software versions. Quality controls include automated testing suites, security scans, and functional verification before each release. Your Device Master Record specifies exact build configurations, approved third-party libraries, deployment procedures, and quality control checkpoints required for each software release.

​

Example Manufacturing Transfer Plan:

Manufacturing Transfer Plan for Mobile Health Monitoring App

1. Transfer Scope and Objectives

• Transfer software production from internal development to qualified contract manufacturer
• Maintain identical software functionality, security, and performance characteristics
• Ensure regulatory compliance and traceability throughout manufacturing process

2. Phase I: Transfer Planning

• Contract manufacturer facility audit and qualification
• Software build environment validation and configuration
• Quality agreement establishment with defined specifications and controls
• Risk assessment of potential manufacturing failure modes

3. Phase II: Process Transfer and Validation

• Build environment replication and validation testing
• Automated testing pipeline implementation and verification
• Code signing and security control validation
• Software bill of materials (SBOM) generation and verification

4. Phase III: Production Implementation

• Pilot production runs with side-by-side comparison testing
• Full production validation with statistical process control
• Quality control implementation including automated and manual testing
• Regulatory notification and documentation updates

5. Device Master Record Components

• Software configuration management procedures
• Build environment specifications and validation requirements
• Automated testing protocols and acceptance criteria
• Release procedures including security scanning and functional verification
• Change control procedures for software components and build processes

6. Quality Controls and Monitoring

• Automated build verification and testing protocols
• Security vulnerability scanning and remediation procedures
• Performance testing and regression validation
• Post-release monitoring and feedback integration

​

Q&A