Dental Factory Audit Checklist | ATBIO

A polished catalogue and a certificate PDF are useful screening inputs, but neither shows how a dental-material supplier controls day-to-day work. A well-designed dental factory audit checklist tests whether the legal manufacturer, certified site, people, procedures, records, equipment, materials, labels, and released batches form one coherent system.

The audit should be risk based. A buyer of non-sterile restorative materials does not need the same audit trail as a buyer of sterile devices, and a private-label program normally requires deeper review of design ownership, artwork approval, change notification, and technical-document access. The purpose is not to pass or fail a factory from a tour. It is to collect enough objective evidence for a documented sourcing decision.

This guide aligns practical supplier controls with ISO 13485, ISO 14971, ISO 19011, and relevant regulatory evidence. It does not replace a conformity assessment, regulatory inspection, or legal review for the destination market.

01 — Define the Audit Objective, Scope, and Criteria

Start with a written audit plan. Identify the legal entity, manufacturing address, products and processes in scope, applicable markets, audit team, timetable, confidentiality rules, and records to sample. State whether the audit is for initial qualification, periodic surveillance, a significant change, or investigation of a quality issue.

• Map every in-scope SKU to its legal manufacturer, manufacturing site, intended purpose, risk class where applicable, and destination market.

• Include outsourced processes that can affect safety, performance, labeling, or release.

• Set criteria before scoring: contractual specifications, the supplier's own procedures, applicable regulation, and relevant standards.

• Choose an auditor with appropriate quality-system, product, process, and language competence.

• Define sampling in advance. A sample-based audit provides evidence about selected records; it is not a guarantee that no other problem exists.

02 — Complete the Desktop Gate Before the Visit

Do not spend on travel until basic identity and certification checks are complete. Ask for an unedited, current certificate and verify it with the issuing certification body or a recognized certificate database. ISO does not certify companies or issue certificates.

For an ISO 13485 certificate, compare the legal name, site address, standard edition, certificate number, scope, issue and expiry dates, certification body, and accreditation information with the products and facility you intend to buy from. A valid certificate supports confidence in the stated QMS scope; it is not product approval and does not, by itself, prove compliance in every destination market.

For EU-bound devices that require notified-body involvement, confirm the body's designation and scope in the European Commission's NANDO information. Do not rely only on a logo or four-digit number printed on packaging.

03 — Test the Quality System Through Records

ISO 13485:2016 remains the current edition and defines QMS requirements for organizations involved in medical-device design and manufacture. During an audit, the useful question is not whether a procedure exists, but whether approved procedures, trained execution, records, and management oversight agree.

• Review the quality manual or equivalent process map and the document hierarchy.

• Sample document approval, revision control, distribution, obsolete-copy prevention, and record retention.

• Check responsibilities, competence criteria, training records, and training-effectiveness evidence.

• Review internal-audit planning, auditor independence for the activity audited, findings, and closure evidence.

• Examine management-review inputs, decisions, resources, overdue actions, and follow-up.

• Trace a recent nonconformity through containment, investigation, correction, corrective action, effectiveness review, and closure.

Follow one risk through the evidence chain

The FDA-hosted MDSAP Audit Approach links purchasing-file selection to actual or potential nonconformities, higher-risk elements and significant outsourced processes. A useful audit therefore follows one real risk across connected records instead of collecting isolated screenshots.

For example: start with a complaint or nonconforming result, identify the affected supplier and purchase requirement, inspect incoming acceptance and batch-release evidence, then test whether investigation, CAPA and effectiveness checks reached the same root cause. A polished policy with no lot-level trail is weak evidence.

04 — Connect Design, Change Control, and Risk Management

For products within scope, determine who owns the design and technical documentation. If a trading company presents a contract manufacturer's product, roles and access rights must still be clear. Sample one product family from intended purpose and design inputs through verification, validation, transfer, and current production specifications, as applicable.

• Confirm that changes to formulation, raw-material source, process, equipment, software, packaging, label, instructions, and manufacturing location enter a controlled review.

• Verify that quality, regulatory, risk, validation, stability, and customer-notification impacts are assessed before implementation.

• Link risk controls to production controls, acceptance criteria, labeling, complaint review, and post-production information.

• For private-label projects, document design ownership, approval authority, technical-file responsibilities, and notice periods contractually.

