When a Medical Device Includes a Formulation, Two Data Models Are Not Enough

Table of Contents
5
min read

A product that combines a device with a drug, biologic or other regulated constituent part is not simply two products in one package. Its performance and quality can depend on relationships across domains.

A material, coating, adhesive, polymer, container closure, formulation component or manufacturing condition may influence both the device and the constituent product. A change may require engineering assessment, analytical testing, stability/compatibility evidence, supplier review, manufacturing evaluation, risk analysis and quality-system action.

FDA's combination-product CGMP guidance explains the final rule codified in 21 CFR Part 4. The rule addresses current good manufacturing practice requirements and post-market safety reporting for combination products, including products composed of two or more regulated components.

The exact requirements depend on the product and its primary mode of action, constituent parts and markets. The operational challenge is broader: the relevant evidence must be connected enough for teams to assess a product lifecycle decision coherently.

Separate systems are normal. Separate evidence is the problem.

Device teams may work in requirements-management, PLM, CAD, test and QMS systems. Drug or formulation teams may use ELNs, LIMS, analytical systems, batch records, stability systems and quality platforms. Manufacturing and supplier-quality functions add further systems.

There is nothing inherently wrong with this specialist landscape. Each system may be appropriate for its domain.

The issue arises when a user cannot answer cross-domain questions: which product configurations use a given material or coating formulation, which risk controls and verification reports are affected by a change in supplier or process, which analytical, compatibility or stability studies apply to the current configuration, what manufacturing lots, quality events or customer complaints are associated with the affected component, and what was approved previously, and under what conditions.

The Connected Combination-Product Record

The point is not to force a formulation study into a device-design template, or a device verification report into a pharmaceutical batch record. It is to preserve each record's appropriate context while making relevant relationships visible.

An engineer and quality reviewer examining a drug-device combination product together, representing the cross-domain evidence these products require.

Change control reveals whether the data model works

Consider a proposed change to a material, coating, adhesive or supplier. A complete impact assessment may need to identify the affected device configurations and markets, the design inputs and outputs involving the component, the hazards, risk controls and residual-risk decisions at stake, the verification and validation evidence generated using the current material or process, the relevant supplier, lot, manufacturing and process context, any analytical, compatibility, stability or delivery-performance evidence, related deviations, CAPAs, complaints and post-market signals, and the approval, implementation and post-change monitoring the change requires.

If this information must be assembled from disconnected folders and interviews, the organisation has a change-impact problem. The risk is not simply delay. It is that an important relationship will be missed.

Treat materials as lifecycle objects

For combination products, a material is rarely just a bill-of-materials line. It may carry relationships to the product configuration and design outputs it belongs to, its supplier, site, grade and lot identity, its material specifications and certificates, any biocompatibility, compatibility or extractables/leachables evidence where relevant, drug or product stability and delivery performance, the manufacturing process parameters that shaped it, quality events and supplier changes, and the risk controls and verification results tied to it.

A connected record makes the scope of these relationships visible before a decision is made.

Keep risk management connected to evidence

ISO 14971:2019 describes a systematic risk-management framework for medical devices that includes identifying hazards, estimating and evaluating associated risks, controlling risks and monitoring the effectiveness of controls throughout the device lifecycle.

Risk records should not become isolated matrices. When a material, device configuration, formulation or process changes, teams need to find the risk controls and evidence that may be affected. Likewise, a complaint, nonconformance or new supplier signal may require reassessment of controls and their supporting evidence.

Start with one cross-domain use case

Do not begin by trying to unify every device and formulation system. Choose one workflow that repeatedly crosses the boundary, whether that is material or supplier change control, compatibility or stability evidence management, complaint-to-risk-control investigation, transfer of a combination product to a new manufacturing site, or configuration-specific verification and validation traceability.

Define the objects, identifiers, authoritative sources and evidence links needed to answer that question. Then use the live workflow to test and improve the model.

The goal is usable evidence

A connected architecture does not make a product less complex. It makes the complexity more manageable. Teams can preserve specialist data where it belongs while connecting the evidence that determines product safety, quality, performance and lifecycle decisions.

That is what combination-product organisations need: not one data model for every discipline, but a governed way to connect the models that shape the same product.

FAQs

Why are combination products an "evidence-boundary problem"?

A product combining a device with a drug, biologic or other regulated constituent part isn't simply two products in one package. A material, coating, adhesive or manufacturing condition can influence both the device and the constituent product, so a single change may require engineering assessment, analytical testing, stability evidence, supplier review and quality-system action all at once.

What does FDA's combination-product CGMP rule cover?

FDA's combination-product CGMP guidance explains the final rule codified in 21 CFR Part 4, which addresses current good manufacturing practice requirements and post-market safety reporting for combination products, including products composed of two or more regulated components.

Why does a change to a material or supplier reveal whether a combination-product data model works?

A complete impact assessment for a material, coating or supplier change needs to identify affected device configurations, design inputs/outputs, risk controls, verification and validation evidence, supplier and lot context, compatibility or stability evidence, and related complaints or CAPAs. If that has to be assembled from disconnected folders and interviews, an important relationship is likely to get missed, not just delayed.

How does ISO 14971 risk management connect to combination-product data?

ISO 14971:2019 describes a systematic risk-management framework covering hazard identification, risk estimation and evaluation, risk control and monitoring effectiveness throughout the device lifecycle. Risk records shouldn't become isolated matrices: when a material, configuration or process changes, teams need to find the risk controls and evidence that may be affected, and a complaint or new supplier signal may require reassessing those same controls.