Part 01 · The Question→Part 02 · The Record→Part 03 · The File
← All Case Files
Inspection Case File · CF08 · Supply Chain Quality

Supplier Qualification Decision: The 483 Most Teams Don't See Coming.

A documented deviation. A signed CAPA. A closed investigation. And a single question, asked on day two of inspection, that the file does not answer.

What you'll see in this case file
  • The exact 483 observation language
  • The five required authorization fields
  • A complete reference DDR record
  • The blank template for your facility
See What Defensible Looks Like → Free to read. No payment to continue.
Citation · 21 CFR 211.84 ICH · Q7 Used by Quality leaders preparing for FDA inspections
The Scene

Day three of the inspection.

. The investigator pulls Supplier Qualification SQ-2024-0231. A new API source for Sertraline Hydrochloride from Vendor C, an India-based manufacturer.

The qualification was completed in January 2024. On-site audit performed. CoA verification on three lots. The conclusion: supplier approved. First commercial purchase order placed.

The investigator turns to the conclusion.

Investigator
"Supplier approved."
She reads the conclusion twice. Then she sets the file down and looks up.
Investigator
"Who authorized the supplier approval? What audit findings were considered? Were any observations risk-rated and dispositioned? On what specific evidence was the conclusion of equivalent quality reached? And how did the team weigh the supplier history versus the audit performance?"
She listens to the verbal answer. Then she asks for the documented reasoning.
Pause

Most QA teams answer this question verbally. The file does not contain the documented reasoning. That is the gap.

Skip ahead to the record format →
Why this matters now

Supplier qualification 483 observations are especially common when audit findings exist but the disposition rationale is not on file. The pattern: observations raised, responses received, approval granted — with no documented evaluation of response adequacy.

What the file contained

The qualification dossier was complete. The audit was performed. The CoA verification was documented.

The audit team identified seven minor observations and one major observation related to deviation handling. Responses were obtained. The Supply Chain Quality Director signed the approval. The supplier was added to the approved vendor list.

What the file contained was the conclusion.

What the file did not contain was the decision.

An audit was performed. Observations were identified. Responses were obtained. The conclusion of approved was reached. But the rationale for treating the major observation as adequately addressed, the documented evaluation of the responses against acceptance standards, and the named individual who authorized the approval are not in the file.

The conclusion belongs in the file. The decision belongs in the record.

What the investigator is evaluating
21 CFR 211.84 requires evaluation of supplier capability. The standard is not whether an audit was performed. The standard is whether the approval conclusion was reached on a documented basis that integrates audit findings, response adequacy, and risk.

Under ICH Q7 and Q10 expectations, the rigor required for supplier approval increases when audit observations exist, when the supplier is new to the company, and when the material is critical to product quality.

The qualification record must demonstrate — in writing, contemporaneous with the approval — that audit observations were risk-rated, that responses were evaluated against acceptance standards, and that the named authorizing individual reviewed both before approving the supplier.

A completed audit is data. A completed audit is not, on its own, a documented approval decision.

Investigator
"I am not asking whether the supplier passed the audit. I am asking whether the approval conclusion was authorized — and on what evidentiary basis."
The Supply Chain Quality Director cannot produce the record.
The Gap

The supplier may have warranted approval. The file does not show the work behind the conclusion.

The qualification file documents the audit. It does not document who decided the supplier was approved, on what evidence, against what alternatives, and under what authority.

Ready to see the record format?
See the five fields the investigator expects to find →
The 483
"Failure to document the risk-based rationale used to justify the qualification of the supplier, including the specific evidence reviewed at the time of qualification and the basis on which observed audit findings or capability gaps were accepted. The supplier qualification record establishes that the supplier was approved but does not reconstruct the decision logic that justified the conclusion."
21 CFR 211.84 — applied regulatory framework.
Continued · Part 02 of 03

That 483 was avoidable.

See the record that prevents it.

The five fields the investigator expects to find. The alternative-causes evaluation that distinguishes a decision from a signature. A complete reference example from the Vancomycin scenario.

Show Me the Record →
✓ Free to read · No payment required to continue

Used by Quality and Validation leaders preparing for FDA and EMA inspections. Built around 21 CFR 211.192 and ICH Q9.