The generic answer is no.
ISO 14971 is worried with the interaction between the final device and people/property/environment, as seen in the figures of the first question of this FAQ. If you do not have the “full picture” of the device design (and lifecycle design) you really cannot perform a medical device risk management process by ISO 14971.
However, you can contribute to the device risk management as performed by the device “owner”. For example, if you perform a third party sterilization process, your process will have to be included in the risk management process of the device “owner” and for it to be effective you need to give your inputs to the device “owner”. The same rationale can be applied to a distributor or supplier of components or parts.
