The Signal: FDA Did Not Go Soft. FDA Reloaded.
One hundred days into QMSR, the headline number looks like relief. Device citations per inspection day fell from 7.40 to 3.59. A 51% drop. Zero Official Action Indicated classifications, against 25 in the same window of 2025. If you are a VP of Quality reading the trade press right now, you are being told FDA went soft.
FDA did not go soft. FDA reloaded.
The 51% citation drop is not a softening. It is the exhaust signature of a methodology change FDA already telegraphed: risk-based, single-document, follow-the-thread inspections that produce fewer findings per visit but hit harder where they land.
The number everyone is misreading
The trade press is reporting the delta and stopping there. 7.40 citations per day in the matched 2025 window. 3.59 in the matched post-QMSR window. Down 51%. FDA is overwhelmed. FDA is rebuilding muscle memory in ISO grammar. Wait until late 2026 and the catch-up cycle resumes.
That read gets the direction right and the meaning wrong. Three numbers from my own pull of the FDA Inspections Dashboard, reconciled against my consolidated workbook this week:
The share of inspections producing a Form 483 stayed flat. 55.5% in the prior-year matched window. 53.5% post-QMSR. Investigators are finding actionable issues at essentially the same rate, not a lower one.
Average observations per 483 dropped 26%. From 3.47 to 2.58. Each 483 is shorter.
VAI rate stayed flat at 53%. Voluntary Action Indicated is the bucket where investigators say we found something serious but not bad enough to escalate yet. That bucket is holding steady. Same proportion of inspections producing potentially escalatable findings, with leaner observations on each.
Read those three together and the story is not that FDA is finding less. The story is that FDA is finding tighter. Same conversion rate from inspection to 483, leaner findings on each one, and the same share of those landing in the VAI category that historically feeds OAI escalations and warning letters.
This is not a transition pause. This is what the agency told us they were going to do.
Keisha Thomas just confirmed it on the record
On May 6, FDA’s Keisha Thomas, associate director of CDRH’s Office of Product Evaluation and Quality, told the FDLI Annual Conference that the agency has conducted “just north of 100” QMSR inspections producing Form 483s. The dashboard shows 115 such inspections through April 28. Her count and mine tie.
Three operational confirmations from Thomas that the trade coverage mostly skipped past:
“Risk, risk, risk, risk.” Her exact phrasing. Risk management is the top observation area. Risk is central to all QMSR activities. Every process is expected to involve risk.
FDA can now review internal audit reports, supplier audits, and management review records. Under QSR, these were confidential. Under QMSR, they are inspectable. The mechanism is on the record, not inferred.
Top observation areas in rank order: risk management, outsourcing and purchasing, complaint handling, UDI, corrective actions.
Every line item in that list points the same direction. Investigators are no longer doing the wall-to-wall sweep that produced kitchen-sink 483s with eight to ten observations stacked across CAPA, complaints, purchasing, design controls, and document control. They are pulling the thread that looks loose, following it through three or four connected systems, and writing observations only on what they find at the end of the thread.
A 2.58-observation 483 is not a weak 483. It is a focused 483. It is harder to write a CAPA against, harder to argue down at the response stage, and easier to escalate cleanly to a warning letter when the firm does not deliver on the response.
Anyone reading the average-observations-per-483 number as evidence of agency softening is reading it backwards.
Where investigators are actually looking
The clause-level rollup, post-QMSR through April 28, in citation order:
ISO 7.1 Planning of product realization, including risk management: 40
ISO 8.2.2 Complaint handling: 25
ISO 7.4.1 Purchasing: 22
ISO 8.5.2 CAPA: 20
ISO 7.5.6 Process validation: 16
ISO 8.3.1 Nonconforming product: 13
ISO 4.1.2 Risk-based QMS: 13
Then two clauses that deserve their own callout because they did not appear meaningfully on QSR-era 483s:
ISO 5.6.1 Management review: 10 citations
ISO 8.2.4 Internal audit: 10 citations
Neither management review nor internal audit was a load-bearing 483 target under QSR. Both are now. Thomas confirmed the regulatory mechanism: FDA can now look at these records. The data confirms they are using that authority.
The reason fits the methodology shift. Management review and internal audit are accountability hooks. They are how an investigator confirms that a quality system is connected to its own risk picture, not just documented against a checklist. If your management review minutes are a rubber-stamp template and your internal audits surface only the issues your QMS already knows about, those are gap evidence under the new posture.
