Is Your Contract Manufacturer an FDA Establishment? Registration and Listing Obligations You Cannot Afford to Miss

The Registration Question That Trips Up Even Experienced Teams

You have signed a contract with a capable manufacturing partner, your device is moving through production, and your own FDA establishment registration is current. Many device companies stop there -- and that is a costly mistake. The question that frequently surfaces during FDA inspections and pre-market reviews is not just whether you are registered, but whether every facility in your supply chain that legally qualifies as an FDA establishment has independently met its own registration and listing obligations under 21 CFR Part 807.

This post breaks down the specific criteria that trigger independent registration for contract manufacturers, contract sterilizers, and specification developers -- and what your regulatory program should account for before FDA asks.

How FDA Defines an 'Establishment' Under 21 CFR Part 807

Under 21 CFR 807.3(b), an establishment is defined as a place of business under one management at one general physical location at which a device is manufactured, assembled, or otherwise processed. The word 'processed' carries significant weight. It captures activities well beyond traditional manufacturing, including sterilization, repackaging, relabeling, and specification development.

FDA's interpretation, reinforced in its Establishment Registration and Device Listing guidance (updated 2022), makes clear that the legal obligation to register follows the activity -- not the commercial relationship. A facility does not escape registration simply because it calls itself a 'contract' operation or because another company owns the device design.

When a Contract Manufacturer Must Register Independently

A contract manufacturer that physically produces, assembles, or finishes your device at its own facility is almost always its own FDA establishment. Under 21 CFR 807.20(a), owners or operators of establishments that are engaged in the manufacture, preparation, propagation, compounding, assembly, or processing of a device intended for human use must register with FDA.

Key scenarios where independent registration is required include:

• Final assembly and finishing: If the contract manufacturer performs final assembly or finishing operations on a finished device, it must register as a manufacturer.
• Sub-assembly production: Facilities that produce critical sub-assemblies that become part of a finished device may also qualify, depending on the scope of work.
• Repackaging or relabeling: Under 21 CFR 807.3(c), repackagers and relabelers are explicitly included in the definition of manufacturer and must register independently.

The device owner's registration does not extend to or cover the contract manufacturer's facility. These are legally distinct establishments with distinct obligations.

Contract Sterilizers: A Frequently Overlooked Registration Trigger

Contract sterilization is one of the most common blind spots in device company compliance programs. If a third-party facility applies a terminal sterilization process to your finished device -- whether ethylene oxide, gamma irradiation, e-beam, or another modality -- that facility is engaged in 'processing' under FDA's definition and must register as an establishment.

FDA addressed this directly in its registration guidance and in various Warning Letters issued to both device companies and their sterilization partners. Failure of a contract sterilizer to register does not just create a compliance gap at the sterilizer -- it can call into question the regulatory status of every device that passed through that facility.

When you are assessing your supply chain, every sterilization partner should be able to provide their current FDA establishment registration number, verifiable through FDA's Establishment Registration and Device Listing database (FURLS/DRLS).

Specification Developers: Registered Even Without a Factory

Under 21 CFR 807.3(d), a specification developer is any person who develops specifications for a device but who does not manufacture it. If your company develops the design and specifications and contracts out all manufacturing, your company is a specification developer and must register -- even if you never touch a physical product.

This is the registration category that most device startups fall into during early commercialization. It is not optional, and it is not waived because you are small or early-stage. The registration deadline is before commercial distribution begins, per 21 CFR 807.21.

US Agent Obligations for Foreign Establishments

If any facility in your supply chain is located outside the United States and is engaged in activities that require registration, that foreign establishment must designate a US Agent under 21 CFR 807.40. The US Agent must reside or maintain a place of business in the United States and serves as FDA's primary point of contact for that foreign establishment. Device owners working with offshore contract manufacturers often inherit this coordination burden and need to confirm that each foreign facility has a properly designated, responsive US Agent on file.

Device Listing: The Obligation That Follows Registration

Registration and listing are distinct but linked requirements. Under 21 CFR 807.25, each establishment must list every device it manufactures, repackages, relabels, or otherwise processes for commercial distribution. Contract manufacturers must list the devices they produce -- not just the device owner. Listings must be updated annually during the October 1 through December 31 listing period, and changes must be reported within 30 days.

An unlisted device manufactured at a registered facility is still a compliance problem. Both conditions must be satisfied.

What This Means for Your Regulatory Program

Before your next device launch, pre-submission meeting, or FDA inspection, your regulatory team should review and prepare documentation that addresses the following:

• A complete map of every facility in your supply chain that touches the finished device, including sterilizers and packagers
• Verification of current FDA registration for each qualifying facility via the FURLS database
• Confirmation that each registered facility has filed accurate and current device listings
• For foreign facilities, written confirmation of a designated US Agent and that agent's current contact information on file with FDA
• Internal procedures that require registration and listing verification as part of your supplier qualification process under your 21 CFR Part 820 quality system

Gaps discovered during an FDA inspection or a 510(k) review can halt commercialization and trigger enforcement action. Reviewing your supply chain proactively is far less expensive than responding to a Form 483 observation or an untitled letter.

Work With a Regulatory Expert Who Knows the Details

At ADB Consulting and CRO Inc., Andre Butler and the team work directly with medical device startups and quality and regulatory professionals to assess registration and listing obligations across complex supply chains, prepare compliant submission packages, and review supplier qualification frameworks against FDA expectations. We do not offer generic checklists -- we offer experienced, practical regulatory guidance tailored to your specific device and business model.

If you are not certain that every facility in your supply chain is properly registered and listed, now is the time to find out. Book a free discovery call with ADB Consulting and CRO Inc. at adbccro.com and let us help you assess where you stand before FDA does.

For related guidance, see our US Agent service.