// Industries · Medical Device & Pharma

The device history record that writes itself as the line runs.

In regulated device manufacturing, every unit ships with a story the FDA can ask for: which lots went in, who built it, on what equipment, against which revision, with what test results. On paper, that story takes binders, back-offices, and weeks of review. On a modern MES it assembles itself, station by station, as the work happens. We've spent years deploying and integrating Critical Manufacturing MES in FDA-regulated plants worldwide: from the ERP interface that releases the order, to the line equipment that feeds the record, to the Kubernetes infrastructure it all runs on.

ERP MES LINE eDHR RELEASE
// The execution layer01

MES is where orders become devices, and devices become data.

A Manufacturing Execution System lives at Level 3 of the ISA-95 stack: below the ERP that plans the business, above the equipment that does the work. The ERP says make 100 of part A. The MES decides what that means on the floor: which line, which materials, which operators, which work instructions at which revision. Then it records everything that actually happened and hands the proof back up.

ENTERPRISE · ERP planning · purchasing · inventory · finance L4 shop orders · BOM lot & revision changes consumption · completions genealogy · order status MES · CRITICAL MANUFACTURING L3 DISPATCH orders → stations eDHR / eBR the living record GENEALOGY serial ↔ lot QUALITY NCR · CAPA · SPC WEIGH & DISPENSE recipe-based CERTIFICATION operator training work instructions · recipes · labels process data · counts · events PLANT FLOOR · SCADA · PLC · EQUIPMENT · OPERATORS assembly cells · test stands · IoT sensors · label printers · scanners L0–2 // one data model in the middle: everything above and below it speaks to the same truth
// ISA-95 level 3: orders and specifications flow down · execution data and genealogy flow up
platform Critical Manufacturing MES record model eDHR & eBR standards ISA-95 · ISA-88 regulations 21 CFR Part 11 & 820 architecture modular · one data model
// The route, enforced02

Every station is a gate. The record is the toll.

A released order carries its route: the ordered set of operations the device must pass through, each with its own materials, instructions, equipment, and data collection. The MES walks each serial number or lot through that route and refuses every shortcut: wrong material, expired lot, uncertified operator, missed test. Nothing advances without proof, and the proof is the eDHR.

OP-10Kit materials against the released BOMevery component lot scanned and checked: right part, right revision, in date, in statusgate: BOM + lot status
OP-20Assemble with instructions at the point of usethe current approved work instruction on screen; the MES checked the operator's certification before it let them log in to the stepgate: cert valid
OP-40Process step with equipment integrationweld, seal, or fill parameters stream from the machine into the record automatically: no transcription, no gapsgate: params in spec
OP-50Test, with results captured in linean out-of-spec result opens a non-conformance and blocks the unit on the spot instead of at final reviewgate: result pass
OP-60Inspect to the sampling planAQL sampling enforced by the system; disposition carries an electronic signaturegate: e-sign
OP-70Print and verify the UDI labellabel content generated from the order's own GTIN, lot, and expiration data, then scan-verified against itgate: label match
OP-80Review by exception, release by signaturethe eDHR assembled itself along the way; quality reviews the exceptions instead of rereading the bindergate: release
// the finished record traces serial → component lots → equipment → operators → results in both directions, on demand

Enforcement is built in

Paper asks the operator to do the right thing. The MES makes the wrong thing impossible: a step can't start with unverified material, an uncertified operator, or a superseded instruction revision. Compliance stops being a review activity and becomes a property of the process itself.

Genealogy runs both ways

Ask a serial number what went into it, or ask a supplier lot where it ended up. When a component recall lands, the affected-device list is a query that takes seconds, and it's exact: no over-scoping the recall to be safe, no combing through storage boxes.

Quality closes the loop

NCR, CAPA, SPC, and sampling inspection live inside the same system as execution. A failed test doesn't file a form for someone to find later; it holds the material, opens the investigation, and links every affected order into it.

// The ERP handshake03

The integration is where MES projects live or die.

An MES with no ERP interface is an island: orders re-typed by hand, inventory counted twice, two systems that quietly disagree. The real work of an MES program is the plumbing, and we've designed and specified it end to end: which events trigger which messages, what every field means, and what happens on the edge cases. Below is the shape of a shop-order integration we authored for a global, multi-site rollout (identifiers genericized).

