What if the organization is not the original manufacturer but a service provider that refurbishes and services medical devices?
In this case, it is the responsibility of the manufacturer to exercise appropriate controls on you (as a contracted service).
If the manufacturer hasn't:
- sufficiently evaluated your procedures/practices/documentation, or audited your facilities/system; and/or
- prescribed procedures to you (which presumably they will monitor/audit)
...then I'd be concerned (more for the manufacturer than for yourself...)
Bottom line, however, is that:
- The manufacturer has decided to include servicing of their devices and decided to outsource the servicing activities to you.
- You, as a contractor, have no regulatory obligations...only (presumably) contractual obligations with the manufacturer.