Medical Supplies Distribution: Compliance Playbook

Clinics, ASCs, long-term care, and home-health agencies buy gloves, dressings, instruments, and devices on a schedule that does not care about your cash flow. They will leave for a 2% save only after you fail a documentation request or stock out a critical SKU. This is not a “hustle” vertical. It is a controlled warehouse with invoices attached. US-first: FDA device registration and listing, UDI on applicable devices, and DSCSA the moment your catalog becomes drug-adjacent (even “just a few” OTC or wholesale drug items).

Directional margins on clean medical consumables often sit 18–28% before GPO fees, dating write-offs, and the unpaid labor of a hospital vendor packet. A 32% invoice that requires you to hold six months of a slow sterile SKU can print 12% after expiry. Model dating like a food distributor, because the dumpster does not care that the box said “medical.”

If you distribute devices, understand whether you must register as an establishment and how listing works for the SKUs you hold. UDI is how those devices are identified in the supply chain — your receiving and pick processes should capture the identifiers the buyer’s system expects, not a marketing description. If you add drugs or certain wholesale drug activities, DSCSA traceability is not “pharma’s problem.” Hybrid catalogs are how distributors accidentally become in-scope.

Write SOPs for receiving, quarantine, storage conditions (temperature, humidity, segregation of sterile vs dirty returns), lot/serial capture, recall, and complaint handling before you chase an IDN contract. A complaint is a record, not a Slack message. Mock a recall: one UDI or lot, list of invoices, hours not days. If your ERP cannot do that, do not bid the hospital. FDA’s DSCSA page and the UDI basics page above are the citations your quality binder should open to — not a vendor one-pager.

Formulary: 95 SKUs (gloves, gauze, syringes, table paper, a short instrument list). Opening inventory: $110,000, heavily weighted to A-movers with 4–6 weeks of cover — not a “full surgical” vanity aisle. Terms: many clinics pay Net 30–45; your better suppliers want Net 20. Fund the gap. Month-6: $140,000 sales, 24% gross ($33,600), 1.1% dating write-off ($1,540), $6,200 delivery, $4,000 quality/admin (COAs, vendor packets). Contribution about $21,900 before occupancy.

Add six “opportunity” implant-adjacent gadgets without UDI discipline and a hospital RFP you cannot document, and you will spend the quality hours you needed for the glove contract. The winning move is a boring formulary with 99% fill on the 30 items that stop a clinic day, plus a substitution SOP the clinician already approved.

Institutional onboarding wants W-9, COI, licenses, recall SOP, diversity forms, and often EDI (850/856/810) before the first PO. Start the packet while inventory is still conservative. A $14,000 GPO “win” that pays in 70 days and takes a 3% admin fee is a working-capital product. Price it that way. If you cannot fund it, stay with independent clinics that pay in 21 days and buy your formulary as written.

Substitution rules belong in the packet. The buyer who accepts a glove equivalent in writing is a partner. The buyer who expects you to eat a refusal after the truck left is a chargeback machine. Put the rule on the quote.

Segment locations by condition and by risk: sterile, dated, ambient, customer-owned if you ever do consignment (avoid consignment until the SOP is real). Cycle-count dated product weekly, not “when we get to it.” A six-month sterile SKU with a 14-month expiry is a different animal from gloves. FEFO again. The industry word is “expiration management.” The warehouse word is “do not bury the short date behind the tall pallet.”

Do not add a few Rx-adjacent SKUs because a clinic asked once. That is how DSCSA and state wholesale-drug licenses enter a company that was a glove jobber last quarter. If you want that business, staff it as its own quality system. FDA establishment registration plus drug-supply rules are not a weekend project.

The 95-SKU clinic formulary needs locations an auditor can walk without a tour guide. Sterile stays sterile — not on the same pallet jack path as dirty returns. Dated product gets a short-face ordered by expiry; gloves can live deeper if the date is long. Quarantine at receiving: no UDI or lot when the SKU requires it, no COA when the packet requires it, no put-away. Complaints and recalled lots get a locked hold with a record, not a Slack pin. Customer-owned consignment — if you ever allow it — is a labeled location cycle-count does not treat as yours. Mixing those five is how a mock recall takes a weekend and how a clinic finds expired table paper behind a tall pallet.

Returns from clinics are not a gaylord. Opened sterile is destroy-or-vendor-instruction, not restock. Temperature-controlled SKUs (if you add them) need a logged location, not “the office is air-conditioned.” Stage by clinic stop after you stage by date and condition. The $110,000 opening book only stays a 1.1% dating write-off if the picker sees the short date first. FEFO is the warehouse word. “Expiration management” is what you write in the packet so materials managers believe you.