ISO 14971:2019 provides a lifecycle framework for identifying hazards, evaluating and controlling risks, and monitoring whether controls remain effective. An auditor need not redesign the product, but should test whether risk records are current and connected to real operational evidence.

05 — Audit Purchasing and Incoming-Material Controls

A dental-material manufacturer is only as reliable as its control of critical suppliers and inputs. Select several materials that can affect safety, performance, shade, curing, shelf life, or packaging integrity and trace them from approved supplier to an issued production batch.

• Review supplier qualification, risk classification, approval status, performance monitoring, and re-evaluation.

• Check specifications, purchase requirements, certificates of analysis, incoming inspection or test records, and material-release status.

• Verify identity, lot number, expiry or retest date, storage condition, quarantine, sampling, and disposition.

• Examine how supplier, specification, or material changes are detected and assessed.

• If testing is outsourced, verify laboratory qualification, method suitability, sample chain of custody, and review of results.

No single instrument is universally mandatory. The audit should establish that methods are suitable and appropriately verified or validated, equipment is controlled, and acceptance criteria are technically justified for the material and risk.

06 — Observe Production and Process Controls

Follow one representative product route from material dispensing to filling, packaging, and batch release. Compare the actual workstation with the approved master instruction and completed batch record. Watch for undocumented adjustments, uncontrolled printouts, ambiguous status labels, mixed materials, or rework outside an approved instruction.

Environmental controls should match product and process risk. A named cleanroom class is not automatically required for every non-sterile dental material. The manufacturer should justify the necessary contamination, temperature, humidity, light, dust, or cross-contamination controls and demonstrate monitoring where those controls affect product quality.

• Verify line clearance, material reconciliation, equipment status, cleaning, maintenance, and prevention of mix-ups.

• Review process parameters and the basis for their limits.

• Identify processes whose output cannot be fully verified by later inspection and review their validation and revalidation controls.

• Examine control of deviations, rework, scrap, and nonconforming product.

• Confirm that outsourced manufacturing steps remain under documented supplier controls.

07 — Review Testing, Calibration, and Batch Release

Select released, rejected, and, if available, deviated batches. Reconcile production quantities, test samples, packaging counts, yield, and disposition. Confirm that the person authorizing release has defined authority and access to the complete acceptance record.

• Match test results to approved specifications, methods, sample identity, equipment, analyst, date, and raw data.

• Check calibration or verification status, maintenance, out-of-tolerance handling, and the impact assessment for previous measurements.

• Review reference standards, retained samples, and stability-program controls where relevant.

• Examine electronic-data access, audit trails where applicable, backup, correction, and review controls.

• Confirm that failed or atypical results are investigated under controlled procedures rather than retested until a passing result appears.

08 — Challenge Traceability, Labels, Warehousing, and Feedback

Run a two-way traceability exercise: start with a finished lot and trace back to critical inputs and records, then select an input lot and trace forward to affected finished goods and customers. Time the exercise and record any gaps. The expected depth should reflect product risk and applicable regulatory or contractual requirements.

• Compare approved artwork with production labels, instructions, language versions, lot and expiry format, storage conditions, and product identity.

• Inspect segregation and access controls for quarantined, released, rejected, returned, and expired stock.

• Review temperature or other environmental records where labeled storage conditions require them.

• Sample complaints for intake, reportability assessment where applicable, investigation, trend review, customer communication, and CAPA linkage.

• Review recall or field-action procedures and a recent mock exercise or documented test.

• Check how post-market and production information feeds risk management and product improvement.

For devices placed on the EU market, the EU Medical Device Regulation and current European Commission guidance should be considered alongside the manufacturer's specific obligations. Market-specific requirements must be confirmed for each destination.

09 — Use Remote Audits Deliberately

ISO 19011:2026 is the current ISO guidance on auditing management systems and includes expanded attention to remote auditing. A remote audit can support document review, interviews, live production viewing, and follow-up, but its limitations must be recorded.

Use secure channels, agree recording rules, ask the auditee to navigate evidence live, and keep an evidence log. If critical areas, original records, or relevant personnel cannot be accessed remotely, record the gap and schedule on-site verification or another control.

