Method·July 23, 2026 · 8 min read

How to monitor FDA without drowning

Four official sources cover the material risk to a device portfolio. The hard part is not finding them — it is surviving their volume.

By Connor Griggs — Regulatory & Quality Strategist

Most device companies monitor FDA the same way: a Google Alert, the RAPS newsletter, and a colleague who forwards things. It works until it doesn’t — and when it doesn’t, the miss is rarely obscure. It was sitting in one of four public, official, machine-readable sources the whole time. This post is the monitoring method we built FDA Radar around. You can run it yourself, by hand, for free; the product exists because most people who try that stop by week three.

The four sources that carry the risk

The Federal Register is where regulation actually changes — proposed and final rules, guidance availability notices, classification orders. If a requirement that binds you moved, it moved here first, with a docket number and a comment deadline attached.

Warning letters are FDA showing its enforcement hand. A letter to a competitor in your device class is not gossip; it is the agency telling you, in public, which failure it is currently looking for. Read a quarter’s letters in your space and the inspection theme is unmistakable.

Recall enforcement reports matter twice. Once for your own supply chain — components, suppliers, contract manufacturers — and once for a reason people miss: a recall on a device you cited as a predicate can bear directly on the comparison your clearance stands on.

510(k) clearances are the slow-moving map of your competitive and regulatory neighbourhood: who just got cleared in your product code, against which predicates, through which pathway. Nothing about your obligations changes when a clearance posts — but your next submission’s predicate landscape just did.

Why the naive version fails

All four sources are public. Three have official APIs. Any competent engineer can wire them into a feed in a weekend — we say this from experience, because that weekend version is roughly where every “AI regulatory intelligence” tool starts and most of them stop. The problem is volume: the 510(k) database alone publishes thousands of clearances a year, and routine Class II recall entries arrive in batches that would bury any inbox. A feed that forwards everything is a firehose pointed at the one person in the company least able to spare the time. Firehoses do not get read. They get filtered to a folder, and the folder is where the material item goes to die.

The discipline that makes monitoring work is not collection. It is refusal: deciding, explicitly and in advance, what does not deserve your attention.

Our version of that refusal is structural. Routine recall entries and the 510(k) firehose route to a searchable corpus — present, queryable, out of the way. What remains for human review is the material residue: roughly eighteen items in a typical week. That number is the entire point. Eighteen items is an amount a professional actually reads.

Running it by hand

If you run this method yourself, the weekly loop looks like this: search the Federal Register for your CFR parts and the word “device” in agency “Food and Drug Administration”; scan the quarter’s CDRH warning letters for your device class; query the enforcement report database for your product codes and your suppliers’ firm names; and check new clearances in your product codes. Keep a log of what you decided not to act on — the decision not to act is the part an auditor asks about.

The loop takes a disciplined hour a week when nothing happens, and considerably more the week something does. FDA Radar is that loop, run daily, with the join against your actual product portfolio done by identifier rather than by memory — and a human reviewer deciding what is material before anything reaches you. Either way, the method is the same. What we sell is the discipline of it, on the weeks you don’t have the hour.

Regulatory intelligence, not regulatory advice. This post describes method and published FDA records as of its date; decisions about a specific device belong with your regulatory professional.

