Depot Repair QMS for Reusable Medical Device Capital Equipment: Receiving, Decontamination, Testing, Rework, Calibration Traceability, and Return-to-Service Under ISO 13485 and FDA QMSR

What Depot Repair Is and Why It Needs a Full QMS

Depot repair is the process of receiving malfunctioning, damaged, or due-for-preventive-maintenance reusable medical devices at a centralized service facility — the depot — for diagnosis, repair, refurbishment, calibration, and return to service. It applies to reusable capital equipment: patient monitors, ventilators, infusion pumps, defibrillators, electrosurgical units, anesthesia machines, imaging systems, surgical robotics, and other devices that cost thousands to hundreds of thousands of dollars and are intended to be maintained over a useful life measured in years or decades.

Depot repair is not the same as field service, where a technician goes to the device. It is not the same as simple swap-and-replace logistics. And it is not an unregulated maintenance task that falls outside medical device quality system requirements. Under the FDA's Quality Management System Regulation (QMSR), effective February 2, 2026 — which incorporates ISO 13485:2016 by reference — production and service provision controls apply to activities performed on medical devices after distribution. ISO 13485 Clause 7.5 (Production and Service Provision) and Clause 7.5.9 (Traceability) are directly relevant to depot repair operations.

The depot repair activity sits at the intersection of the FDA's servicing and remanufacturing distinction. As clarified in the FDA's May 2024 final guidance on Remanufacturing of Medical Devices, activities that return a device to its OEM-established safety and performance specifications constitute servicing. Activities that significantly change those specifications constitute remanufacturing — which triggers full manufacturer-level regulatory obligations. A well-structured depot repair QMS ensures that every activity performed at the depot remains within the servicing boundary and is fully documented to prove it.

Organizations like Crothall Healthcare have achieved ISO 13485:2016 certification for full lifecycle medical device service provision, demonstrating that the industry recognizes depot repair as a quality-system-regulated activity. Quest International and similar service providers structure their depot operations around a receiving-decontamination-testing-repair-calibration-QA-return workflow that mirrors manufacturing process controls.

This post covers how to build and operate a QMS specifically for depot repair of reusable medical device capital equipment. It is written for OEMs running their own depot operations, third-party service organizations managing depot repair on behalf of OEMs, and hospital biomedical engineering departments that perform depot-level repair internally.

The Depot Repair Workflow: A Process View

A well-structured depot repair operation follows a defined workflow that mirrors manufacturing process controls. Each step must have documented procedures, acceptance criteria, trained personnel, and complete records.

Receiving and Triage

Every device arriving at the depot must be received through a controlled process:

Incoming identification. The device is assigned a unique service order or work order number. The device's serial number, model, lot or batch number (if applicable), software version, and any UDI information are recorded and linked to the service order.

Condition assessment. The device is visually inspected for physical damage, contamination, missing components, and obvious defects. The reported fault or reason for service is documented.

Service history review. The device's service history — previous repairs, preventive maintenance records, complaint history, open CAPAs, and any field safety notices or recalls affecting this device — is reviewed. This historical context is critical for diagnosing recurring issues and for understanding whether the device has been previously modified in ways that affect the repair.

Triage classification. Based on the condition assessment and service history, the device is classified into a repair category: routine preventive maintenance, corrective repair, refurbishment, or evaluation-only. This classification determines the workflow path and the scope of work.

Customer authorization. Before repair work begins, a service estimate is generated and authorized by the device owner (hospital, clinic, or OEM). The authorization includes scope of work, estimated cost, and estimated turnaround time.

Decontamination and Biohazard Handling

Reusable medical devices that have been in clinical use arrive at the depot with potential biological contamination. Decontamination is a mandatory prerequisite for all subsequent depot activities — it protects depot personnel, prevents cross-contamination between devices, and ensures that diagnostic testing is performed on a clean device.

Decontamination procedure. Follow the OEM's instructions for use (IFU) for cleaning and disinfection. If the OEM's IFU does not address depot-level decontamination, develop a procedure based on the device's expected contamination profile and the depot's risk assessment. The procedure should specify cleaning agents, contact times, rinse requirements, and verification methods.

Biohazard safety. Depot personnel who handle incoming devices must be trained in biohazard safety protocols, including universal precautions, personal protective equipment requirements, and sharps handling. The depot facility should have designated decontamination areas separated from repair and testing areas.

Decontamination verification. After decontamination, verify that the device is clean before it enters the repair workspace. Methods may include visual inspection, ATP bioluminescence testing, or other appropriate verification techniques. Document the decontamination completion.

Special considerations for specific device types. Endoscopes, surgical instruments, and devices that contact sterile tissue require more stringent decontamination than devices with only external patient contact. The decontamination protocol must be appropriate for the device's intended use and contamination risk.