UDI deserves its own note. Thomas put UDI fourth on her top-observation list, and the data backs her: 21 CFR 801.20(a) and 830.310(b) are appearing across post-QMSR 483s even though they sit outside the ISO 13485 framework entirely. UDI was a settled enforcement area under QSR. It is still a live one. Do not let it fall off your mock-audit pass list because the new vocabulary is grabbing all the attention.
The CDRH warning letter signal
This is where the trade read gets the direction wrong.
CDRH posted 14 warning letters in the 100 days after QMSR took effect. The naive read is that warning letter output is up. The honest read is the opposite.
A warning letter posted in March 2026 reflects an inspection that closed in mid-to-late 2025. By the time a 483 turns into a warning letter, six months or more has usually passed. The 13 letters posted post-QMSR are almost entirely QSR-era enforcement.
The number that matters is warning letters issued post-QMSR. Seven. In 100 days. Against 16 in the prior-year matched 100 days. CDRH warning letter issuance is down, not up.
That direction matches everything else in the data. Fewer total citations, shorter 483s, no OAI escalations, and now fewer warning letters issued. The pipeline is producing less paper, but each piece of paper is more focused.
The 115 VAI inspections sitting in FDA’s queue right now are the leading indicator. They are the OAI feeder pool and the warning letter feeder pool. Anyone reading the zero OAI count or the seven-issued warning letter count as a verdict is going to be surprised in Q3.
The foreign inspection question
Foreign inspection share of total device inspections collapsed from 22.7% in the matched prior year to 6.0% post-QMSR. That is roughly seventeen percentage points in a single quarter.
The trade read on this is that FDA is working domestic facilities first while investigators build ISO-grammar fluency. That read is probably right, but it stops short of the operational implication. Foreign-manufacturing-dependent companies are being told, implicitly, that they have a runway. That runway is shorter than it looks. Domestic inspection volume also fell post-QMSR (from 290 to 202 inspections in the matched windows), so the foreign deprioritization is not pure capacity reallocation. It is sequencing. When the agency ramps back to normal cadence, foreign inspections will catch up faster than domestic volume will. EU MDSAP-aligned facilities planning around a quiet 2026 should plan around a loud 2027.
An OEM client of mine in Ireland has not seen FDA since before COVID. They knew they were due. When the foreign inspection numbers dropped, they asked if we could push their mock audit.
I told them no, and not gently. The whole industry is recalibrating to QMSR and the new inspection technique. Foreign manufacturers should treat this slow ramp as a gift, and the gift will not be on the table long. You want the mock audit as soon as possible so you have as much time as possible to build the risk-management story FDA expects you to tell: the one that traces and manages risk for every product from design inputs through post-market surveillance, mapped cleanly, in ISO grammar, with the connective tissue between design, CAPA, complaints, and supplier qualification visible on demand.
FDA is learning and calibrating. They still have inspection metrics to hit. My read is that once the first quarter or two of calibration is behind them, the ramp accelerates, and the second half of 2026 returns to normal inspection cadence. The foreign reprieve ends with it.
The implication
If you are a VP of Quality, the working assumption for the next six to eighteen months should not be that FDA went easy. It should be that FDA recalibrated, and the recalibration favors firms whose quality systems are connected end-to-end and disadvantages firms whose quality systems are documented in silos.
Three concrete reads:
The 53.5% inspection-to-483 conversion rate means the probability of a clean walkout has not changed. Plan around the assumption that any inspection in the next twelve months produces a 483, and design your response posture for a focused, two-to-three-observation document rather than a six-to-ten-observation document.
The 0 OAI count is provisional, not permanent. OAI classifications take months to finalize. The 115 VAI inspections currently in FDA’s queue are the OAI feeder pool. Anyone reading the zero as a verdict is going to be surprised in Q3.
The ISO 7.1 lead position is the single most underweighted live target. Investigators appear to be using 7.1 as a risk-management anchor, the way QSR 820.30 used to function as a design-controls anchor. Thomas’s “risk, risk, risk, risk” line is not corporate-speak. It is a direct read of what investigators are doing. If your design planning documentation does not show a live link to your risk file, your CAPA system, and your supplier qualification records, that gap is the most likely 483 you will receive this year.
For investors evaluating MedTech compliance bets, the read is simpler. The TAM expansion thesis on the back of QMSR demand needs a haircut. Citation volume is down, not up. The catch-up cycle is likely real but unconfirmed. Underwrite Q3-Q4 2026 enforcement data before underwriting demand-led growth in the QMS software category. The defensible thesis is on continuous controls monitoring, not on document management. Investigators are writing observations against connected evidence. Vendors that produce trended evidence on demand are sitting where the 483s are landing.
The 51% drop is not the signal. The 26% drop in observations per 483 is the signal, and it says FDA got better at writing them.