ISO 14971 Risk Files: What Clinic Buyers Can Ask Suppliers For
Procurement decisions are risk decisions, and most of the risk is invisible at the moment of purchase. A glove that tears, a pouch that opens, a wipe that dries out on the shelf: each is a small failure that becomes a compliance problem when a patient or an inspector is involved.
ISO 14971 is the standard that asks manufacturers to think that through in advance. A clinic does not have to implement it, but a buyer who understands what it requires can ask better questions and get a supplier on record.
What does ISO 14971 ask a manufacturer to do?
Four things, in order. Identify the ways the product could cause harm in normal use and foreseeable misuse. Estimate how likely each is and how serious it would be. Put controls in place, starting with design rather than warnings. Then keep monitoring the product after it ships, because real-world complaints are data.
The output is a file that changes over time. A risk file is not a certificate that is earned once and framed.
What can a clinic buyer ask instead of asking for the file?
| Question | What a useful answer looks like | Warning sign |
|---|---|---|
| How do you handle complaints about a batch | A named process, a reference number, a response window | No process, or an offer to handle it informally |
| What happens when a specification changes | Written notice before the new stock ships | Silence until you notice the product changed |
| How is a lot traced back to production | Lot or batch code on the carton that maps to records | No code, or a code that maps to nothing |
| Who can I speak to about a safety issue | A person with a role, not only a sales address | A general inbox and nothing else |
Where does this connect to Health Canada?
Medical device establishments that import or distribute devices in Canada operate under a licence issued by Health Canada, and the number is public. A clinic can note the number a supplier gives, and check that it is current, as part of the same conversation. This does not replace the risk questions above, but it establishes that the supplier is in the regulated system rather than outside it.
How should a clinic record its own decision?
Keep it short and dated. Which product, which task, which check was done, who approved it, and what replaced it if it changed. That record is what turns a purchase into a defensible choice, and it takes about five minutes per product.
When you standardise a consumable across rooms, match the product to the task: 4 mil nitrile exam gloves for routine contact, level 1 isolation gowns for splatter-producing tasks, and level 1 procedure masks for everyday clinical work.
If you want supplier documentation sent with your pricing, request a quote and tell us which records your facility keeps. A risk file rests on process control you can evidence, and the BI 5-pack trial produces that kind of record for your own autoclave cycle.
References
- CCOHS - personal protective equipment resources for Canadian workplaces (checked 18 September 2026)
- Public Health Ontario - infection prevention and control guidance for clinical settings (checked 18 September 2026)
Ordering for a clinic, lab or care home? Wholesale and multi-site ordering covers case pricing and account setup, and the B2B wholesale collection lists the lines stocked for institutional buyers.
Related Reading
- Medical gloves for clinics and laboratories
- Learning Hub - clinical and procurement guides
- Health Canada vs FDA device establishment rules
- PPE procurement in Canada: supplier selection, certification and audit trail
- Case review: consolidating suppliers at a dental group
- clinic consumables
- RCDSO-compliant sterilization records
Frequently Asked Questions
What is ISO 14971 in plain terms?
It is the standard for risk management applied to medical devices. It asks a manufacturer to identify the ways a product could cause harm, estimate and control that risk, and keep watching the product after it reaches the market.
Why would a clinic buyer care about a manufacturer's risk file?
Because the file is where a supplier records what it knew about a product and what it did about it. When a batch behaves badly, a supplier with a maintained file can trace, investigate and correct. A supplier without one usually cannot.
Can I ask to see a risk management file?
You can ask, and you should expect a summary rather than the full document, since files contain proprietary design detail. A supplier who cannot describe any of it in writing is telling you something useful.
Does a clinic need its own risk file?
A clinic does not produce devices, but it does decide which ones to buy and stock. Documenting why a product was chosen, and what was checked, is the same discipline applied at a smaller scale.
Last updated: September 2026. CliniEco Medical holds MDEL #35334 issued by Health Canada, and supplies clinics, long-term care homes and home-care programs across Canada.
0 commentaire