What Hosting Client Audits Every Month Taught Us About Passing FDA Inspections

There is an asymmetry at the heart of medical device quality that almost nobody talks about. A typical manufacturer faces a formal external audit roughly once a year — an ISO 13485 or MDSAP surveillance audit — plus their own internal audits. Under EU MDR, a Notified Body shows up unannounced only about once every five years. External scrutiny is rare, and rare things are the things teams are worst at.

Boulder iQ and Boulder Sterilization are FDA-registered establishments. That means our customers — the device companies whose products we manufacture and sterilize — audit us. Not once a year. Several times a month. We sit in the auditee’s chair constantly: pulling records on request, walking the floor, answering for our procedures, defending our CAPA closures.

That frequency changes what you know. You learn which questions auditors actually open with. You learn what a confident, correct answer sounds like versus one that invites a follow-up. You learn that the finding is almost never the dramatic thing — it is the training record that does not match the revision, the calibration that lapsed by a week, the CAPA that closed without effectiveness evidence.

Records that do not reconcile. The fastest way to lose an auditor’s confidence is a document that references a procedure revision that does not exist, or a signature dated after the activity. Auditors pull threads; make sure yours do not unravel.

CAPA that closes without proof. A corrective action without effectiveness verification is an open invitation to a finding. We hold our own CAPAs to the standard of "would this survive being reopened?" — and so should you.

Answers that volunteer too much. A rehearsed team answers the question asked, accurately, and stops. An under-rehearsed team narrates, speculates, and opens new doors. The difference is practice, which is exactly what infrequent auditees lack.

When we run a mock FDA inspection for you, it is not a checklist exercise from someone who has only read the guidance. It is a simulation built by people who get audited for real, on a real FDA registration, every month. We know where teams stumble because we watch it — and occasionally feel it — from both chairs. If you have an inspection coming, or just want to know how you would do, request a consult.