ERP orders · items · lots release SO lot master trigger item rev trigger on release: status 05 MESSAGE QUEUE persistent · guaranteed · JSON header + material lines MES order · BOM · route create + dispatch update open orders execute · record consumption · completions · order status lot expiration & status changes document revision changes → open orders notified // every event that matters on the floor becomes a message; every message is specified to the field
// ERP → queue → MES on release · master-data triggers keep open orders honest · execution results flow back
tap a message type to see its field-level specification
// a shop order release, as the MES receives it (genericized excerpt) { "header": { "messageType": "SO_RELEASE", "source": "ERP", "target": "CM-MES", "postingDateTime": "20260722093215001" }, "body": { "orderNumber": "00550123", "materialNumber": "PT00089518", "orderQuantity": "100.000", "batchNumber": "12790160X", "workCenter": "015063", "scheduledStartDate": "20260801", "udiString": "(01) GTIN (17) expiry (10) lot", // the label's barcode content, resolved at release "materialLines": [ { "componentItem": "1058541", "componentItemType": "R", "qtyReqIncl": "101.500", "qtyReqExcl": "100.000", "operation": "005", "revisionLevel": "A" } // … one line per BOM component ] } }

Orders arrive once, complete, and filtered

Release is the trigger, wherever it comes from: planning runs, campaign processing, or manual order maintenance. Configurable rules decide which orders belong to the MES (by warehouse, by item enablement) so a plant can migrate line by line instead of big-bang. The header brings the order; the material lines bring the full component list with quantities, scrap factors, and revisions.

release → filter → queue → MES

Master data stays in sync

Database triggers watch the lot master and item master after release. A component lot expires early or gets blocked: the MES knows before the operator scans it. A document attached to an open order gets a new revision: every affected order is notified by number, so nobody builds against yesterday's drawing.

lot · status · revision → open orders

The edge cases are the spec

Rework orders that must not double-consume materials. Items with no GTIN that inherit the parent's. Blank lots that fall back to the order number. Placeholder expiration values that mean "never expires" and must never reach a label. A one-page happy path becomes a real specification when every one of these has an answer, and ours do.

rework · GTIN fallback · blank lot · defaults
// Compliance04

No MES is compliant out of the box. Validated deployments are.

The FDA is explicit that no vendor can sell a turnkey "Part 11 compliant system": the technical controls come from the software, and the procedural controls come from how you deploy, configure, and validate it. Critical Manufacturing MES brings the technical half in depth. We've delivered the other half: configuration, procedures, and risk-based validation, inside live FDA-regulated plants.

Electronic signatures

Part 11 subpart C controls built in: unique credentialed signatures tied to enterprise identity, signature manifests showing name, date, time, and meaning (review, approval, responsibility), and signatures cryptographically linked to their records so they can't be excised or transplanted.

21 CFR 11 subpart C

Audit trail everywhere

Secure, computer-generated, time-stamped audit trails on records and master data: who changed what, when, and from what value. Record retention and human-readable export mean an investigator's request is a report, and audit prep stops being a scramble.

who · what · when · before/after

Part 820 production controls

The quality-system half of the equation: device master record data driving execution, device history records assembled electronically, enforced operator training and certification, and identification and traceability through every operation, the way subparts of 820 expect.

DMR → execution → DHR

Risk-based validation

We validate the way the FDA now encourages: Computer Software Assurance, with rigor focused where patient safety and product quality are actually at stake. Vendor assessments against ISA-95, ISA-88, and Part 11 feed the plan, so effort lands on configuration and intended use instead of re-testing the platform.

CSA · IQ/OQ/PQ · intended use
// What we bring05

MES integration services, from the interface spec to the infrastructure.

We've carried Critical Manufacturing MES deployments through global multi-site programs: writing the requirements, building the interfaces, replacing the paper, training the plant, and running the platform underneath. That end-to-end view is the service: one team that can argue with the ERP analyst in the morning and the controls engineer in the afternoon.

Deploy & roll out

Site assessments, requirements, and phased rollouts that scale one validated template across plants instead of reinventing each one. We've led deployments through go-live and hypercare in regulated production, where "cutover" means the paper stops.

Integrate ERP & equipment

Shop orders, BOMs, lots, and revisions flowing from the ERP; consumption and completions flowing back; test stands, printers, scanners, and PLCs wired into the record. We write the field-level specs and build the interfaces, queues, and error handling around them.

Replace paper with eDHR

Process mapping from the current travelers, master data modeling, work instruction migration, and the validation documentation to prove it all: the unglamorous work that turns "paperless" from a slide into a running line.

Run the platform

MES needs infrastructure that deserves it: we build and operate the cloud, hybrid, and on-premise Kubernetes platforms underneath, with the monitoring, backup, and disaster recovery a validated system demands. Plus the support and training that keep it healthy after go-live.

// what the customer gets

The payoff shows up in the metrics a plant manager already tracks, and in a few they've never been able to see before:

  • Release in hours instead of weeks. Review-by-exception on a self-auditing record replaces page-by-page DHR review.
  • Errors blocked at the station. Right-first-time goes up because the wrong material, revision, or operator never gets a chance to touch the unit.
  • Audits become queries. Traceability, training records, and signatures are seconds away, sliced by product, lot, operator, or date.
  • One truth from floor to ERP. Inventory, order status, and yield agree everywhere, because they're recorded once, in context, at the source.
  • A foundation for the next decade. OEE, SPC, IoT data, and analytics inherit clean, contextualized data from day one, so Industry 4.0 stops being a poster in the lobby.
// Contact06

Still building regulated product on paper travelers?

Tell us where your orders come from, what your lines look like, and where the binders live. We'll show you the path from there to a validated eDHR, and what it takes to walk it.

Start a conversation