Method·October 30, 2026 · 3 min read

The manufacturer who owns no factory

21 CFR 807.20 doesn't reserve the registration duty for whoever runs the production line. A company that writes a device's specifications and hands every physical step to a contract manufacturer is, in FDA's own vocabulary, a manufacturer too — a Specification Developer, named and required in the agency's own registration guidance, with its own standing in the public record.

By Connor Griggs — Regulatory & Quality Strategist

A small device company that outsources every physical step of making its product — molding, assembly, sterilization, packaging — can read “establishment registration” and reasonably conclude the duty belongs to whoever actually runs the line. FDA’s own registration framework draws the boundary somewhere else. The company that only wrote the specifications the contract manufacturer builds to is, in the regulation’s own vocabulary, a manufacturer in its own right — and it registers alone.

A name the regulation reaches, not one it defines

Look for “specification developer” as its own defined term in 21 CFR 807.3 and you won’t find a lettered paragraph with that exact heading. What you find instead is 807.3’s definition of “owner or operator” — the person whose registration duty the rest of Part 807 turns on — written broadly enough to catch a party that never touches the device at all. FDA’s parallel Quality System Regulation makes the same reach explicit rather than implicit: 21 CFR 820.3 states that “manufacturer includes, but is not limited to, those who perform the functions of contract sterilization, installation, relabeling, remanufacturing, repacking, or specification development.” Specification development sits on that list as its own function, on equal footing with sterilizing or assembling. “Specification developer” is the name FDA’s own registration materials and its FURLS database give to the party that performs it — a working label for a function the definitions reach, not a term the definitions coin.

FDA’s own introduction says it plainly

FDA’s registration-and-listing introductory guidance spells out the scenario by name: a specification developer is an establishment that develops the specifications for a device marketed under its own name, performs no manufacturing itself, and uses a contract manufacturer to produce the finished device. The same guidance lists who is required to register under 21 CFR 807.20(a)(1) — and the specification developer sits on that list beside the manufacturer, the remanufacturer, the contract manufacturer, and the contract sterilizer, not behind any of them. Nothing in the requirement waits for the specification developer’s contract manufacturer to register first, and nothing lets one registration stand in for the other. Two parties, two establishments, two registrations — even when only one of them ever has the device in its hands.

Where it shows up in the public record

The distinction isn’t just a filing technicality; it is visible in the record openFDA republishes. The device registrations and listings endpoint carries an establishment_type field on every establishment record — an array, because one establishment can hold more than one role at once — and Specification Developer is one of the values that field actually takes, distinct from Manufacturer and from Contract Manufacturer. Reading a competitor’s or a supplier’s registration record, that field is the fast, correct way to tell which role you’re actually looking at — a firm listed only as a specification developer is telling you, in FDA’s own words, that it owns the design and someone else owns the equipment.

The practice

For a device company weighing whether to build in-house or design-and-outsource, the registration duty is not a reason to pick one structure over the other — it attaches either way, and knowing that early avoids discovering it at the same moment a 510(k) is due. For anyone reading someone else’s record — a supplier being vetted, a competitor being watched — the establishment_type field is the one that actually answers “who makes this,” where a bare firm name on a label does not. Whether a specific company’s own structure triggers this duty, and how it should register, is a determination for that company’s own regulatory counsel working its own facts; this is a description of how the public record is built and what it discloses, regulatory intelligence and method, never regulatory advice.

