Method·September 9, 2026 · 4 min read

MedSun sits beside MAUDE, not inside it

MAUDE is the adverse-event database every device monitor reads. MedSun is a second, older CDRH network of roughly 300 hospitals and clinics reporting the close calls MAUDE's mandatory threshold was never built to catch.

By Connor Griggs — Regulatory & Quality Strategist

Ask an RA operator where to check a device’s adverse-event history and the answer is MAUDE, almost by reflex. It is the right first answer. It is not the only database CDRH runs for this purpose, and the second one is built to catch precisely what MAUDE’s own reporting rule was never designed to reach.

A threshold, and what falls under it

21 CFR Part 803 sets the mandatory-reporting duty that eventually populates MAUDE: a manufacturer or user facility must report a device that may have caused or contributed to a death or serious injury, or that malfunctioned in a way that would be likely to cause or contribute to one if it recurred. That is a real, defined threshold, and crossing it is what makes a report reportable at all. Everything below that line — a device that behaved strangely but harmed no one, a workaround a nurse found before it mattered, a near-miss caught at the bedside — has no obligation attached to it and, absent something else, no reason to become a MAUDE record.

MedSun— the Medical Product Safety Network — is CDRH’s answer to that gap. Launched in 2002, it asks participating facilities a broader question than 803 does: not only what you were required to report, but what you noticed. FDA’s own description of the program is explicit that participants are encouraged to submit “close calls,” potential-for-harm events, and other safety concerns that never cross the mandatory line — the population 803 was never written to require in the first place.

A network, not a form

MedSun is not a wider MAUDE with a friendlier name. It is a defined, agreement-based network — roughly 300 hospitals, outpatient clinics, nursing homes, and home health agencies, per FDA’s own current estimate to the federal government’s information-collection reviewers — reporting directly to CDRH rather than through the manufacturer-mediated path most device MDRs travel. Reports live on their own legacy search tool at accessdata.fda.gov, carrying free-text Event Description and Manufacturer Narrative fields, and they are not part of openFDA. Query openFDA’s device-event endpoint — the one built on MAUDE — however you write it, and a MedSun-only report will never come back, because MedSun was never loaded into that endpoint to begin with.

MAUDE answers what a manufacturer or user facility was required to report. MedSun answers what someone at the bedside decided was worth mentioning anyway.

Where the signal actually surfaces

CDRH shares what the network turns up in a monthly MedSun newsletter, distributed to the clinical community with facility and patient identifiers stripped out. That channel has no CFR trigger, no compliance deadline, and no relationship to a recall number or a warning letter’s subject line — it can name a device problem pattern before anything else public does, and it can also name one that never becomes a recall, a warning letter, or even a MAUDE report at all.

The practice

Reading MedSun for your own device class is two separate habits, not an extension of reading MAUDE. The free-text search tool has to be queried directly, since no openFDA pipeline will surface it; the newsletter has to be read on its own cadence, since nothing about it resembles a database update. Neither one substitutes for MAUDE — roughly 300 facilities is a fraction of the several thousand that can generate a MAUDE report — and neither one is a finding about a specific device. A single close-call narrative from one facility is a data point a clinician chose to share, not a determination that anything is wrong with the product it names. This is regulatory intelligence and method, describing how two CDRH reporting channels differ and where each one is read, never a judgment about what any individual report means for any specific device.

Neither MAUDE nor MedSun sits inside FDA Radar’s current source coverage — per what we monitor and how often, the pipeline reads Federal Register notices, warning letters, recalls, and 510(k) clearances, none of which touches adverse-event data of either kind.

Regulatory intelligence, not regulatory advice. This post describes method and published FDA records as of its date; decisions about a specific device belong with your regulatory professional.

