Distribution simulation is where your packaging stops being a design on paper and starts being a box that gets dropped, stacked, and shaken. It is also where I see a lot of programs treat a serious performance test like a formality. They run a generic cycle, look for a burst pouch, and check the box.
That is not what the test is for. Distribution simulation under ASTM D4169 is your evidence that the sterile barrier system survives the physical reality of the supply chain. Get the cycle selection, the sequence, and the failure handling right, and it becomes a strength in your submission. Get them wrong, and you get an Additional Information request or, worse, a field failure.
This article is part of our ISO 11607 packaging validation guide. If you have not read the piece on accelerated aging versus real-time aging, read that one too, because the two tests are tightly coupled.
Where Distribution Simulation Fits in an ISO 11607 Program
ISO 11607-1:2019 requires you to demonstrate that the sterile barrier system and its protective packaging maintain integrity through the hazards of manufacturing, distribution, and storage (ISO 11607-1:2019). Annex B lists recognized test methods, but the standard is horizontal. It names the framework and leaves the operational parameters to you.
FDA does the same thing. Its guidance on sterility information in 510(k) submissions points you to the AAMI/ANSI/ISO 11607 series and asks you to describe your sterile barrier system and the package test methods you used to prove integrity (FDA Guidance, Submission and Review of Sterility Information in Premarket Notification (510(k)) Submissions for Devices Labeled as Sterile). It does not tell you which distribution cycle to run.
That gap is filled by ASTM D4169. It establishes a uniform basis for evaluating shipping units against the anticipated hazards of the distribution environment through a sequence of distribution cycles that combine handling (shock and drop), stacking (compression), and transportation (vibration) elements (ASTM D4169-22). D4169 is a general shipping-container practice, not a medical-device standard. It applies to your device because ISO 11607 recognizes it as a performance test method.
Selecting the Distribution Cycle and Assurance Level
Here is the mistake I see most often: teams pick a generic distribution cycle that has nothing to do with how their device actually ships. D4169 gives you multiple distribution cycles matched to real supply-chain scenarios. A single-parcel shipment through a carrier network is a different cycle than a palletized truckload moving between distribution centers. Your job is to select the cycle that matches your pathway and to justify that selection in the protocol.
Before you write the protocol, map the supply chain. How does the device leave your facility? Parcel or pallet? How many handoffs? Does it cross borders, sit in uncontrolled cargo environments, or ride in a temperature-controlled truck straight to a hospital? That map drives the cycle.
Then there is the Assurance Level. D4169 defines three (I, II, and III) that scale test intensity to the confidence you want, with Assurance Level II as the default severity when no specific level is specified (ASTM D4169-22). Assurance Level II is what most medical device manufacturers select, and that is the convention I recommend as a starting point. Just be clear that AL II is an industry practice, not a mandate written into the standard. If your device is high-value, fragile, or headed into a punishing distribution environment, you may need to justify a higher level. Document why you chose the level you chose.
What the Test Actually Includes
A D4169 distribution cycle strings together the three stress families your package will actually encounter:
- Shock (handling): Controlled drops that simulate the package being dropped, kicked, or set down hard during manual handling. Drop height scales with the weight of the shipping unit.
- Vibration (transportation): The package is run on a vibration table against a random vibration profile that represents truck, rail, or air transport. This is the stress that works seals loose over time and abrades materials against each other.
- Compression (stacking): A static or dynamic load simulating the weight of other packages stacked on top during warehousing and transit.
One element that gets skipped is atmospheric and altitude conditioning. If your primary sterile barrier is a non-porous material, the low pressure of air transport can stress or rupture it. If the device has closed cavities that trap air, expansion at altitude can be a problem. Worst-case thinking here is what keeps you out of trouble later.
How to Sequence Distribution Relative to Aging and Integrity Testing
Distribution simulation does not stand alone. The sequence you run it in determines whether your data reflects the package as it will actually exist on a hospital shelf. The sequence I run is:
- Heat seal qualification (IQ/OQ/PQ)
- Sterilize the samples
- Distribution simulation (ASTM D4169)
- Accelerated aging (ASTM F1980), with real-time aging running in parallel
- Integrity and seal-strength testing on the fully conditioned samples
The order matters because the package needs to survive the combined stresses, not each one in isolation. A sample that skipped sterilization or transit before aging is not representative of the real product.
Accelerated aging under ASTM F1980 uses elevated temperature, and optionally humidity, with the Arrhenius relationship to estimate the effect of time on sterile barrier stability, and it should be backed by concurrent real-time aging (ASTM F1980-21). F1980 covers aging only. It says nothing about transport stress, which is exactly why you need D4169 alongside it.
The final step is where the answer actually lives. Run ASTM F88 seal strength (peel force) on the conditioned samples, not just on fresh ones off the line (ASTM F88/F88M-21). Pair the seal-strength data with whole-package integrity methods: ASTM F1929 dye penetration for seals with a porous material, and ASTM F2096 internal pressurization bubble leak for gross leaks (ASTM F1929-23 and ASTM F2096-11(2019)). F2096 only catches gross leaks above its threshold, so use it alongside seal strength and dye penetration, not instead of them.
When a Distribution Test Fails
A failed distribution simulation is a nonconforming result, and it needs to be handled like one. Under ISO 13485:2016, which the FDA QMSR now incorporates by reference, packaging falls under production and process controls, and a failed validation result has to move through control of nonconforming product and, where warranted, corrective and preventive action (ISO 13485:2016 Clause 7.5, Clause 8.3, Clause 8.5.2/8.5.3). Document the nonconformance the moment it happens.
The wrong move is to quietly re-run the test until it passes. That is not an investigation, and an auditor will read it as one.
Investigate the root cause first. Was the failure a seal channel, a material puncture, a burst, or abrasion from vibration? Where on the package did it occur? Was it a design weakness, a process drift in the sealer, a protective-packaging gap, or a distribution cycle that was actually more severe than your pathway warrants? The physical failure mode usually points you at the answer.
Once you understand the cause, the disposition follows from it. A material or seal design weakness means a design change and full revalidation. A process issue means going back to seal qualification. A protective-packaging gap might mean adding restraint or dunnage. If you genuinely selected too severe a cycle, you rejustify the selection against your mapped supply chain, but that argument has to be defensible, not convenient. ISO 11607-1:2019 also adds explicit revalidation requirements triggered by changes to the product, packaging, or process (ISO 11607-1:2019), so any change you make in response to a failure loops you back through validation.
Document the deviation, the investigation, the root cause, and the disposition so a reviewer can follow the whole thread without picking up the phone. A clean, traceable failure investigation is a confidence signal. A re-run with no explanation is a red flag.
The Short Version
Distribution simulation is not a checkbox. Map your supply chain, select and justify the D4169 distribution cycle and Assurance Level (usually AL II) that match it, run it in sequence with sterilization and aging, and verify seal integrity on the conditioned samples. When something fails, investigate the root cause and disposition it through your quality system. Do that, and this becomes the part of your validation that reviewers trust.