Practice
A provider letter doesn't need a recall
Method
A qualified tool has a context, not a blanket
Practice
The eMDR account isn't automatic
Practice
GLP covers the safety study, not the device
Method
Part 11 governs the copy, not the duty.
Method
A K-number isn't always a 510(k)
Practice
Approved once. Reported every year.
Method
The goal date passes. FDA owes a letter.
Method
The money a 510(k) never has to mention
Method
A discussion paper isn't guidance
Practice
A stereotaxic system isn't a RASD
Method
The A-list is a forecast, not a deadline.
Practice
Ultra has a gram range. Fragrance doesn't.
Method
Patient preference just reached the 510(k)
Practice
The health hazard evaluation isn't the record
Method
The sponsor proposes risk. The IRB decides.
Practice
A Special 510(k) needs a predicate you own
Method
The flag marks the reviewer, not the result
Practice
Call it fifteen. File it in thirty.
Method
The recognition number isn't the list number
Practice
The letter to file isn't in the guidance
Method
The PMA preempts. The 510(k) doesn't.
Practice
Cleared doesn't code. Coded doesn't cover.
Practice
Exempt from 510(k). Restricted anyway.
Method
Exempt from registration. Not from 510(k).
Method
Right to try reaches drugs, not devices
Practice
The 510(k) clears the range, not the fit
Practice
The hospital's duty runs to the maker, not FDA.
Method
The predicate study isn't the waiver study.
Method
No clinical hold for an IDE. Only disapproval.
Practice
A CFG can cover a device that never came here.
Method
The symbol skips text. The glossary can't.
Practice
The label clears 812.5. The flyer doesn't.
Method
A 510(k) can change hands. No rule says how.
Practice
A missed renewal is two violations, not one
Method
Drugs expire by rule. Devices by choice.
Practice
Denied the petition. Not the outcome.
Practice
Starting a committee is public. Renewing isn't.
Method
A recall closes. A radiation refund doesn't.
Method
The trial is public. The IDE isn't.
Practice
A PMA withdrawal pays back. A 510(k) doesn't.
Method
Interoperable is a design term, not a class.
Practice
The category is new. The 510(k) record isn't.
Practice
The device is cleared. Not the room.
Method
Classified in 2011. Excluded in 2016.
Practice
The law reached devices. The guidance hasn't.
Method
The label says RUO. FDA reads intent.
Method
Humanitarian. Not always nonprofit.
Practice
The certification has a one-year tail
Method
The code changed. The failure didn't.
Practice
Skip has a ceiling. Search after doesn't.
Method
Reviewed together. Decided separately.
Practice
Class III. Not called for PMA.
Practice
The standard for the wire, not the device
Method
A reference device isn't a predicate
Practice
A predicate checklist nobody has to follow
Method
The pathway that skips the predicate
Method
A network FDA funds, not FDA runs
Practice
Panel-recommended. Not yet classified.
Method
The pilot that needed a statute
Practice
A committee no clearance ever names
Method
Never cleared here. Exported anyway.
Practice
Built for drugs. Silent on devices.
Practice
A significant decision carries its own clock
Method
The guidance that went back to draft
Method
Breakthrough crosses centers. TAP does not.
Practice
Two lists decide who reviews your 510(k)
Method
The reprocessor holds the 510(k)
Practice
The Rx symbol never reaches the record
Method
The disqualification list names no device
Practice
The summary FDA writes, not the sponsor
Practice
A missed MDR is misbranding, not a defect
Method
Two names on one registration, two jobs
Practice
A K-number is public. The other isn't.
Method
Exempt covers the type, not the use
Method
Recognized. Not published.
Practice
The supplement got eSTAR. The PMA did not.
Method
Congress ordered a guidance, not a rule
Practice
AI-enabled is a list. Not a field.
Practice
The companion diagnostic list changed its name
Method
The master file neither of you can read
Practice
The condition inside the approval order
Method
The repair FDA calls manufacturing
Method
Vacated in March. Filed in September.
Practice
Classified. Not waived.
Practice
Emergency use isn't defined in Part 812
Method
The two-year inspection clock is gone
Method
The PMA clock starts at the last module
Practice
The Q-Sub that doesn't buy you more time
Method
Lapsed and revoked end an EUA differently
Practice
A recall strategy has a grade. openFDA doesn't.
Method
A granted De Novo becomes a predicate.
Practice
Least burdensome changes the ask, not the bar.
Method
The lab is accredited. Not the device.
Practice
Breakthrough is law. STeP is a guidance.
Practice
MDSAP replaces routine. Not for-cause.
Method
No field on a 510(k) says what it treats
Method