10 — Report Findings and Make a Sourcing Decision

Classify findings with pre-agreed definitions linked to risk and requirements. Avoid a score that hides a critical issue behind many minor positives. Every finding should identify the criterion, objective evidence, affected product or process, and required response.

• Critical hold: evidence of falsified identity or records, uncontrolled release, an unaddressed serious safety concern, or missing authorization essential to the target market.

• Major action: a systemic breakdown, repeated failure, ineffective CAPA, or loss of control that could affect product conformity.

• Minor action: an isolated lapse that does not indicate systemic loss of control but still requires correction.

• Observation: an improvement opportunity that is not a nonconformity.

Require root-cause analysis, correction, corrective action, owner, deadline, and effectiveness evidence proportionate to the finding. Approval may be full, conditional, limited to named products or sites, or declined. Define re-audit triggers such as critical changes, repeated defects, serious complaints, delivery from an unapproved site, or overdue major actions.

11 — Apply the Checklist to ATBIO Due Diligence

ATBIO's public materials describe a portfolio of dental composites, adhesives, cements, impression materials, and related products. Buyers can review the company background on the About ATBIO page and compare the relevant dental composite and dental adhesive information before requesting a document package.

For distributor or private-label discussions, use the distributor page to define commercial scope, then request current product- and site-specific evidence. Public claims or a general certificate should not be extended to a product, activity, or market outside the stated scope.

A useful first request identifies destination market, product family, expected annual volume, labeling or private-label needs, required documents, sample plan, and audit expectations. Send that scope through request a quote so commercial and quality questions can be reviewed together.

12 — Frequently Asked Questions

Is an ISO 13485 certificate enough to approve a dental supplier?

No. It is valuable evidence only when the certificate is authentic, current, and covers the relevant legal entity, site, and activities. Supplier approval should also consider product-specific regulatory evidence, process records, audit findings, samples, commercial capability, and destination-market requirements.

Does MDSAP replace a buyer's factory audit?

No. MDSAP is a regulatory audit framework with a public process model linked to ISO 13485 and jurisdiction-specific requirements. Its evidence may inform risk-based supplier qualification, but it does not replace product authorization for a destination market or the buyer's responsibility to assess contractual and supply risks.

Must every dental-material factory operate a classified cleanroom?

Not automatically. Required environmental control depends on the product, manufacturing process, intended use, contamination risk, regulatory basis, and validated control strategy. The audit should verify the manufacturer's documented rationale and supporting monitoring or validation.

How many records should an auditor sample?

There is no universal number. Sampling should reflect risk, process complexity, batch volume, history, audit duration, and emerging evidence. Record the rationale and expand the sample when inconsistencies or adverse trends appear.

Can a remote audit qualify a new supplier?

Sometimes, if risk, access, evidence quality, and applicable requirements allow it. A remote audit is weaker when physical flow, original records, restricted areas, or process behavior are central. Use a documented hybrid or on-site follow-up when unresolved gaps remain.

13 — References

• ISO. ISO 13485:2016 — Medical devices — Quality management systems.

• ISO. ISO 19011:2026 — Guidelines for auditing management systems.

• ISO. Certification and how to verify an ISO certificate.

• ISO. ISO 14971:2019 — Application of risk management to medical devices.

• EUR-Lex. Regulation (EU) 2017/745 on medical devices.

• European Commission. Notified bodies for medical devices and NANDO.

• International Medical Device Regulators Forum. MDSAP audit approach workshop materials, 2026.

• European Commission. MDCG 2025-10 guidance on post-market surveillance.

14 — About ATBIO

This article is published by ATBIO, the dental-materials brand of AT&M Biomaterials Co., Ltd.

ATBIO supplies dental restorative and related materials for distributors, dealers, and clinical partners. Product availability, regulatory documentation, labeling options, minimum order quantities, and private-label scope depend on the specific product and destination market and should be confirmed in writing. This page does not claim unconditional sale authorization in any market.

Disclaimer: This article provides general procurement and quality-management information, not legal, regulatory, certification, or clinical advice. Requirements vary by device, role, and market. Verify current obligations and product-specific evidence with qualified professionals and the relevant authorities before purchase, import, registration, or sale.

15 — Related Products and Resources

• Dental Resin Intro Kit

• Nanofil Z250 Universal Restorative Composite

• Perfect-Link Universal Dental Adhesive