Share this
by Christian Reyes on August 25, 2026
When a supplier reports a problem with a material or component, how quickly can your team identify which product lots were affected, or determine whether affected product reached customers? Can you connect the issue to the appropriate supplier action, nonconformance, CAPA or change? Can you produce the evidence behind those decisions?
For regulated manufacturers, those questions make traceability both a compliance exercise and a risk-management exercise.
In the latest episode of The Compliance Lab on the QT9 Q-Cast, host Christian Reyes examines traceability requirements for compliance and dives into a practical “where-used” drill for testing whether your traceability processes close the loop.
Contents
Compliance traceability requirements increase with risk
The traceability test for compliance readiness
Five questions to score your traceability compliance readiness
What traceability testing reveals about your QMS
Put your traceability process through a compliance test
Close the traceability loop with QT9
See the full traceability test in the Compliance Lab
Compliance traceability requirements increase with risk
Traceability does not carry exactly the same requirements in every quality management system.
ISO 9001 requires organizations to use suitable means to identify outputs when necessary to ensure conformity and to control their status throughout production and service provision. When traceability is an applicable requirement, the organization must control unique identification and retain the information needed to enable that trace. Aerospace, medical device and pharmaceutical regulations place progressively greater demands on manufacturers to preserve and connect traceability information.
Today’s traceability requirements reflect the risks associated with the product, process and regulatory environment. While the regulatory details differ, the practical challenge for every industry requires businesses be able to demonstrate that their controls work when product quality is at risk.
That makes a traceability exercise useful for more than checking whether records exist. It provides a controlled way to test how effectively your QMS helps identify risk, contain it, determine its scope and drive the appropriate response.
The traceability test for compliance readiness
A traceability procedure should describe what information needs to be captured. Your organization may also retain receiving records, inspection results, supplier documentation, production records and disposition information.
The real test comes when something goes wrong. Can your team connect those records quickly enough to understand the issue and act on it?
A thorough where-used drill follows the affected material through the quality system.
“Basic traceability tells you which work order used a component,” explained Reyes. “Closed-loop traceability tells you what products were affected, which customers may be exposed, what supplier action is required, and what has to change internally.”
Test 1: Can you establish the source?
Start with the source of the potential problem. For a supplier lot, that means identifying the supplier, part or material, lot number, purchase order, receiving record and any certificates or documentation received with it.
Go beyond verifying that each record exists. Establish a reliable evidence trail that shows what entered your organization, where it came from, what documentation accompanied it and what quality controls were applied when it was received.
This is the first risk-management checkpoint. You need confidence that you have correctly identified the source before assessing potential impact. Incomplete or disconnected starting information makes decisions about scope and containment more difficult.
Test 2: Can you demonstrate containment?
Once you have identified the affected material, determine where it is now. It may still be in raw inventory, in quarantine, staged for manufacturing, work in process, incorporated into finished goods or already shipped.
The immediate objective is to prevent additional exposure while you determine the extent of the problem. Status and control should be clear enough to prevent affected material or product from continuing through the process unintentionally.
A strong containment process identifies what is affected, prevents further movement where necessary and preserves the evidence behind the action.
Test 3: Can you reconstruct what happened?
Next, move from the supplier lot into the product history. Which work orders used the material? Which batches, assemblies or serial numbers resulted? Were substitutions made? Were deviations approved? Was rework performed?
Your records should show, not only what went into the product, but also what happened to it and under what quality status or approval.
Inspection results, deviations, nonconformances, approvals and other quality records provide the context needed to understand the history of the product. That context supports a risk assessment based on the actual path of the material and the controls applied along the way.
Test 4: Can you define the actual exposure?
After identifying products associated with the material, determine their current status. What remains under your control? What is still in finished goods? What has shipped? Which customers received affected product and in what quantities?
The goal is precision. Tracing the supplier lot establishes which work orders and finished lots were involved, which product remains inside the organization and which has already reached a customer.
