Every box must reach its destination: traceability assigned from the supplier
Mozambique's CMAM now requires a seal and an identification code assigned from the supplier, carried at carton and pallet level to stop diversion. What that asks of a supplier, how it differs from UDI, and the four questions a tender has to answer.
On 14 September 2026 Mozambique's Central de Medicamentos e Artigos Médicos, CMAM, received the first consignment of medicines and medical-surgical materials under a national investment of around 35 million dollars supported by the World Bank. Our Prosenso™ nitrile examination gloves were part of what arrived at the central warehouse in Zimpeto.
The delivery is not the interesting part. The condition attached to it is.
CMAM announced that the products would be tracked through the supply chain "através do selo e código de identificação atribuído desde o fornecedor", through a seal and identification code assigned from the supplier. Not applied on arrival. Not generated by the warehouse. Assigned upstream, by whoever packed the carton, and carried with it from there.
That is a small phrase with a large consequence for anyone selling into public health procurement, and it is spreading.
Key takeaways
What Mozambique has actually introduced
The system identifies each unit of packaging with a seal and a code, and records its movement: into the central warehouse, out again, and onward to the health facility it was sent to. Codes are applied to cartons and to pallets, so a consignment can be interrogated at more than one level of packaging.
President Daniel Chapo set out the reasoning publicly on 20 September, describing the consignment as the first batch and stating the investment figure and the World Bank's support. His instruction was blunt: "cada caixa deve chegar ao seu destino e cada medicamento deve chegar ao doente que dele precisa", every box must reach its destination and every medicine must reach the patient who needs it. He went on: "Não podemos permitir desvios, roubos ou venda ilegal daquilo que foi adquirido para salvar vidas." We cannot allow diversion, theft or the illegal sale of what was bought to save lives.
That is the whole design brief in two sentences. This is a loss-prevention system before it is a logistics system. Mozambique's Ministry of Health introduced the seal specifically to make stock that goes missing traceable to the point where it went missing.
Why "assigned from the supplier" changes what a supplier has to do
Most traceability requirements a supplier meets are documentary. You provide a certificate, a declaration, a batch record, a test report. They are produced by the quality function, after the fact, and sent as files.
An identifier assigned from the supplier is not that. It is a production requirement.
Four practical consequences, in the order they hit you:
It has to exist before the goods are packed. A code applied at the receiving warehouse tells you what arrived. A code applied at the packing line tells you what was sent. Only the second one closes the gap where diversion actually happens, which is why buyers specify it that way. But it means the identifier has to be issued, allocated and printed while the order is still on the line, not while it is on the water.
It has to survive the journey. A label that delaminates in a humid container, or a thermal print that fades in the sun on a quayside, is not a traceability system. Carton marking for this kind of chain wants print and substrate chosen for the route, and the route to Maputo is not the route to Aarhus.
It has to be readable by the receiving system, not just by us. An identifier is only useful if the warehouse scanning it can resolve it. Format, symbology and the data carried inside the code all have to be agreed in advance. This is the part that most often goes wrong, and it goes wrong silently: the labels are perfect and nothing scans.
It has to be consistent across the whole order. Split an order across production runs, or across more than one packing site, and an identifier scheme that was designed for one of them will not hold for the others. That has to be settled at order stage, not discovered at consolidation.
None of this is difficult. All of it is expensive to retrofit, and impossible to retrofit once the container doors are shut.
Is this the same thing as UDI?
Not the same, and worth separating, because they are converging from opposite directions.
UDI under the European Medical Device Regulation is a regulatory identity requirement. It exists so that a device can be identified unambiguously, worldwide, by everyone who handles it, and so that a recall can be executed. It attaches to the device and its packaging levels, it is registered in EUDAMED, and as the Medical Device Coordination Group set out in 2026, only the legal manufacturer can assign it. We wrote about what that means for a buyer in our MDR article.
A procurement traceability code like Mozambique's is a custody requirement. It exists so that a specific consignment, bought with specific money, can be followed to a specific health facility. It attaches to the shipment, it lives in the buyer's own system, and the buyer decides who assigns it.
A glove carton can carry both, and increasingly does. They answer different questions: UDI answers "what is this product", the procurement code answers "where did this box go". A buyer who conflates them will write a requirement that no supplier can satisfy cleanly, because the two identifiers have different owners, different formats and different registries.
What this means for writing a tender
If you are a buyer moving to supplier-assigned identification, the specification needs to answer four questions. If it does not, you will get four different answers from four bidders and no way to compare them.
The general principle here is the one we set out in what documentation to demand from a PPE supplier: a classification is a claim, a report is evidence. Traceability follows the same rule. "Fully traceable" in a bid is a claim. A test label that scans in your warehouse management system is evidence, and you can ask for one before you award.
Questions we get asked
Does supplier-assigned coding make the product more expensive? It adds a real cost at the packing line, and the honest answer is that it depends almost entirely on how early you ask. Specified at tender stage it is a line item, and a modest one. Requested after the order is in production it means repacking, which is the expensive version of the same thing.
Can any supplier do this? Any supplier with control of its own packing specification can. The question to ask a bidder is not whether they can print a label, which everyone can, but whether they can allocate identifiers to cartons during packing and hand you the file that maps one to the other. That is the part that requires the packing line and the order system to talk to each other.
We already require GS1 barcodes. Is that the same thing? Only partly. A GTIN identifies the product; it tells you this is a box of size medium blue nitrile gloves. It does not tell you which box. Custody tracking needs a serialised identifier, unique to that carton, which is a different field and usually a different label. Buyers often discover this after specifying GTIN and finding that two identical cartons are indistinguishable in their system.
Is this going to spread? It already is. The driver is that publicly funded and donor-funded health stock is high value, portable and resellable, and the losses are politically visible in a way that stockouts make undeniable. Any buyer who has had a diversion problem is a candidate for this requirement, and the direction of travel in medical device regulation has made the underlying capability more common on supplier side anyway.
Where we stand
Our nitrile examination gloves went into this consignment under those conditions, and the useful thing we take from it is not the delivery. It is that the requirement arrived as a packing specification rather than as a documentation request, and that suppliers who treat traceability as a certificate to be issued will meet this kind of clause late and badly.
For a buyer, the lesson is narrower and more useful: put the identifier question in the specification, with the four answers above written down, and ask for one scannable label before you award. It costs a bidder almost nothing to prove and it tells you more than any assurance in a tender response.
Sources
CMAM, "CMAM, I.P. reforça rastreabilidade e controlo dos medicamentos com nova identificação desde o fornecedor", 14 September 2026. President Daniel Chapo, public statement of 20 September 2026, quoted in the original Portuguese. Corroborating coverage in Diário Económico, O País and AIM, 14 September 2026. The MDCG position on UDI assignment is summarised in our own MDR article and cited there to the Commission document.
Seventeen years sourcing and supplying medical gloves and PPE to governments, UN agencies, NGOs and healthcare systems. Writes on glove standards, quality management and responsible sourcing for institutional buyers, working from the source standards rather than secondary summaries.
View profile on LinkedIn
