First Article Inspection for Medical Devices: ISO 13485 Requirements Explained
First article inspection (FAI) for a medical device is a structured, documented verification that a production process — and the parts it produces — fully conforms to the design drawing and quality plan before volume supply begins. Under ISO 13485:2016, clauses 7.4.2 and 7.4.3 together require that purchased components are evaluated and verified against specified requirements; FAI is the most defensible method to satisfy both obligations.
The Stakes When FAI Goes Wrong in Medical Manufacturing
A machined titanium bone-screw that passes a visual check but fails thread-pitch verification at implant assembly is not a paperwork problem — it is a potential class II field correction. Regulatory bodies including the FDA (21 CFR Part 820) and the European MDR expect objective evidence that every critical dimension was confirmed before the production lot was accepted. Without a proper FAI record, a CAPA investigator has nothing to trace back to first-off production.
For quality engineers, the practical pressure is this: your incoming inspection team cannot re-measure 150 characteristics on every incoming batch. The FAI is what gives you statistical confidence to reduce routine incoming sampling later. Get the FAI wrong at supplier qualification and every subsequent batch is built on a shaky foundation.
How ISO 13485 Frames the FAI Obligation
ISO 13485:2016 does not use the words "first article inspection" anywhere in its text. That omission confuses many quality engineers who come from aerospace (AS9102) or automotive (PPAP) backgrounds. The requirement lives across three clauses that must be read together.
| ISO 13485:2016 Clause | What It Requires | FAI Deliverable That Satisfies It |
|---|---|---|
| 7.4.1 — Purchasing process | Evaluate and select suppliers based on ability to meet requirements; document criteria and results | Supplier qualification record; approved supplier list entry |
| 7.4.2 — Purchasing information | Purchasing documents must describe product requirements, including applicable specifications and quality system requirements | Controlled drawing revision, material spec, and any referenced standards on the PO |
| 7.4.3 — Verification of purchased product | Establish and implement inspection or other activities to verify that purchased product meets specified requirements; maintain records | Balloon drawing + characteristic measurement report (the FAI report itself) |
Reading them together, clause 7.4.3 is the clause your auditor will cite if FAI records are missing. The phrase "other activities" is intentional; measurement is not the only acceptable method, but it is by far the most auditor-proof for machined, moulded, and cast components.
FAI Requirements for Medical Components Under ISO 13485: Step by Step
The following process reflects common industry practice for Class I to Class III medical device components. Adapt sample sizes and documentation depth to your device classification and risk management outputs per ISO 14971.
- Identify characteristics requiring FAI. Start from the engineering drawing. Classify every dimension using your organisation's criticality ranking — typically Critical (patient safety impact), Major (fit/function), and Minor (aesthetic/general). At minimum, measure all Critical and Major characteristics during FAI. Many OEMs require 100 % of drawing dimensions, and that is best practice for implantables.
- Balloon the drawing. Number every characteristic on the drawing sequentially. This links the drawing to the measurement record without ambiguity. Use a consistent scheme — balloon 1 through N, left to right, top to bottom on each view. For multi-page drawings, number continuously across pages. The balloon drawing becomes a controlled document; record its revision level.
- Select and document the sample. Record part serial numbers or lot traceability codes for each piece measured. For ISO 13485 compliance, traceability is not optional — clause 7.5.9 requires it for implantable devices and is strongly recommended for all others. Typical sample: three to five parts from the first production setup.
- Measure against drawing tolerances. For each ballooned characteristic, record the nominal, the upper and lower limits from the drawing, the actual measured value, and pass/fail status. Where GD&T applies (position, flatness, profile), record the measured geometric deviation against the stated tolerance zone per ASME Y14.5-2018 or ISO 1101, whichever is called out on the drawing. For general tolerances not individually specified, apply ISO 2768-m or the tolerance block on the drawing — not engineering judgement.