Diagnostic Testing and Fault Isolation

Once the device is decontaminated, it undergoes diagnostic testing to identify the root cause of the reported fault and to assess the overall condition of the device.

Functional testing. Test the device against the OEM's performance specifications. Use OEM-specified test equipment and methods where available. Document all test results, including parameters measured, measured values, acceptance criteria, and pass/fail determination.

Fault isolation. If the device fails functional testing, use systematic fault isolation procedures to identify the specific component, sub-assembly, or system responsible for the failure. This may involve board-level diagnostics, signal tracing, pressure testing, flow testing, or other device-specific techniques.

Ancillary testing. In addition to testing the reported fault, assess other critical functions of the device that may have been affected. A device that arrives for a display failure may also have an underlying power supply issue that has not yet manifested but will cause a subsequent failure if not addressed.

Estimate revision. If diagnostic testing reveals additional faults beyond the originally reported issue, update the service estimate and obtain additional authorization before proceeding with the expanded scope of work.

Repair and Rework Controls

Repair and rework at the depot must be performed under the same level of process control as manufacturing operations. ISO 13485 Clause 8.3 (Control of Nonconforming Product) and Clause 8.3.4 (Rework) apply directly.

Approved repair procedures. Every repair activity must be performed according to a documented, approved procedure. For OEM-operated depots, these are typically the OEM's service manual procedures. For third-party depots, the procedures must be established based on the OEM's service documentation, training, and technical information.

Replacement parts control. Use only parts that meet the OEM's specifications. For OEM-operated depots, this means OEM parts. For third-party depots, replacement parts must be verified against the OEM's part specifications. Using non-equivalent parts — parts that do not meet the OEM's dimensional, material, or performance specifications — may constitute remanufacturing under the FDA's guidance.

The FDA's remanufacturing guidance makes it clear that replacing a component with a non-identical part requires a full analysis using the six guiding principles from the guidance. The classification (servicing vs. remanufacturing) depends on whether the replacement significantly changes the device's safety or performance specifications.

Rework documentation. Every rework activity must be fully documented, including:

• Description of the nonconformity that triggered the rework
• Root cause analysis (where applicable)
• Description of the rework performed
• Replacement parts used (part number, lot/batch, supplier)
• Personnel who performed and verified the rework
• Results of any re-testing after rework

Rework verification. After rework, the device must be re-tested to verify that the nonconformity has been corrected and that the device meets all applicable specifications. The verification testing must be documented.

Calibration and Performance Verification

For devices that include measurement functions — patient monitors, infusion pumps, electrosurgical units, defibrillators, ventilators — calibration is a critical element of depot repair.

Calibration against traceable standards. All calibration activities must use measurement standards that are traceable to national or international standards (NIST in the US, NPL in the UK, PTB in Germany, etc.). ISO 13485 Clause 7.6 (Control of Monitoring and Measuring Equipment) requires that measuring equipment be calibrated or verified at specified intervals against measurement standards traceable to international or national measurement standards.

Calibration procedure. Follow the OEM's specified calibration procedure, including the calibration points, acceptance tolerances, and adjustment methods. If the OEM's procedure is not available, develop a calibration procedure based on the device's performance specifications and a risk assessment of the calibration's impact on patient safety.

Calibration records. Maintain complete calibration records for each device, including:

• Device identification (serial number, model)
• Date of calibration
• Calibration standard used and its traceability information
• As-found and as-left calibration data
• Pass/fail determination
• Technician identification
• Environmental conditions during calibration (if applicable)

Calibration interval. Establish and maintain calibration intervals for depot test equipment. The interval must be justified based on the equipment's stability, usage frequency, and the criticality of the measurements it supports.

Software and Firmware Management

Modern reusable medical devices almost always contain software or firmware. Depot repair activities frequently involve software verification, updates, or restoration.

Software version verification. As part of diagnostic testing, verify the device's software version against the OEM's current approved version. Document the installed version.

Software restoration. If the device's software has been corrupted or is running an unapproved version, restore it to the OEM's approved version. This is servicing — returning the device to OEM specifications.

Software updates. Installing OEM-released software updates is generally classified as servicing under the FDA's remanufacturing guidance. However, non-OEM software modifications, custom batch files, or any software changes that alter the device's behavior beyond OEM specifications would constitute remanufacturing.

Cybersecurity verification. As part of the depot repair process, verify that the device's cybersecurity protections are intact — patches are current, default passwords have been changed, communication ports are properly configured, and the device has not been compromised.

Final Quality Assurance and Release

Before a device leaves the depot, it must pass through a final quality assurance gate:

Complete functional testing. Perform a full functional test of the device against the OEM's performance specifications. Not just the repaired function — all critical functions. This ensures that the repair did not introduce new problems.

Calibration verification. Confirm that all measurement functions are calibrated and within specification.

