Other meanings of ISO 13485
Medical-device quality management
ISO 13485 is the international standard for quality management systems in medical-device organizations. It specifies processes for consistently meeting customer and regulatory requirements across design, production, servicing, and related activities, with particular emphasis on risk, traceability, documentation, and regulatory control.
ISO 13485 establishes a quality management system for organizations involved in one or more stages of the medical-device life cycle. It applies to activities such as design and development, production, storage, distribution, installation, servicing, and associated services. The standard is intended to help an organization consistently meet customer and applicable regulatory requirements, rather than merely test finished products. 1
The standard can apply to manufacturers, contract manufacturers, sterilization providers, distributors, importers, and suppliers whose work affects device quality. Its requirements are scalable to the organization’s role and the risks of its products. Certification to ISO 13485 is performed by an independent conformity-assessment body; ISO itself does not issue certificates. Regulatory authorities may recognize or require the standard, but certification alone does not authorize a device for sale.
ISO 13485 organizes quality controls around documented processes, management responsibility, resource management, product realization, and measurement, analysis, and improvement. A compliant organization defines its processes, responsibilities, records, competence requirements, and controls for design changes, suppliers, production environments, equipment, and nonconforming product. 1
Risk management is integrated with product realization and other controls, while the depth of documentation and oversight should reflect the device and the organization’s activities. Important operational mechanisms include design verification and validation, software validation where applicable, complaint handling, adverse-event reporting, corrective and preventive action, internal audits, and management review. The standard also expects controls over outsourced processes rather than treating outsourcing as a transfer of responsibility.
ISO 13485 supports regulatory compliance, but it does not replace the laws of the market in which a device is supplied. The European Union’s Medical Device Regulation, for example, imposes additional requirements for conformity assessment, clinical evidence, post-market surveillance, and vigilance. 2 In the United States, the Food and Drug Administration’s Quality Management System Regulation incorporates ISO 13485:2016 by reference while retaining U.S.-specific provisions and terminology.
ISO 13485 differs from ISO 9001 in purpose and emphasis. ISO 9001 is a general quality-management standard, whereas ISO 13485 is tailored to medical-device regulatory control and generally does not center on broad customer-satisfaction objectives. Organizations may use both standards, but one certificate does not automatically demonstrate conformity with the other.
ISO 13485 reaches beyond the factory floor because suppliers, outsourced processes, and post-market information can directly affect device safety. Organizations must evaluate and control external providers according to the impact of their products or services, maintain appropriate purchasing information, and preserve traceability when regulations or device risk require it. 1
Less visible requirements can be decisive during an audit: controls for contamination and cleanliness, infrastructure and work-environment conditions, preservation during handling and delivery, installation records, and service reports. The standard also addresses sterile-barrier and sterile-device processes through validation and monitoring where relevant. A documented procedure is not sufficient by itself; records must show that processes were performed, reviewed, and kept effective. International regulators use the standard alongside market-specific rules and inspection programs, so an organization often maps each clause to several legal obligations.
ISO 13485:2016 is a requirements standard for medical-device quality management systems; certification, regulatory authorization, and product conformity are separate determinations.
Help improve the encyclopedia. Reports go straight to the site manager.