Method
The PMA clock starts at the last module
Practice
The Q-Sub that doesn't buy you more time
Method
Lapsed and revoked end an EUA differently
Practice
A recall strategy has a grade. openFDA doesn't.
Method
A granted De Novo becomes a predicate.
Practice
Least burdensome changes the ask, not the bar.
Method
The lab is accredited. Not the device.
Practice
Breakthrough is law. STeP is a guidance.
Practice
MDSAP replaces routine. Not for-cause.
Method
No field on a 510(k) says what it treats
Method
Discretion is a policy. Exclusion is a statute.
Practice
Designated by one office. Approved by another.
Method
MedSun sits beside MAUDE, not inside it
Practice
The five-unit device never gets a K-number
Practice
Meeting the criteria isn't a tracking order
Method
The PMA clock doesn't stop at approval
Practice
The K-number doesn't track today's device
Method
A MAUDE report proves it was filed
Practice
Not every MDR starts with the manufacturer
Method
Completed. Not terminated.
Practice
The device-ban list has three entries
Method
The UDI exception has its own deadline
Method
MDUFA VI is being negotiated in public
Practice
The inspection manual changed, not the rule
Method
The count Congress had to legislate
Practice
The small-business rate isn't retroactive
Method
A detention order has no docket to read
Practice
PMA approvals moved off the Federal Register
Method
A citizen petition names names
Practice
A market withdrawal isn't a recall
Method
Not every device letter comes from CDRH
Practice
Closed on one device. Open on the rest.
Method
No IDE is confirmed until the PMA is
Practice
The remedial-action call sets the clock
Method
Jurisdiction is a letter, not a field
Practice
An address is not a footprint
Method
The final rule that isn't final yet
Practice
The special controls aren't in the record
Method
Exempt from GMP. Not from complaints.
Practice
The notify list isn't the shortage list
Method
A constraint can't be skipped. A script can.
Practice
No cron sends this. A person does.
Method
Corrected, not rewritten
Practice
Quiet is a finding, not a default
Method
The summary is public. The statement isn't.
Practice
A competitor's 513(g) leaves no trace
Practice
An empty response field proves nothing
Method
A petition is public. Its outcome isn't.
Practice
The panel is a category, not a meeting
Method
An accessory carries its own classification
Method
A TPLC report is a category, not a device
Practice
A 522 order is a question, not a verdict
Method
A PCCP change leaves no new record
Practice
Not every signal becomes a recall
Method
eSTAR did not remove the acceptance check
Practice
An early alert has no recall number yet
Practice
A consent decree isn't a database row
Method
The record has no cybersecurity field
Practice
Classification Change is not one event
Method
Publication date is not effective date
Method
One event. Many recall numbers.
Practice
Quantity is a sentence, not a number
Practice
How a firm told you is a field too
Method
A RIN outlives the document number
Method
The docket ID is not the comments
Practice
The 510(k) record doesn't name the predicate
Practice
The 510(k) FDA didn't review first
Method
The letter FDA doesn't have to post
Practice
Cleared doesn't say which track it took
Method
The clock stops. The calendar doesn't.
Method
Why a guessed match never reaches you
Practice
The standards list never names a device
Method
The guidance isn't in the Federal Register.
Practice
Filtered. Not discarded.
Method
There are two recall databases, not one
Practice
Breakthrough status is confidential by law
Practice
One MAUDE report is not one malfunction
Method
A supplement number is not a track
Method
Cleared is not approved
Practice
Nationwide doesn't mean your building
Practice
Not every correction reaches FDA
Method
Registered. Not reviewed.
Method
Contact ODE is not a pathway
Practice
Almost no recall is FDA-mandated
Method
FDA's device names read like a card catalog
Practice
openFDA is free. It is not unlimited.
Method
GUDID stores the model. Not the box.
Practice
Detention doesn't need a warning letter
Method
A Class I device, a Class I recall
Practice
21 CFR 820 didn't move. Its contents did.
Method
The product code that doesn't exist yet
Practice
The classification posts. The 483 behind it doesn't.
Method
A recall has three dates, and the pipeline had to pick one
Practice
The count is real. The rate is not.
Method
The firm on the record is not the firm on the box
Practice
Low confidence is an instruction, not a hedge
Method
The same company, spelled three ways
Practice
A device that was never a medical device
Method
FDA's warning letters, addressed by column number
Practice
Your regulation has a decimal. FDA's watch doesn't.
Method
Three letters is too short to search for
Practice
Most warning letters never close
Method
The guidance that skipped the draft
Practice
Ongoing, as of when?
Method
The least interesting fact in a 510(k)
Practice
No recall arrives with a product code attached
Practice
The deadline that doesn't email you
Method
The warning letter has two dates
Practice
Your predicate was recalled. Now what?
Method
Why no item reaches you without a human