A repeat order reaches receiving under the same commercial model name as the approved sample. The cartons look familiar, yet the battery code has changed, the mouthpiece drawing carries a later revision, and the release report never identifies the configuration inspected. Procurement sees a reorder. Quality sees an unresolved approval trail.
A supplier quality agreement gives that trail an operating structure. For empty 510 cartridges and disposable AIO hardware, it connects the controlled product baseline to named responsibilities, evidence, approval authority, and escalation states throughout repeat production.
This guide assumes that supplier selection is complete. It focuses on post-award order execution and buyer–supplier interfaces. It provides an operational drafting framework; legal terms, market obligations, acceptance criteria, and response periods require review for the actual product, jurisdiction, and organizations involved.
Define the governed relationship
Begin with the entities, sites, products, revisions, and activities covered by the agreement.
A phrase such as “approved 2 ml AIO” leaves too much open. A governed baseline may include supplier model, buyer SKU, drawing revision, controlled material information, reservoir configuration, heating element, resistance range, intake geometry, seal system, battery identity, activation behavior, exterior finish, artwork, packaging, and authorized manufacturing site.
The parties may hold different parts of that information. The agreement can identify the controlling document and responsible owner without forcing every technical value into one master file.
Supplier capability belongs to the earlier qualification decision. The vape hardware supplier qualification checklist covers that stage. Here, the agreement preserves control after award through orders, changes, release records, and problems.
A workable scope statement identifies:
- legal entities and manufacturing locations;
- covered products, revisions, and order types;
- activities owned by the buyer, supplier, or another party;
- controlled documents incorporated by reference;
- exclusions requiring a separate agreement or approval.
The agreement may sit as an exhibit to a supply agreement, an incorporated quality schedule, or a separate controlled document. Counsel and authorized commercial functions should determine its legal placement.
Establish a requirements hierarchy
A drawing, PO, approved sample, artwork proof, and inspection instruction can all describe the same program. The hierarchy explains which source governs each type of requirement and how conflicts are resolved.
Maintain a requirements register with the following fields:
| Controlled source | Governs | Owner / approver | Revision evidence | Conflict route |
|---|---|---|---|---|
| Purchase order | Quantity, commercial reference, requested delivery | Authorized purchasing functions | PO number and revision | Commercial clarification |
| Product drawing or specification | Named technical characteristics | Authorized technical/quality functions | Document ID, revision, effective date | Technical impact review |
| Approved artwork proof | Print content and placement | Brand and authorized supplier function | Signed proof and revision | Artwork approval route |
| Inspection instruction | Method and decision criteria | Responsible quality function | Method ID and revision | Quality review |
| Approved deviation | Limited departure for named scope | Defined disposition authority | Deviation ID, scope, expiry | Reapproval or closure |
This register prevents an email or image from quietly becoming the newest “specification.” It also exposes dependent records when one requirement changes.
Assign activity, evidence, and decision authority
A responsibility matrix becomes operational when every activity has an expected output and a defined decision owner.
| Activity | Supplier responsibility | Buyer responsibility | Evidence and authority |
|---|---|---|---|
| Configuration approval | Provide controlled configuration and identified sample | Complete program-specific review and record disposition | Approved revision; authorized approver |
| Production control | Build to the approved route and preserve lot identity | Communicate current controlled requirements | Lot record or equivalent trace |
| Inspection and supplier release | Perform agreed checks and issue lot-linked results | Define or approve applicable requirements | Method/result record; supplier release authority |
| Change proposal | Identify the proposed difference, reason, timing, and affected inventory | Assign impact review and approve, reject, or request evidence | Change record; named approval authority |
| Nonconforming output | Identify, segregate, contain, and communicate scope | Control buyer-held inventory and disposition | Nonconformance/containment records |
| Recurrence response | Investigate assigned causes and implement accepted actions | Review adequacy and effectiveness evidence | Corrective-action record; closure authority |
| Shipment and receipt | Provide the agreed shipment record package | Preserve buyer receiving/release authority | Supplier release and buyer disposition remain separate |
This matrix governs post-award execution. Initial factory audits, sourcing comparisons, and supplier selection remain in the qualification process.
Multi-party supply chains need the same clarity. When an exporter manages the order and a separate site manufactures the hardware, identify the entity controlling the design, the holder of production records, and the contact authorized to commit to changes and corrective actions.
FDA quality-agreement guidance for contract drug manufacturing under CGMP offers a general analogy for documenting responsibility boundaries in this empty-hardware context. ISO process guidance also supports clear ownership, interfaces, controls, monitoring, and records as management-system practices.
Route change triggers to the dedicated change process
The agreement should name the types of events that require disclosure and impact review. Useful categories include:
- fluid-contact and structural items: materials, seals, adhesives, surface treatments, reservoir, airway, intake, heating element;
- electrical items: resistance, battery cell, protection circuit, charge interface, firmware, or activation behavior;
- process and source items: tool, cavity, assembly route, test method, manufacturing site, or critical sub-tier component supplier;
- presentation items: finish, artwork, label, package, or supplied accessory;
- record and order items: controlled-document revision or a proposed departure for a named lot.
