Supplier verification is the least glamorous part of procurement and one of the fastest ways to fail an inspection, because inspectors read the file rather than the product. A clinic that can show how it qualified each supplier before the first order is in a different position from one that can only show invoices.
Most of the work is done once, then maintained. The file you build for the first order is the file you keep updating for every supplier that follows.
What does an ISO 13485 certificate actually cover?
ISO 13485 is the quality management system standard for medical devices. A certificate states that the organisation's quality management system has been assessed against that standard for a defined scope — which means the certificate itself must be read, not just filed. The scope statement tells you which activities and sites are covered, and it is where mismatches hide: a certificate covering distribution at one address does not describe manufacturing at another.
Two checks take five minutes and close most of the gap. Confirm the certificate is current, and read the scope statement against what you are actually buying.
How do you verify a medical supply company in Ontario?
Ask for a small set of documents and keep them together: the quality management certificate and its scope, the establishment or licence identifiers the company operates under, a product list showing the items you intend to order, the current safety documentation for those items, and a named contact for quality questions.
| Document | What it establishes | How often to refresh |
|---|---|---|
| ISO 13485 certificate with scope | Quality management system coverage for the activities you buy | On renewal, typically annually |
| Establishment identifiers | Who is responsible for the products in Canada | On change of supplier or entity |
| Product specification sheets | Size, material, performance level and packaging | When a product line changes |
| Safety documentation | Handling, storage and disposal requirements | On revision |
| Recall and field-action process | How you will be told, and how fast | Annually, or on contact change |
| Lot traceability statement | How a delivered case connects to a production run | On process change |
Which documents should a clinic ask for before a first order?
The certificate and scope, the identifiers, the specification sheets for the specific products, and a written statement of the recall notification route. Add pricing and delivery terms, which belong in the same file because a supplier relationship is not only about quality.
Where the clinic functions inside a larger health system, ask whether the supplier already holds documentation on file at the group level. Duplicating a file that already exists wastes the supplier's time and yours.
What should go into a supplier file?
One folder per supplier with four sections: qualification documents, product documentation, orders and lot records, and issues. The issues section is the one clinics omit and the one that makes the file useful, because a documented problem and its resolution is the strongest evidence that your verification process works.
Review the file annually. A certificate that expired eight months ago is worse than no certificate at all, because it shows the process stopped rather than never started.
Ordering for a clinic, lab or care home? Wholesale and multi-site ordering covers case pricing and account setup, and the B2B wholesale collection lists the lines stocked for institutional buyers.
Not sure which monitoring consumable fits your cycles? Start with the BI 5-pack trial (CA $12.99, shipping included), or request a quote for volume pricing.
Related reading
ISO 13485 certification: what it means for Canadian buyers; MDEL, MDL, DIN and NPN: Canadian regulatory acronyms; Medical supply glossary: 15 terms buyers misuse; Incontinence brief supplier selection: what to ask.
Frequently Asked Questions
Is an ISO 13485 certificate required to sell medical supplies in Canada?
It is a quality management system certification rather than a market authorisation, and requirements depend on the product and the role the company plays. Many buyers treat it as a qualification criterion because it standardises the questions they would otherwise have to ask individually.
How do I check a certificate's scope?
Read the scope paragraph and the sites listed, then compare them with the activity you are buying. If the scope is silent on distribution, or names a different address, ask the supplier to explain the gap in writing.
How long should supplier files be kept?
Keep them for at least as long as the retention period that applies to your other quality records, and longer where a product has a service life. A file that outlives the products it documents costs almost nothing to keep.
Last updated: September 2025. CliniEco Medical is a licensed medical device establishment (MDEL #35334).
0 comments