{
  "id": 15554535,
  "title": "AI drafted the impact list. I still own the audit answer.",
  "url": "https://urgent.news/2026/10/19/ai-drafted-the-impact-list-i-still-own-the-audit-answer",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-19T04:02:53.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/rajiviyer112/ai-drafted-the-impact-list-i-still-own-the-audit-answer-1o4n"
  },
  "original_language": "en",
  "account": "A recent change request resulted in a small modification for a heat-treat subcontractor who moved two furnace zones to a new EMS provider. This change touched twelve components and four downstream device families. However, the AI impact analysis missed three crucial factors: shared sterilization load configurations, a previously changed cleaning process, and a CAPA tied to the furnace's temperature uniformity map. ISO 13485:2016 requires human review and approval of changes, with a clear audit trail showing who reviewed and approved the impact analysis. AI can assist in surfacing potential impacts, but the final decision and responsible documentation must be handled by a human. A compliant process involves reviewing and approving each AI-suggested change, with a reviewer's per-item justification retained for the audit trail.",
  "summary": "The change that looked small Last month, a change request landed on my queue for a heat-treat subcontractor who had moved two of their furnace zones to a different EMS provider. Twelve components in scope. Four device families downstream. The change form asked one question at the top: which DHF documents does this touch? For a Class IIa implant component, that question is not a checkbox. Get it…",
  "key_points": [
    "AI impact analysis missed shared sterilization load configurations",
    "AI impact analysis missed previously changed cleaning process",
    "Human review required for AI-suggested changes with audit trail"
  ],
  "editors_take": "Relying on automated analysis without rigorous human oversight creates regulatory vulnerabilities by failing to capture the complex interdependencies required for maintaining compliant medical device manufacturing standards.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}