For each trigger, define the information required to open review, the responsible recipient, and the authority that records disposition. The detailed workflow belongs in the dedicated vape hardware change-control procedure. The quality agreement owns the interface: disclosure before implementation where required, identifiable affected inventory, and an approval record tied to the effective configuration and first applicable lot.
Notice timing should allow the assigned review to occur before the change reaches protected production or shipment stages. The actual period depends on the program and the evidence required.
Specify the lot-record handoff
Each shipment should be traceable to the configuration the supplier released. The agreement can define which records precede shipment, accompany it, or remain retrievable.
A program-specific package may identify:
- PO and supplier order reference;
- model, buyer SKU, and approved revision;
- manufacturing site and lot or batch;
- production and inspection dates;
- quantity and packaging identity;
- supplier inspection and release result;
- approved deviation or change references;
- first lot affected by an approved change;
- any shipment records required for the actual configuration and route.
The agreement should also define the controlled transfer medium: an approved portal, controlled repository, traceable email route, or another system that preserves identity and revision. An unverified screenshot in a messaging thread provides weak release evidence because its source, completeness, and revision are difficult to establish.
Supplier release and buyer disposition remain separate decisions. Where an AQL sampling plan for empty vape hardware defines how a sample supports lot acceptance, the quality agreement defines the owners and authorities who act on its result.
Define authority for deviations and nonconforming output
The agreement needs interfaces among these processes without recreating each procedure.
For a proposed departure, identify who can request review, the exact product/lot and time limit covered, the evidence required, and the authority permitted to approve it. For detected nonconformance, define identification, segregation, notification, containment ownership, and disposition authority. The recurrence-response row in the responsibility matrix points recurring, systemic, uncertain, or high-consequence events to the organization’s separate supplier corrective-action route.
Any concession or deviation decision must remain within applicable requirements and the organization’s authorized safety, compliance, and risk controls. The record should preserve what requirement was affected, who decided, what inventory was covered, and whether follow-up evidence is still open.
This interface prevents a commercial promise from releasing held material and prevents additional passing samples from silently replacing an initial failing result.
Make escalation change the operating state
An escalation label gains value when it changes what work may continue.
- Monitor: evidence is being reviewed while normal controls remain appropriate.
- Conditional: named additional evidence, inspection, or approval is required.
- Hold: identified inventory cannot move pending authorized disposition.
- Restricted: approval is limited to specified products, lots, sites, or order types.
- Suspended: new production or release under the affected scope stops.
- Restart review: listed evidence must be accepted before status changes.
For every state, document who can assign it, affected scope, treatment of open orders, notification route, and exit authority. Restart evidence may include containment completion, corrected records, an approved process change, repeat inspection, a new first article, effectiveness evidence, or a focused audit. The required set should match the actual failure and uncertainty.
Run a fictional reorder through the agreement
Consider a fictional rechargeable 2 ml draw-activated AIO program. The controlled baseline identifies the reservoir, seal system, heating element, resistance range, battery, charge interface, artwork, and factory site.
Before repeat production, the supplier reports that the approved battery is unavailable and proposes another cell. The agreement directs the event to a known route:
- The supplier identifies the proposed cell, reason, affected product, inventory status, and earliest applicable lot.
- The buyer assigns the impact review and required evidence.
- Old and proposed configurations remain separately identifiable.
- Authorized functions record the disposition.
- An approved change identifies the effective revision and first lot.
- Supplier release records reference the accepted configuration.
- Receiving compares the delivered identity with the approved change record.
The evidence determines whether the proposal is acceptable. The agreement makes that determination reconstructable.
Audit the agreement from a delivered unit
Select one delivered carton and follow it backward. A qualified reviewer should be able to locate:
- supplier, factory, model, revision, and lot;
- controlled requirements in effect;
- supplier release evidence;
- approved changes and deviations;
- decision owners and authorities;
- buyer receipt, acceptance, or hold state;
- open nonconformance or corrective-action records;
- requirements carried into the next reorder.
A dependency on one employee’s inbox signals a control gap.
Review the agreement when its operating context changes—for example, product scope, manufacturing site, order pattern, responsible organization, critical source, or linked procedure. Routine cadence can reflect order volume, change frequency, performance history, and program risk rather than a copied universal interval.
When procurement is choosing its next route, stocked bulk disposable vapes are the first option for ready inventory and direct online purchasing. Factory, OEM, or white-label programs can instead review empty disposable pen hardware for samples and customization. Whichever route applies, defining the product baseline and governance interfaces during technical discussions can reduce ambiguity before repeat production. The brand retains responsibility for formulation compatibility, market-specific compliance, and release decisions.
A durable supplier quality agreement lets another qualified person reconstruct the approved configuration, the responsibility boundary, the evidence trail, and the reason a lot moved or stopped. That is the practical test of the document.
