Resources / Industries
Medical Device Kitting: FDA Rules, UDI, and Lot Traceability
Medical device kitting puts kit assemblers under FDA device rules. Learn what the QMSR and UDI rules require for kits and how to trace every component lot.
7 min read
· Updated
November 2026
At a glance
The definition
Medical device kitting assembles two or more devices, sometimes with drugs, into one labeled kit or procedure tray. FDA treats the kit assembler as a device manufacturer.
The rules
Kit assemblers register and list with FDA, follow the QMSR in effect since February 2, 2026, and generally put a UDI on the kit label.
Where automation fits
Warehouse-side work fits automation first: picking components, verifying lots, and building non-sterile kits. Sterile tray assembly needs automation validated for a controlled environment.
Medical device kitting is the assembly of two or more medical devices, sometimes with drugs or other products, into a single labeled kit, such as a procedure tray or convenience kit. In the U.S., the kit assembler counts as a device manufacturer: it registers with FDA, follows the QMSR, and generally labels each kit with its own UDI.
A procedure kit can hold a dozen components from a dozen suppliers, each with its own lot number and expiration date. When one of them is recalled, you need to know quickly which finished kits contain it and where they went. When an FDA investigator visits, you need to show that every kit was built, labeled, and released under a controlled process.
This guide explains the U.S. regulatory context for medical device kitting: who counts as a manufacturer, how FDA's Quality Management System Regulation (QMSR) and Unique Device Identification (UDI) rules apply to kits, lot traceability, and sterile versus non-sterile kitting. It closes with where automation fits. For kits built around drug products, see pharmaceutical kitting automation. For unregulated kits, see the kitting services guide. This is general information, so confirm your obligations with your regulatory team.
Who counts as the manufacturer in medical device kitting?
Under FDA's device quality rule, a manufacturer is any person who designs, manufactures, fabricates, assembles, or processes a finished device, including firms that relabel or repack devices. Assembling devices into a kit puts you in that group. FDA's registration rules say so directly: manufacturers, including kit assemblers, must register their establishments and list their devices, as must contract manufacturers, contract packagers, repackagers, and relabelers.
Pure distribution is different. The same FDA page says domestic distributors that do not import devices are not required to register. A warehouse that only stores and ships finished, labeled kits is in a different position from one that opens cartons and builds kits. If a provider will assemble or label your kits, confirm it is registered for that activity and works under a quality system.
Premarket review for kits
A kit is a device in its own right. Under FDA's convenience kits guidance, FDA uses enforcement discretion and generally does not require a 510(k) for kits of listed types that contain only legally marketed components bought in finished form, as long as any further processing does not significantly affect their safety or effectiveness. Registration, listing, labeling rules, and good manufacturing practices still apply.
What the QMSR means for kit assembly
FDA's Quality Management System Regulation took effect on February 2, 2026. It amended 21 CFR Part 820 and incorporates ISO 13485:2016 by reference, so a kit assembler's quality system is now judged largely against that standard, plus FDA-specific requirements in Part 820. For kitting, the parts that matter most are:
Labeling and packaging controls. Section 820.45 requires procedures for the integrity, inspection, storage, and handling of labeling and packaging, a documented check that labels are accurate, including the UDI and expiration date, and controls that prevent mixups.
UDI system. Section 820.10 requires a documented system for assigning unique device identifiers.
Traceability. Your procedures must follow FDA's device tracking rules (Part 821) where they apply, and devices that support or sustain life must meet ISO 13485's traceability requirements for implantable devices.
Supplier control. Your kit is only as good as each component, so keep records of how you qualify and monitor every component supplier.
SKU fit check
Send an email to
UDI rules for convenience kits
FDA's labeling rules define a convenience kit as two or more different medical devices packaged together for the convenience of the user. The kit label generally needs its own UDI, in easily readable plain text and in an automatic identification and data capture (AIDC) format such as a barcode. A device packaged within the immediate container of a convenience kit is excepted from its own UDI labeling, provided the kit label bears a UDI.
A UDI has a fixed device identifier and a production identifier. Whenever the label shows a lot or batch number, serial number, expiration date, or manufacturing date, the UDI generally has to carry it as the production identifier. For a kit, that means the kit lot and kit expiration date you assign, not the values of the components.
Lot traceability from component to kit
Traceability in kitting runs in two directions. Backward, every kit lot has to tie to the lot of each component inside it. Forward, every kit lot has to tie to the customers who received it. Without both, one component recall forces you to quarantine far more kits than necessary.
Capture component lots at the build. Scan each component as it is picked for a kit run and record its lot and expiry against the kit lot. See inventory accuracy for why scan-based records beat manual ones.
Support the kit expiration date. Set it no later than the earliest-expiring component, and have shelf-life data for components that carry no date.
Keep distribution records by lot. Record which kit lots shipped to which customers, so a recall can be scoped by lot rather than by product line.
Run mock recalls. Pick a component lot and time how long it takes to find every affected kit and shipment.
Fit call
Send an email to
Sterile versus non-sterile kits
A kit labeled sterile has to be sterile as a finished unit, which can mean it is assembled, sealed, and then sterilized as a kit. That makes the assembly environment, the package seal, and the sterilization process part of what you control. FDA's convenience kits guidance notes that sterilization can affect some components, such as sutures, and expects assemblers to make sure components are not adversely affected.