Method
The lab is accredited. Not the device.
Practice
Breakthrough is law. STeP is a guidance.
Practice
MDSAP replaces routine. Not for-cause.
Method
No field on a 510(k) says what it treats
Method
Discretion is a policy. Exclusion is a statute.
Practice
Designated by one office. Approved by another.
Practice
The five-unit device never gets a K-number
Practice
Meeting the criteria isn't a tracking order
Method
The PMA clock doesn't stop at approval
Practice
The K-number doesn't track today's device
Method
A MAUDE report proves it was filed
Practice
Not every MDR starts with the manufacturer
Method
Completed. Not terminated.
Practice
The device-ban list has three entries
Method
The UDI exception has its own deadline
Method
MDUFA VI is being negotiated in public
Practice
The inspection manual changed, not the rule
Method
The count Congress had to legislate
Practice
The small-business rate isn't retroactive
Method
A detention order has no docket to read
Practice
PMA approvals moved off the Federal Register
Method
A citizen petition names names
Practice
A market withdrawal isn't a recall
Method
Not every device letter comes from CDRH
Practice
Closed on one device. Open on the rest.
Method
No IDE is confirmed until the PMA is
Practice
The remedial-action call sets the clock
Method
Jurisdiction is a letter, not a field
Practice
An address is not a footprint
Method
The final rule that isn't final yet
Practice
The special controls aren't in the record
Method
Exempt from GMP. Not from complaints.
Practice
The notify list isn't the shortage list
Method
A constraint can't be skipped. A script can.
Practice
No cron sends this. A person does.
Method
Corrected, not rewritten
Practice
Quiet is a finding, not a default
Method
The summary is public. The statement isn't.
Practice
A competitor's 513(g) leaves no trace
Practice
An empty response field proves nothing
Method
A petition is public. Its outcome isn't.
Practice
The panel is a category, not a meeting
Method
An accessory carries its own classification
Method
A TPLC report is a category, not a device
Practice
A 522 order is a question, not a verdict
Method
A PCCP change leaves no new record
Practice
Not every signal becomes a recall
Method
eSTAR did not remove the acceptance check
Practice
An early alert has no recall number yet
Practice
A consent decree isn't a database row
Method
The record has no cybersecurity field
Practice
Classification Change is not one event
Method
Publication date is not effective date
Method
One event. Many recall numbers.
Practice
Quantity is a sentence, not a number
Practice
How a firm told you is a field too
Method
A RIN outlives the document number
Method
The docket ID is not the comments
Practice
The 510(k) record doesn't name the predicate
Practice
The 510(k) FDA didn't review first
Method
The letter FDA doesn't have to post
Practice
Cleared doesn't say which track it took
Method
The clock stops. The calendar doesn't.
Method
Why a guessed match never reaches you
Practice
The standards list never names a device
Method
The guidance isn't in the Federal Register.
Practice
Filtered. Not discarded.
Method
There are two recall databases, not one
Practice
Breakthrough status is confidential by law
Practice
One MAUDE report is not one malfunction
Method
A supplement number is not a track
Method
Cleared is not approved
Practice
Nationwide doesn't mean your building
Practice
Not every correction reaches FDA
Method
Registered. Not reviewed.
Method
Contact ODE is not a pathway
Practice
Almost no recall is FDA-mandated
Method
FDA's device names read like a card catalog
Practice
openFDA is free. It is not unlimited.
Method
GUDID stores the model. Not the box.
Practice
Detention doesn't need a warning letter
Method
A Class I device, a Class I recall
Practice
21 CFR 820 didn't move. Its contents did.
Method
The product code that doesn't exist yet
Practice
The classification posts. The 483 behind it doesn't.
Method
A recall has three dates, and the pipeline had to pick one
Practice
The count is real. The rate is not.
Method
The firm on the record is not the firm on the box
Practice
Low confidence is an instruction, not a hedge
Method
The same company, spelled three ways
Practice
A device that was never a medical device
Method
FDA's warning letters, addressed by column number
Practice
Your regulation has a decimal. FDA's watch doesn't.
Method
Three letters is too short to search for
Practice
Most warning letters never close
Method
The guidance that skipped the draft
Practice
Ongoing, as of when?
Method
The least interesting fact in a 510(k)
Practice
No recall arrives with a product code attached
Practice
The deadline that doesn't email you
Method
The warning letter has two dates
Method
How to monitor FDA without drowning
Practice
Your predicate was recalled. Now what?
Method
Why no item reaches you without a human