Keep a complaint clipboard on the quarantine cage: date, clinic, UDI or lot, what they said, who owns the next step. If that record only lives in email, the mock recall will miss a box that already left as a “maybe we’ll credit.” The cage plus the clipboard is the quality system a 95-SKU formulary can actually run.

Month-6 sales of $140,000 at 24% is $33,600 gross. If independent clinics pay in 21 days, you can live. If half your book becomes a GPO that pays in 70 with a 3% admin fee, you just added ~$70,000 of float on a monthly run-rate and cut $4,200 off gross — before the $6,200 delivery and $4,000 quality labor. Start independents on a small limit after a completed packet (W-9, COI, licenses). Start GPOs only when you can fund the DSO and the fill clause. Do not ship a hospital trial on Net 60 because the RFP felt like a win. That trial is a working-capital product.

Age by account class. A practice at 18 days and an IDN at 62 are not one “medical AR” number. Hold clinics at 30 days past terms; they still have a private-pay drawer. IDNs need a named AP contact and a shortage rule in the packet, or every short box becomes a 90-day argument. Quality/admin hours are part of cost-to-serve. If a clinic needs a new COI and a diversity form every quarter, price the labor or drop them. Credit that ignores the packet is how a clean formulary still starves payroll.

On the $140,000 month, 21-day clinics need about $98,000 of AR. Flip half to 70-day GPO terms and you need closer to $160,000 before you buy the next glove load. That gap is why the packet is a credit decision, not a sales trophy.

Lead with fill on the 30 SKUs that stop a clinic day, the substitution list they already signed, and how fast a lot or UDI list prints. Bring the recall SOP, storage log sample, and COI — not a branded tote. Ask when they last stocked out of gloves or syringes and who they called at 6:40 a.m. Write it down. Your offer is 99% fill on those 30 plus a human after hours, not a 2% save they will leave you for after the first documentation miss. If they want six implant-adjacent gadgets with no UDI discipline, put them on a separate quote with a longer lead and a documentation rider, or decline.

When they ask you to add “a few” OTC or wholesale-looking drugs to the glove order, say that is a different license and a different quality system — DSCSA and state wholesale-drug rules are not a line-item. When they refuse a substitution after the truck left, point at the packet. When a GPO win wants EDI next month, ask whether 850/856/810 is a gate and price the implementation before you celebrate. Practice those three. Clinics will trade a nickel after you fail a file. Do not fail the file to win the nickel.

They bid an IDN with a weekend SOP and a spreadsheet that cannot print a lot list in hours. They add drug-adjacent SKUs because one clinic asked once. They hold six months of a slow sterile SKU and print 12% after expiry on a 32% invoice. They win a GPO they cannot fund. They store returns next to sterile. They treat a complaint as a Slack message. Any of those gets you walked out of a vendor review. The 18-clinic formulary that contributes ~$21,900 before occupancy is boring on purpose. Boring is bid-ready.

A slower walk-out is starving the glove contract to chase gadgets. Another is a dual catalog — devices plus a little wholesale drug — with one quality owner who also runs the route. Staff the drug side as its own system or do not take it. Another is promising 99% fill without safety stock on the 30 clinic-stoppers. Materials managers remember the morning you were out of syringes. They do not remember your tote.

Write receiving, quarantine, storage, complaint, and recall on paper and run a mock with a real lot. If the list of invoices prints the same day, you may only need barcode capture of UDI or lot at receiving and pick. If the mock needs a weekend and three CSVs, buy the capture and the recall print — not a hospital-sales CRM. EDI comes when a named IDN or GPO makes 850/856/810 a gate. Temperature logging comes when the SKU and the packet require it. Do not buy a “healthcare experience platform” to replace a quality binder that already works.

Skip consignment modules until the SOP for customer-owned is real. Skip DSCSA software until counsel says you are in-scope — then staff it as a project, not a checkbox on a glove WMS. Implement identifier capture and hold locations first, expiry second, EDI third. If a vendor cannot show a UDI-to-invoice list in a demo of your SKU file, keep walking. Institutional buyers purchase your ability to produce a file. Buy that ability when paper breaks, not when a booth is busy.

Worked recall clock: 2,400 boxes of nitrile, three lots. First mock, lot B, spreadsheet: 14 hours to name the clinics. After UDI/lot at receiving and pick: 3.2 hours and a printout. The $6,800 expiry write-off that usually sits next to that story is a FEFO miss on a different SKU — short dates buried behind a tall pallet. Fourteen hours loses the IDN packet. $6,800 loses the month’s quality budget. Capture and short-face beat a new CRM. Run the mock quarterly and time it. If it grows, your locations drifted — fix the floor before you shop software again.