A 2020 FDA warning letter to a convenience kit maker shows how this goes wrong. FDA found that the firm opened the original packaging of sterile devices, repacked needles into kits in an environment that was not adequately controlled, and had not defined limits for nonviable particulates in that area. The kits were then sterilized, and FDA warned that repeated sterilization of finished device components may significantly affect their safety and effectiveness. FDA also cited kits labeled with an expiration date without an assessment of the performance shelf life of devices inside. The letter was issued under the prior Quality System regulation.
Non-sterile kits are not labeled sterile as a whole, though they may contain components in their own sterile packaging. The job there is to keep every sealed package intact: no opening, no punctures, no crushing. Whether the work needs a controlled environment depends on your risk assessment and the components, but these are still device kits with the same registration, QMSR, labeling, and UDI obligations.
Kits with drugs, such as a local anesthetic or an antiseptic, are combination products. The same warning letter called kits containing a drug combination products under 21 CFR 3.2(e)(2), and FDA's convenience kits guidance says its kit policy does not change drug requirements, so plan for both sets of rules.
Site walkthrough
Send an email to
Where automation fits in medical device kitting
Any automated step that affects the kit, its label, or its records becomes part of your controlled process, so plan time for qualification and validation on top of installation. The work splits into three zones:
Warehouse side. Receiving, lot capture, putaway, and moving or picking components to kitting stations. Mobile robots, robotic picking, and scan-based verification fit here first, because components are still in sealed, labeled packaging.
Non-sterile kit assembly. Placing sealed components into kit boxes, adding instructions for use, and labeling. Robot arms, vision checks against the bill of materials, check weighing, and print-and-verify labeling all fit. See robotic kitting systems.
Sterile tray assembly. Work inside a controlled environment, often with open components. High-volume, stable trays can justify dedicated tray loading and sealing equipment, while low-volume, high-mix trays may not justify automation at all. Any equipment that enters the space has to meet its particulate and cleaning requirements.
Where Avatar fits
Avatar's robots pick, pack, and kit in your existing racks, shelving, and bins, and Avatar serves pharma and beauty operations on Robots-as-a-Service: Avatar brings the hardware, and you pay for output instead of buying robots. That matches the warehouse side of medical device kitting: moving and picking components to stations and building kits from sealed, labeled components. Any automated step still has to be validated inside your quality system, and sterile tray assembly in a cleanroom calls for dedicated, validated equipment or manual cells. See where Avatar works on the Avatar solutions page.
Frequently Asked Questions
What is medical device kitting?
Medical device kitting is the assembly of two or more medical devices, sometimes with drugs, into a single labeled kit, such as a procedure tray or convenience kit. FDA treats the kit assembler as a device manufacturer, so the work falls under device registration and listing, the QMSR, and labeling and UDI rules.
Does a convenience kit need a 510(k)?
Not always. Under FDA's convenience kits guidance, FDA generally does not require a 510(k) for kits of listed types that contain only legally marketed components bought in finished form, if further processing does not significantly affect them. Kits outside those conditions may need premarket review, and registration, listing, and good manufacturing practices apply either way.
Does each device in a kit need its own UDI?
Not necessarily. FDA's UDI rule excepts a device packaged within the immediate container of a convenience kit, provided the kit's own label bears a UDI. The kit's UDI carries the kit's lot and expiration date, so your records must link that kit lot to every component lot inside it.
Can a 3PL do medical device kitting?
Yes, if it operates as a device kit assembler: registered and listed with FDA, working under a quality system that meets the QMSR, and controlling labeling and UDI. FDA does not require domestic distributors that do not import devices to register, so a provider that only stores and ships finished kits is in a different position. Ask any provider which activities it is registered for before it builds kits for you.
Sources
1. U.S. Food and Drug Administration (2026). Quality Management System Regulation (QMSR). U.S. Department of Health and Human Services.
2. Electronic Code of Federal Regulations (2026). 21 CFR Part 820: Quality Management System Regulation (sections 820.1, 820.3, 820.10, 820.45). Office of the Federal Register.
3. Electronic Code of Federal Regulations (2026). 21 CFR Part 801: Labeling, Subpart B: Labeling Requirements for Unique Device Identification (sections 801.3, 801.20, 801.30, 801.40). Office of the Federal Register.
4. U.S. Food and Drug Administration (n.d.). Who Must Register, List and Pay the Fee (medical device establishments). U.S. Department of Health and Human Services.
5. U.S. Food and Drug Administration (1997). Convenience Kits Interim Regulatory Guidance. Center for Devices and Radiological Health.
6. U.S. Food and Drug Administration (2020). Warning Letter: Centurion Medical Products Corporation, MARCS-CMS 598837 (June 11, 2020). U.S. Department of Health and Human Services.
Keep Reading
Industries
Pharmaceutical Kitting Automation
Pharmaceutical kitting automation only works if every kit traces to its component lots and serials. See where it fits, what to verify, and how to pilot it.
5 min read
Read guide →
Kitting
Kitting Services
What kitting services include, when brands outsource warehouse kitting to a 3PL, how providers price and run kit builds, and what to put in your kit spec.
5 min read
Read guide →
Kitting
Robotic Kitting Systems
Robotic kitting systems compared: fixed lines, robot cells, cobot stations, and mobile manipulators, judged on changeovers, BOM handling, and verification.
5 min read
Read guide →
Ready To Scale Your
Workforce?
Tell us your hardest jobs. We’ll show you what an Avatar robot can do on day one.