Discretion is a policy. Exclusion is a statute.
Practice
Designated by one office. Approved by another.
Method
MedSun sits beside MAUDE, not inside it
Practice
The five-unit device never gets a K-number
Practice
Meeting the criteria isn't a tracking order
Method
The PMA clock doesn't stop at approval
Practice
The K-number doesn't track today's device
Method
A MAUDE report proves it was filed
Practice
Not every MDR starts with the manufacturer
Method
Completed. Not terminated.
Practice
The device-ban list has three entries
Method
The UDI exception has its own deadline
Method
MDUFA VI is being negotiated in public
Practice
The inspection manual changed, not the rule
Method
The count Congress had to legislate
Practice
The small-business rate isn't retroactive
Method
A detention order has no docket to read
Practice
PMA approvals moved off the Federal Register
Method
A citizen petition names names
Practice
A market withdrawal isn't a recall
Method
Not every device letter comes from CDRH
Practice
Closed on one device. Open on the rest.
Method
No IDE is confirmed until the PMA is
Practice
The remedial-action call sets the clock
Method
Jurisdiction is a letter, not a field
Practice
An address is not a footprint
Method
The final rule that isn't final yet
Practice
The special controls aren't in the record
Method
Exempt from GMP. Not from complaints.
Practice
The notify list isn't the shortage list
Method
A constraint can't be skipped. A script can.
Practice
No cron sends this. A person does.
Method
Corrected, not rewritten
Practice
Quiet is a finding, not a default
Method
The summary is public. The statement isn't.
Practice
A competitor's 513(g) leaves no trace
Practice
An empty response field proves nothing
Method
A petition is public. Its outcome isn't.
Practice
The panel is a category, not a meeting
Method
An accessory carries its own classification
Method
A TPLC report is a category, not a device
Practice
A 522 order is a question, not a verdict
Method
A PCCP change leaves no new record
Practice
Not every signal becomes a recall
Method
eSTAR did not remove the acceptance check
Practice
An early alert has no recall number yet
Practice
A consent decree isn't a database row
Method
The record has no cybersecurity field
Practice
Classification Change is not one event
Method
Publication date is not effective date
Method
One event. Many recall numbers.
Practice
Quantity is a sentence, not a number
Practice
How a firm told you is a field too
Method
A RIN outlives the document number
Method
The docket ID is not the comments
Practice
The 510(k) record doesn't name the predicate
Practice
The 510(k) FDA didn't review first
Method
The letter FDA doesn't have to post
Practice
Cleared doesn't say which track it took
Method
The clock stops. The calendar doesn't.
Method
Why a guessed match never reaches you
Practice
The standards list never names a device
Method
The guidance isn't in the Federal Register.
Practice
Filtered. Not discarded.
Method
There are two recall databases, not one
Practice
Breakthrough status is confidential by law
Practice
One MAUDE report is not one malfunction
Method
A supplement number is not a track
Method
Cleared is not approved
Practice
Nationwide doesn't mean your building
Practice
Not every correction reaches FDA
Method
Registered. Not reviewed.
Method
Contact ODE is not a pathway
Practice
Almost no recall is FDA-mandated
Method
FDA's device names read like a card catalog
Practice
openFDA is free. It is not unlimited.
Method
GUDID stores the model. Not the box.
Practice
Detention doesn't need a warning letter
Method
A Class I device, a Class I recall
Practice
21 CFR 820 didn't move. Its contents did.
Method
The product code that doesn't exist yet
Practice
The classification posts. The 483 behind it doesn't.
Method
A recall has three dates, and the pipeline had to pick one
Practice
The count is real. The rate is not.
Method
The firm on the record is not the firm on the box
Practice
Low confidence is an instruction, not a hedge
Method
The same company, spelled three ways
Practice
A device that was never a medical device
Method
FDA's warning letters, addressed by column number
Practice
Your regulation has a decimal. FDA's watch doesn't.
Method
Three letters is too short to search for
Practice
Most warning letters never close
Method
The guidance that skipped the draft
Practice
Ongoing, as of when?
Method
The least interesting fact in a 510(k)
Practice
No recall arrives with a product code attached
Practice
The deadline that doesn't email you
Method
The warning letter has two dates
Method
How to monitor FDA without drowning
Practice
Your predicate was recalled. Now what?
Method
Why no item reaches you without a human