Visual inspection. Verify that the device is cosmetically acceptable, with no loose components, damaged housings, or missing labels.

Labeling verification. Confirm that all required labels, warnings, and identification markings are present and legible. If any labels were damaged or removed during repair, replace them.

Documentation review. Review the complete service record for the device, including receiving inspection, diagnostic results, repair documentation, parts used, calibration records, and all test results. Confirm that all required documentation is complete and that all acceptance criteria have been met.

Return-to-service authorization. A qualified person — defined by the depot's QMS as having the appropriate training, authority, and independence — must authorize the device for return to service. This authorization is documented and becomes part of the device's service record.

Service report generation. Generate a service report that accompanies the device back to the customer. The report should summarize the work performed, parts replaced, test results, calibration status, and any recommendations for the customer.

Traceability Requirements

ISO 13485 Clause 7.5.9 requires traceability for medical devices — and depot repair operations must maintain traceability throughout the service lifecycle.

Device-Level Traceability

Every device that enters the depot must be traceable from receipt through return:

• Unique service order number linked to the device's serial number
• Complete service history accessible by serial number
• Traceability of all replacement parts to their supplier, lot/batch, and purchase order
• Traceability of all calibration standards to their calibration certificate and national standard
• Traceability of all personnel who performed work on the device

Component-Level Traceability

For critical components that are replaced during depot repair — particularly those that directly affect patient safety (pump mechanisms, sensors, tubes, catheters, electrical components that carry therapeutic energy) — maintain component-level traceability:

• Replacement part number and revision
• Supplier and purchase order
• Lot or batch number (if available)
• Date of installation
• Device serial number into which the part was installed
• Reason for replacement
• Test results confirming proper installation and function

This component-level traceability supports complaint investigation, field corrective action, and recall capability. If a specific lot of replacement parts is later found to be defective, the depot must be able to identify which devices received parts from that lot and notify the affected customers.

Record Retention

Depot repair records must be retained for a period consistent with the device's expected useful life and the applicable regulatory requirements. For most reusable capital medical devices, this means retaining records for the lifetime of the device plus a defined post-retention period (commonly 2–5 years). The FDA's QMSR requires that quality records be maintained and accessible for review during inspections.

Recommended Reading

Biological Specimen Raw Material Sourcing for IVD Development: Human Serum, Plasma, and Matrix Materials

Manufacturing IVD & Diagnostics2026-05-11 · 21 min read

Nonconformance and CAPA in Depot Repair

Nonconformances in depot repair can originate from several sources:

Incoming nonconformances. The device arrives in a condition that is not consistent with the expected state — undocumented modifications, unauthorized repairs, damage beyond economic repair, or contamination that cannot be adequately addressed.

In-process nonconformances. During repair, the technician discovers that the device cannot be returned to OEM specifications, that additional nonconformances exist beyond the originally identified fault, or that required replacement parts are not available.

Post-repair nonconformances. The device fails final QA testing after the repair has been completed.

Each type of nonconformance must be handled through the depot's nonconforming product process:

1. Identify and document the nonconformance
2. Segregate the device to prevent unintended release
3. Evaluate the nonconformance for impact on device safety and effectiveness
4. Determine disposition — rework, return to customer as-is (with disclosure), escalate to OEM, or condemn the device
5. Implement corrective action if the nonconformance indicates a systematic issue
6. Document the complete nonconformance record, including root cause analysis and corrective action

CAPA Triggers Specific to Depot Operations

Depot repair CAPAs may be triggered by:

• Recurring failures of the same type across multiple devices
• Replacement parts from a specific lot or supplier that consistently fail testing
• Repair procedures that are ineffective or produce inconsistent results
• Customer complaints about devices that were recently serviced at the depot
• Internal audit findings related to depot processes

Under the QMSR's risk-based inspection approach, FDA inspectors may evaluate the depot's CAPA program — including how CAPAs are initiated, investigated, and closed — as part of the Measurement, Analysis, and Improvement QMS area.

The Depot Facility and Infrastructure

Physical Layout

A well-designed depot repair facility should have distinct functional areas:

Receiving area. Where incoming devices are unloaded, identified, triaged, and logged into the system. This area should be separated from repair areas.

Decontamination area. Where devices are cleaned and decontaminated before entering the repair workspace. This area must have appropriate biohazard controls, including ventilation, waste handling, and personal protective equipment.

Repair workspace. Where diagnostic testing, repair, and rework are performed. The workspace should have adequate lighting, ESD protection (for electronic devices), and appropriate test equipment.

Calibration area. Where calibration activities are performed under controlled environmental conditions (temperature, humidity) as required by the calibration procedures.

QA and final test area. Where final quality assurance testing and release are performed. This area should be organized to ensure that only devices that have passed final QA are staged for shipping.

Staging and shipping area. Where released devices are prepared for return to the customer.