-
Collect supporting documentation. A measurement report alone is not enough for ISO 13485. Assemble:
- Material certificate (mill cert or Certificate of Analysis) referencing the drawing material specification — e.g., Grade 23 Ti-6Al-4V ELI per ASTM F136 for orthopaedic implants
- Gauge calibration records for every measuring instrument used, traceable to national standards (NABL in India; NIST in the US)
- Process records: CNC setup sheet, tool list, inspection plan
- Certificate of Conformance signed by a responsible person at the supplier
- Any special process certifications: heat treatment, surface finish, passivation per ASTM A967
- Review and disposition. The device manufacturer's quality engineer reviews the complete FAI package. Possible dispositions: Approved (proceed to volume supply), Conditionally Approved (minor deviation accepted with documented rationale under your concession procedure per clause 8.3), or Rejected (supplier must re-run setup and re-submit). Document the disposition with a signature and date.
- Maintain the record. ISO 13485 clause 4.2.5 requires records to remain legible, identifiable, and retrievable for the retention period defined in your quality plan — and for at least the lifetime of the device plus any regulatory requirement (often 15 years for implantables in Europe under MDR Article 10(8)).
- Define re-FAI triggers in your quality plan. Write explicit triggers into your supplier quality agreement so there is no ambiguity later. Standard triggers include: engineering change notice on the drawing, material or supplier change, process change at the sub-tier, and production gap exceeding the defined period (12–24 months is common).
Incoming Inspection for Medical Device Parts: How FAI and IQC Interact
A completed and approved FAI does not eliminate incoming inspection — it informs it. Once the FAI establishes that the supplier's process is capable of producing conforming parts, incoming quality control (IQC) sampling can shift to a statistically justified reduced plan such as ANSI/ASQ Z1.4 AQL 0.65 for Critical characteristics. Without a baseline FAI, your IQC team is effectively doing a full re-inspection every batch, which is expensive and unsustainable.
The relationship between FAI and IQC should be documented in your supplier quality plan or control plan. A useful rule: FAI confirms the process; IQC monitors its ongoing consistency. When IQC data starts trending toward the tolerance boundary, that is a signal to review the FAI data and consider a process audit before a non-conformance event forces your hand.
For incoming inspection of medical device parts, also consider whether your supplier's measuring equipment is adequate. Clause 7.6 of ISO 13485 extends calibration and measurement system analysis requirements to the supplier where their measurements form part of your product verification evidence. Requesting gauge R&R data for critical dimensions is entirely reasonable during supplier qualification — and auditors appreciate seeing it in the FAI package.
Supplier Part Qualification Under ISO 13485: What Auditors Actually Check
Notified bodies and FDA investigators conducting supplier control audits look for four things in FAI packages: completeness, traceability, objectivity, and timeliness.
Completeness means every characteristic on the controlled drawing is accounted for — not just the ones that were easy to measure. If a surface roughness Ra value is on the drawing and not in the FAI, expect a finding. Traceability means the part measured can be linked back to raw material heat number and the production date. Objectivity means measured values, not "conforms" or a tick box. Timeliness means the FAI was done before volume supply began, not retrospectively assembled before an audit visit.
One common gap seen in supplier audits: the balloon drawing used for FAI does not match the current drawing revision in use for production. Lock the drawing revision on the FAI package and include a statement confirming the design record revision level, as AS9102 Rev C Form 1 does. Borrowing that discipline from aerospace is entirely appropriate in medical device manufacturing, even if you do not formally use AS9102 format. For a detailed comparison of FAI formats, see the existing post on AS9102 vs PPAP: Which FAI Standard You Need.
Common Mistakes in Medical Device FAI
Measuring fewer characteristics than the drawing contains. Selective measurement is the single most common nonconformance finding. If the drawing has 80 dimensions and the FAI report covers 45, the auditor will ask which 35 you decided were unimportant — and that conversation never goes well.
Using general tolerance notes as an excuse for vagueness. ISO 2768-m defines tolerances for linear dimensions up to 2000 mm and angular dimensions. These are real, calculable numbers. "Conforms to general tolerances" written in a report without actual measured values does not satisfy clause 7.4.3. Record the actual value even when the tolerance is from the general note.
Accepting supplier-prepared balloon drawings without review. Suppliers sometimes balloon only the dimensions they are confident about. The device manufacturer's quality engineer must verify that the balloon drawing covers 100 % of the drawing's measurable characteristics before accepting the FAI package.
