Partition the function before selecting hardware
A medical AI system may acquire input on a device and perform selected processing on a nearby server or remote platform. Decide which functions belong at each location and why. Model execution, input preparation, validation, and presentation are distinct stages. The intended use and supported product configuration should guide the architecture. Moving computation to an edge server does not itself demonstrate lower risk, faster complete workflows, or an improvement in clinical performance.
Keep version relationships explicit
The acquisition software, preprocessing rules, model artifact, and receiving application may depend on one another. Record compatible combinations and prevent unsupported pairings from running silently. A result should be traceable to the configuration that produced it, using appropriate records without unnecessary sensitive content. If a server supports multiple devices, verify how each is identified and authorized. Shared processing capacity should not obscure which device generated the input or which output belongs to a particular workflow.
Validate the interface as part of the product
FDA’s interoperability guidance emphasizes interface purpose, risk management, and verification. Apply those ideas to network APIs and device gateways, not only physical connectors. Test invalid inputs, interrupted transfers, duplicate requests, and unavailable processing. Define whether the system retries, queues work, or reports a failure. A local network can still fail, and a nearby processor can still become overloaded. The architecture needs supported behavior for those conditions rather than an assumption that proximity eliminates them.
Review changes across the whole chain
An updated model or runtime can change behavior without altering the device’s physical hardware. Determine the relevant verification and regulatory assessment for each modification. FDA’s PCCP guidance describes an approach for certain planned AI-device changes within a defined authorization framework. It does not make every future update acceptable. A reliable device-to-edge design preserves evidence, configuration control, and clear responsibilities across components so computing choices remain accountable throughout the product lifecycle.

