An Approved Supplier List (ASL) helps medical device companies make sure they purchase materials and components from qualified suppliers. The next step is connecting that list to the purchasing process, so supplier approvals guide each purchase order.
When supplier qualification records and purchasing activity are managed in the same system, Quality and Purchasing can work from consistent information. Teams can check supplier status, confirm the approved manufacturing site, and trace purchased materials through inventory records.
NetSuite support this process through supplier records, purchasing workflows, and purpose-built controls as ASL module.
Why Connect the ASL to Your ERP?
Since February 2, 2026, the FDA’s Quality Management System Regulation (QMSR) has incorporated ISO 13485:2016 by reference. The requirements cover how medical device manufacturers evaluate and select suppliers, monitor their performance, and review their qualifications over time. The level of control should reflect the effect of purchased products on device quality and the associated risks.
An ASL helps put these requirements into daily practice. When supplier qualification records connect to purchase orders and inventory transactions, teams can see which suppliers and manufacturing sites were approved for a purchase.
This also supports traceability. If a team needs to review a finished device and the components used to make it, purchasing and inventory records can help connect those materials to their original suppliers.
Keeping these records together in NetSuite gives Quality, Purchasing, and Operations a shared view of supplier status and purchasing activity.
5 Steps to Enforce an ASL in NetSuite
A well-designed ASL process connects supplier qualification with purchasing and inventory records.
1. Identify suppliers that require qualification
Start by identifying suppliers whose materials or services can affect device quality. Apply controls based on the supplier's role and the risk associated with what they provide. This helps Quality and Purchasing understand which suppliers require formal qualification.
2. Maintain supplier qualification records
Quality can manage a qualification record for each relevant supplier. Depending on the process, this may include qualification type, status, approval date, expiry date, and supporting documents.
Statuses such as Pending, Approved, Conditional, Blocked, and Expired help teams understand where each supplier stands. Expiry reminders also help Quality plan reviews and renewals in advance.
3. Link items to approved manufacturing sites
Supplier approval can depend on the manufacturing site, not just the supplier's company name. A supplier may have several facilities, each with its own qualification status.
Linking items to approved manufacturer sites helps ensure that purchase orders reflect the intended source. For purchases made through distributors, distributor mapping can connect the purchased item to the underlying approved manufacturer site.
4. Validate purchase orders automatically
This is where the ASL becomes part of the purchasing workflow. When a purchase order is saved, the system can check the supplier's qualification status, manufacturer-site approval, and item-to-site mapping.
Archer Insights' Approved Supplier List module performs these checks in NetSuite and prevents orders that do not meet the configured requirements from proceeding. This helps Purchasing follow the same supplier controls across transactions.
5. Connect receiving records to the approved source
When materials arrive, recording the manufacturer site on the lot or serial number helps preserve the link between the approved source and the inventory received.
This gives teams a clearer path from the supplier qualification record to the purchase order, receipt, and inventory used in production. These records can support supplier reviews, quality investigations, and device traceability.
Managing Urgent Purchases
Sometimes a business needs an exception, such as when a critical component is urgently required. A defined process helps teams handle these situations consistently.
Archer Insights ASL module, authorized Quality users can use the emergency bypass process with a valid Deviation or CAPA reference. The exception is logged with the user's name and timestamp, providing a record for subsequent review.
The company should define when exceptions are permitted, who can authorize them, and what documentation is required. This helps maintain oversight while giving teams a controlled way to respond to urgent needs.
Where Archer Insights Fits
The Approved Supplier List module is built natively inside NetSuite, bringing supplier qualification and purchasing controls into the same environment as the company's ERP records.
The module supports supplier qualification records, annual recertification tracking, approved manufacturer-site and item mapping, distributor mapping, and purchase order validation. At receipt, the manufacturer-site information can be copied to the lot or serial number to support traceability.
It can also work alongside other Archer solutions. Our Quality Management System supports quality workflows involving deviations and corrective and preventive actions (CAPA). Vendor Onboarding provides a structured process for collecting supplier information and documents.
Together, these capabilities help medical device companies connect supplier approval, purchasing, receiving, and quality processes in NetSuite.
FAQs
Does every supplier need to be on the Approved Supplier List?
Companies should determine which suppliers need formal qualification based on their products or services and the potential effect on device quality. The level of control should reflect the associated risk.
Should Quality or Purchasing manage the ASL?
Quality typically defines and oversees supplier qualification, while Purchasing uses the approved supplier information when placing orders. Clear responsibilities and system permissions help both teams follow the same process.
How can a company manage supplier qualification expiry dates?
Qualification records can include approval and expiry dates, with reminders to help Quality plan reviews and recertification. The purchasing workflow can then use the current qualification status when validating orders.
Can an ASL support QMSR and ISO 13485 processes?
An ASL can help support supplier evaluation, purchasing controls, and traceability. Companies should align their configuration and procedures with their specific regulatory requirements and quality management system.
How does NetSuite help with supplier traceability?
When supplier qualification, purchase orders, receiving records, and lot or serial details are connected, teams can trace materials back to their approved source using related ERP records.