Compliance

    AEM program documentation: what CMS actually requires

    June 3, 2026 8 min read

    An Alternative Equipment Maintenance (AEM) program lets a hospital deviate from manufacturer-recommended maintenance frequencies and procedures — but only with documented justification. CMS S&C Memo 14-07 and the Conditions of Participation §482.41 set the rules, and Joint Commission EC.02.04.03 and DNV PE.2 enforce them.

    Most citations are not for having an AEM program. They are for not being able to show, in writing, why a device is on AEM and how that decision was reached. This guide walks through the documentation you need.

    What CMS actually allows on AEM

    Hospitals can place most medical equipment on AEM, but four categories are excluded and must follow OEM recommendations: equipment subject to federal or state law requiring otherwise, equipment subject to a Medical Device Alert, new equipment without sufficient maintenance history, and medical laser devices.

    Imaging, radiation-producing equipment, and life-support devices can be placed on AEM but face heightened scrutiny — expect surveyors to ask for the risk analysis in detail.

    The documents your AEM program needs

    • Written AEM policy — signed by senior leadership, stating who can authorize AEM decisions and the review cadence
    • Equipment inventory — every device, with manufacturer, model, serial number, location, risk classification, and PM strategy (OEM vs. AEM)
    • Risk assessment per device or device family — including device function, physical risks, clinical application, incident history, and maintenance history
    • AEM strategy documentation — what the modified maintenance interval or procedure is and the evidence supporting it
    • Maintenance records — proof the AEM strategy is actually being followed and the equipment performance is acceptable
    • Annual program review — re-evaluation of failure rates, incident reports, and whether AEM is still appropriate

    The risk assessment — the document surveyors actually read

    A defensible AEM risk assessment answers four questions in writing:

    Surveyors do not expect a PhD thesis. They expect a one-page document per device family that a non-engineer could read and understand the rationale.

    1. What does this device do, and what happens to the patient if it fails?
    2. What is the documented failure rate over the last 24+ months?
    3. What does the OEM recommend, and what are we changing? (e.g., 12-month PM extended to 18 months)
    4. What evidence supports the change? (failure data, peer hospital benchmarks, OEM correspondence, AAMI guidance)

    Common citations and how to avoid them

    • No risk assessment on file — generate one even for "obvious" devices. A blank assessment is a citation.
    • AEM applied to excluded equipment — audit your inventory quarterly to catch lasers, MDA-affected devices, or new equipment that slipped onto AEM strategies.
    • No annual program review — schedule it on a calendar and document attendance. The review itself is the evidence.
    • Maintenance records do not match AEM strategy — if your AEM says "18-month PM" and the device is at 22 months, that is a finding.

    How to organize the records

    Surveyors typically request the AEM policy first, then a sample device inventory, then risk assessments for 3-5 randomly selected devices. The path from device-on-the-floor to its risk assessment should take you less than two minutes to walk through.

    Modern report and CMMS tools tie each service record back to the device record, where the AEM classification and risk assessment live. If your records are spread across PDFs in a shared drive, an Excel inventory, and a paper binder, you will get caught in a survey.

    Frequently asked questions

    Related

    Write reports in minutes, not half your day

    TESSA captures the work at the device and generates structured, defensible service reports. Free to start. No credit card.