Missing calibration traceability for supplier instruments. A measurement is only as trustworthy as the instrument that made it. If the supplier's micrometer certificate expired six months before the FAI date, the measurement data is legally unverifiable. Build calibration status checks into your supplier audit checklist.
No defined re-FAI triggers in the supplier agreement. Without explicit triggers, a supplier changing from a manual lathe to a CNC turning centre has no obligation to notify you or re-qualify. This is a process change that absolutely warrants a new FAI.
Treating FAI as a one-time event rather than a living programme. Design changes in medical devices are frequent during product lifecycle. Each change that affects form, fit, or function must feed back into the FAI programme. Maintain a register of FAI status by drawing number and revision so the current status is visible at a glance.
How CadNexa Helps with ISO 13485 FAI Documentation
Creating a balloon drawing and populating a characteristic measurement report manually — across a 60-dimension orthopaedic component drawing — typically takes two to four hours per engineer. CadNexa's FAI Report Generator (live) generates first article inspection reports directly from balloon data, with export options as interactive HTML, PDF, or CSV. The report format options include ISO alongside AS9102 Rev C, PPAP, ASME, DIN, JIS, GB, and IS — so the output aligns with whatever format your OEM customer or notified body expects.
The Box+Balloon OCR feature (live) lets quality engineers draw a box around a dimension on a scanned or PDF drawing; the tool reads the value, tolerance, and type — diameter, radius, thread, GD&T — and pre-fills the balloon data automatically. The Smart Detect AI auto-ballooning (live) can scan an entire drawing in one click to detect dimensions and GD&T frames for review. Once the balloon drawing is finalised, the CSV export (live) feeds the characteristic list directly into your inspection planning spreadsheet or quality management system. For ISO 13485 inspection documentation workflows, start a balloon drawing in CadNexa at app.html — the process from PDF drawing to exportable FAI report typically takes under fifteen minutes for a standard machined component.
For more on the inspection documentation context, the post on ISO 13485 Inspection Documentation covers the broader record-keeping obligations across the quality system, and the Incoming Inspection Checklist guide provides a parallel framework for the IQC stage that follows a successful FAI.
Frequently Asked Questions
Does ISO 13485 explicitly require a first article inspection?
ISO 13485 does not use the term "first article inspection" but clause 7.4.3 mandates verification of purchased product against specified requirements before use. FAI is the most structured method to satisfy this obligation for critical machined or moulded medical components.
Which FAI format is best suited to ISO 13485 medical device suppliers?
There is no single mandated format. AS9102 Rev C is widely adopted because its Form 2 (product accountability) and Form 3 (characteristic accountability) map directly onto ISO 13485 clause 7.4.3 records. Some OEMs also accept PPAP Level 3 packages. Always confirm the preferred format with the device manufacturer.
How many parts must be measured in a medical device FAI?
ISO 13485 is silent on sample size. Common practice is to measure three to five pieces from the first production run, recording all drawing dimensions. For implantable components, auditors routinely expect all characteristics on at least three parts.
When must a new FAI be triggered for an existing medical component?
Trigger a new FAI whenever there is a design change, material change, supplier change, manufacturing process change, or a gap in production exceeding a period defined in your quality plan — typically 12 to 24 months for Class II/III devices.
What documents must accompany a medical device FAI submission?
Typical submission includes: balloon drawing, characteristic measurement report, material certificates (mill cert or CoA), process records (setup sheets, CNC programmes), gauge calibration records, and a Certificate of Conformance. Sterile devices may also need biocompatibility and sterilisation validation references.
Conclusion
ISO 13485 does not hand you a prescriptive FAI checklist — it hands you a performance requirement and expects your quality system to define the method. The framework described here — full characteristic coverage, documented traceability, supporting material and calibration evidence, and explicit re-FAI triggers — gives auditors the objective evidence they need and gives your incoming inspection team a defensible baseline for ongoing sampling.
The documentation burden is real, but it is largely a process and tooling problem, not a knowledge problem. Once quality engineers have a fast, reliable way to balloon drawings and generate characteristic reports, the FAI programme becomes sustainable rather than a fire-drill before every customer audit.