Documented traceability gives quality leaders a defined scope for the event and helps answer the questions that matter most during a quality event: What is at risk? Who or what may be affected? What is still within our control? What requires action now?
Test 5: Can your QMS close the loop?
Once you understand the affected material, product and exposure, determine what the QMS needs to do next. Does the issue require a supplier corrective action, nonconformance, CAPA or another quality process. Does the supplier's risk rating need to change? Should incoming inspection change? Does a specification require revision? Is additional training necessary?
The output should establish what happened, what was affected, what has been contained, what actions are required, who owns those actions and how their effectiveness will be verified.
This is what it means to close the loop on traceability. The traceability record identifies the problem's path. The QMS manages the organization's response. That response may extend across supplier quality, nonconformance, CAPA, risk management, change control, document control and training depending on the nature of the issue.
When an event reveals a failed or inadequate control, the findings should feed the quality processes responsible for addressing that failure and determining whether action was effective.
Five questions to score your traceability compliance readiness
After running the drill, evaluate the following:
-
How quickly can you establish exposure? Measure how efficiently your team can connect the source to affected inventory, production and shipments. Delays extend the time needed for containment and decision-making.
-
Can you produce complete evidence? Determine whether supplier documentation, inspection results, production information, disposition records and other relevant evidence form a continuous trace or whether the investigation reaches dead ends.
-
Can you demonstrate containment? Verify that affected material or product can be identified and controlled quickly enough to prevent further unintended use or movement.
-
Does the issue connect to the appropriate QMS processes? Determine whether the trace leads into nonconformance, CAPA, supplier corrective action, change control, training or other required quality activities.
-
Is the organization ready to make a defensible decision? Review whether the evidence is complete and clear enough for quality and leadership teams to understand the risk, determine the appropriate response and support why that decision was made?
Together, these measures show how prepared your quality system is to support containment, investigation, risk evaluation and action.
What traceability testing reveals about your QMS
A traceability drill can expose QMS weaknesses that are difficult to see during routine operations. Delays in locating records may point to disconnected quality information. Gaps in containment may reveal unclear ownership or status controls. Missing evidence may show where records or responsibilities break down during an investigation.
Those findings give quality leaders a practical view of where the QMS supports a clear, defensible response and where gaps could slow an investigation or weaken the evidence available during an audit or regulatory inspection.
Periodic testing also creates a baseline for improvement. Teams can compare results over time and verify whether changes to processes, controls or responsibilities are improving traceability readiness.
Put your traceability process through a compliance test
You do not have to wait for a supplier escape, audit finding or potential recall to discover whether your traceability controls work.
Select one supplier and one recent lot, then run a 30-minute where-used drill against the five measures above. See how quickly your team can:
-
Identify the source
-
Establish containment
-
Determine exposure
-
Assemble supporting evidence
-
Connect the findings to the appropriate quality response
The results will show where your QMS supports confident, defensible decisions and where your traceability process needs attention.
Close the traceability loop with QT9
QT9 QMS brings quality processes, such as supplier evaluations, material inspections, nonconformance, CAPA, change control, document control and training, into one quality management environment. QT9 ERP provides the operational trace at points such as purchasing, receiving, inventory, production and shipping.
Together, QT9 QMS and ERP help manufacturers follow a supplier lot through production while connecting it to the quality records and actions associated with an issue. Teams can identify affected materials and products, determine exposure, review inspection and nonconformance records and connect findings to corrective action.
This shared traceability helps manufacturers define the scope of an issue faster, support more precise containment and maintain a clearer record of how the organization responded. It also gives quality teams the evidence needed to understand the risk, determine what needs to change and verify that the appropriate actions were completed.
See the full traceability test: Watch The Compliance Lab
In the latest episode of Compliance Lab on the QT9 Q-Cast, Christian Reyes walks through traceability requirements for regulated industries, demonstrates the five-step where-used drill and explains how to score your own traceability readiness. Watch the episode and put your compliance traceability process to the test.