Record storage. Secure storage for service records, calibration certificates, and other quality records — physical or electronic — with appropriate access controls and backup.

Environmental Controls

The depot environment must support the precision of the work being performed:

• Temperature and humidity within ranges specified by the test equipment and calibration requirements
• ESD flooring and grounding for electronic device repair
• Clean bench or laminar flow hood for work on contamination-sensitive devices
• Adequate power conditioning and UPS for test equipment

Test Equipment Management

All test equipment used at the depot must be qualified and maintained:

• Equipment is identified in an asset registry with calibration status and due dates
• Calibration is performed at defined intervals using traceable standards
• Out-of-calibration equipment is taken out of service until recalibrated
• Records of calibration are maintained and accessible

Personnel Qualification and Training

Depot repair technicians must be qualified for the specific types of devices they service. Qualification requirements include:

Technical training. Device-specific training on the product's design, operation, failure modes, diagnostic procedures, repair procedures, and calibration methods. For OEM-operated depots, this is typically the OEM's internal training program. For third-party depots, training may be provided by the OEM, by third-party training organizations, or through a combination of formal training and supervised on-the-job experience.

Quality system training. Training on the depot's QMS, including document control, change control, nonconforming product handling, CAPA, complaint handling, and record-keeping requirements.

Regulatory awareness training. Training on the distinction between servicing and remanufacturing, the regulatory consequences of crossing that line, and the documentation requirements that support proper classification of activities.

Competency assessment. Periodic assessment of technician competency, including observation of repair work, review of documentation quality, and testing of technical knowledge. Competency records must be maintained.

Training documentation. Complete training records for all depot personnel, including initial training, ongoing training, and competency assessments. These records are subject to review during regulatory inspections.

Recommended Reading

Calibrators and Controls Traceability for IVD Kits

IVD & Diagnostics Manufacturing2026-05-11 · 15 min read

Customer Complaint Handling

When a customer reports a problem with a device that was recently serviced at the depot, the complaint must be handled through the depot's complaint handling process — which feeds into the OEM's medical device reporting obligations.

Complaint intake. Document the complaint details: device identification, nature of the complaint, date of the complaint, relationship to recent service, and any patient or user involvement.

Complaint evaluation. Evaluate whether the complaint represents a device malfunction that could cause or contribute to a serious injury or death (reportable under 21 CFR Part 803) or a non-serious malfunction that must be tracked in the complaint file.

Investigation. Investigate the root cause, including review of the device's service history, the specific depot work order, the technician's records, and any associated nonconformances or CAPAs.

Corrective action. If the investigation reveals a depot process issue, initiate a CAPA. If it reveals a parts issue, initiate a supplier corrective action request (SCAR). If it reveals a device design issue, escalate to the OEM's design team.

Regulatory reporting. If the complaint meets the criteria for medical device reporting, ensure that the OEM's regulatory affairs team is notified within the required reporting timeframe (30 calendar days for serious injuries, 5 work days for deaths, 30 calendar days for malfunctions that could cause or contribute to a serious injury or death).

Audit Readiness

Depot repair facilities operated by OEMs are subject to FDA inspection as part of the OEM's registered manufacturing operations. Third-party depot facilities may be inspected by the FDA if they are performing activities that constitute manufacturing or remanufacturing. Under the QMSR's new risk-based inspection approach, FDA inspectors evaluate six QMS areas, and depot operations would fall primarily under Production and Service Provision, and Measurement, Analysis, and Improvement.

To maintain audit readiness:

• Keep all SOPs current and approved
• Maintain complete training records for all personnel
• Ensure all equipment calibration is current
• Keep service records organized and accessible
• Maintain the CAPA log with current status of all open CAPAs
• Ensure that the nonconforming product process is being followed consistently
• Have internal audit records available showing periodic review of depot processes
• Be prepared to demonstrate the servicing vs. remanufacturing classification process for all repair activities

Key Takeaways

Depot repair of reusable medical device capital equipment is a quality-system-regulated activity that requires the same level of process control, documentation, and traceability as manufacturing operations. Under the QMSR and ISO 13485, depot operations must have controlled receiving, decontamination, diagnostic testing, repair, calibration, and release processes — all fully documented and performed by qualified personnel.

The FDA's servicing vs. remanufacturing framework adds urgency to proper depot QMS implementation. Every repair activity must be evaluated to ensure it remains within the servicing boundary — returning the device to OEM-established specifications — and does not cross into remanufacturing. The documentation generated by a well-structured depot QMS is the primary evidence that supports this classification.

Organizations that operate depot repair facilities — whether OEMs, third-party service providers, or hospital biomedical engineering departments — should invest in building a QMS that covers the complete depot workflow, maintains traceability at the device and component level, handles nonconformances and complaints through controlled processes, and maintains audit readiness at all times.