Share this
by Angela O'Sullivan on October 29, 2026
Medical device manufacturers comparing ISO 9001:2026 vs. ISO 13485 usually want to know two things: how the standards differ and whether the new ISO 9001 edition changes their compliance obligations. The short answer is that the standards share a foundation but serve different purposes, and ISO 9001:2026 does not change ISO 13485 requirements.
Two internationally recognized standards help medical device organizations establish structured quality management systems: ISO 9001 and ISO 13485. Although they share many principles, their requirements and intended applications differ.
The distinction has become particularly relevant in 2026, following the publication of ISO 9001:2026 and the implementation of the new U.S. Food and Drug Administration (FDA) Quality Management System Regulation (QMSR).
For medical device manufacturers evaluating ISO 9001 vs 13485, understanding these differences is essential for maintaining compliance, avoiding duplicated efforts and building a quality management system that supports changing requirements.
Contents
What is the difference between ISO 9001:2026 and ISO 13485?
ISO 9001:2026 vs. ISO 13485: How do the requirements compare?
What changed in ISO 9001:2026?
Does ISO 9001:2026 affect ISO 13485 compliance?
Why ISO 13485 matters even more in 2026
Can a manufacturer be certified to both ISO 9001 and ISO 13485?
How to manage ISO 9001:2026 and ISO 13485 requirements together
ISO 9001 vs. ISO 13485: Maintaining compliance with evolving standards
What is the difference between ISO 9001:2026 and ISO 13485?
The primary difference between ISO 9001 and ISO 13485 is scope: ISO 9001 applies to any industry, while ISO 13485 is written for medical device organizations and their unique regulatory obligations.
ISO 9001 is an international quality management standard applicable to organizations across industries. It emphasizes customer satisfaction, process effectiveness, continual improvement and consistent product or service quality.
ISO 13485, by comparison, establishes quality management requirements specifically for organizations involved in the medical device life cycle. Its requirements place greater emphasis on regulatory compliance, risk management, documentation, product traceability and process validation.
Both standards are widely recognized. According to a 2025 ISO Survey, there were over 1.6 million valid ISO 9001 certificates worldwide, compared with 36,522 ISO 13485 certificates.
ISO 9001:2026 vs. ISO 13485: How do the requirements compare?
Although ISO 9001 and ISO 13485 both establish requirements for quality management systems, they serve different purposes. ISO 9001 provides a framework for consistently meeting customer and applicable statutory and regulatory requirements, enhancing customer satisfaction and continually improving quality management processes.
ISO 13485 builds on established quality management principles with requirements specifically developed for medical device organizations, emphasizing regulatory compliance, risk management, traceability and process validation.
Risk management
ISO 9001 requires organizations to address risks and opportunities that could affect QMS outcomes. ISO 13485 instead requires a risk-based approach to controlling QMS processes and documented risk management throughout product realization. Medical device manufacturers must also account for applicable product risk management requirements, often using ISO 14971 as a supporting standard.
Documentation and traceability
ISO 9001 allows flexibility in determining the documented information necessary for an effective QMS. ISO 13485 establishes more specific requirements for documenting medical device processes, maintaining records and supporting product traceability. This distinction matters when manufacturers must demonstrate that products were manufactured under controlled conditions.
Continual improvement vs. regulatory compliance
ISO 9001 makes continual improvement an explicit, overarching QMS objective. ISO 13485 focuses on maintaining an effective QMS that meets regulatory requirements, though Clause 8.5.1 still requires organizations to identify and implement changes needed to keep the QMS suitable, adequate and effective.
What changed in ISO 9001:2026?
ISO published ISO 9001:2026 on Sept. 16, 2026, replacing the 2015 edition. The revision keeps the established framework while placing more emphasis on:
-
Leadership and quality culture: Strengthening management's role in fostering an organization-wide commitment to quality and ethical behavior.
-
Risks and opportunities: Clarifying their distinction to encourage both risk prevention and proactive improvement.
-
Organizational effectiveness: Making requirements clearer and easier to apply.
-
Management system integration: Improving alignment with other ISO management system standards.
Organizations certified to ISO 9001:2015 have a three-year transition period and should confirm timelines with their certification bodies.
Does ISO 9001:2026 affect ISO 13485 compliance?
ISO 9001:2026 does not directly change ISO 13485 compliance requirements. ISO 13485:2016 remains the current edition, having been reviewed and confirmed by ISO in 2025.
Manufacturers certified only to ISO 13485 do not need to adopt ISO 9001:2026 changes, but the revision can have indirect effects. Manufacturers maintaining both ISO 9001 and ISO 13485 certifications should evaluate how the revised ISO 9001 requirements affect shared QMS processes.
For example, changes involving leadership, organizational risks and improvement opportunities may influence management review procedures, quality objectives or internal audits.
Companies supplying customers that require ISO 9001 certification may also need to review contractual and certification obligations.
Why ISO 13485 matters even more in 2026
On Feb. 2, 2026, the FDA's Quality Management System Regulation (QMSR) took effect for medical devices marketed in the U.S. The QMSR incorporates ISO 13485:2016 by reference into the FDA's medical device quality system requirements under 21 CFR Part 820, alongside additional applicable FDA provisions. This change aligns U.S. medical device manufacturing requirements more closely with internationally recognized quality management practices.
For manufacturers subject to the QMSR, maintaining systems that address ISO 13485 and applicable FDA-specific requirements should be more streamlined.
Can a manufacturer be certified to both ISO 9001 and ISO 13485?
Yes. Medical device manufacturers can maintain certification to both standards.
However, ISO 13485 certification does not automatically establish ISO 9001 certification, or vice versa. Organizations must independently demonstrate conformity with the requirements of each applicable standard.
Dual certification may benefit companies that manufacture medical devices alongside products serving other industries or that operate under specific customer requirements.
Separate quality systems can create duplicated documentation, inconsistent procedures and additional audit preparation. An integrated QMS allows manufacturers to establish common processes where appropriate while maintaining the controls required by ISO 13485.
How to manage ISO 9001:2026 and ISO 13485 requirements together
For medical device manufacturers, understanding the differences between ISO 9001 and ISO 13485 is only the starting point. Maintaining compliance requires translating applicable requirements into documented processes, assigned responsibilities and reliable quality records.
1. Assess existing QMS processes
Begin by reviewing current procedures against applicable requirements. Manufacturers certified to both ISO 9001 and ISO 13485 should identify overlapping processes and any gaps created by the 2026 ISO 9001 revision.
For manufacturers subject to the FDA's QMSR, this assessment should also account for FDA-specific provisions beyond the incorporated ISO 13485 requirements.
2. Coordinate supplier and quality partner activities
Medical device manufacturing frequently involves external suppliers, contract manufacturers and specialized service providers. Establishing clear responsibilities for supplier evaluations, quality agreements, nonconformance reporting and corrective actions helps maintain oversight across these relationships.
3. Connect compliance activities through technology
An electronic QMS can help manufacturers manage these activities without creating separate workflows for each standard. For example, integrated document control, training, CAPA and supplier management processes can support consistent execution across departments and external partners.
While technology cannot establish compliance on its own, a properly implemented QMS can help manufacturers maintain visibility and control as quality requirements evolve.
How QT9 QMS supports ISO 9001: 2026 and ISO 13485 compliance
Managing ISO 9001 and ISO 13485 requirements involves maintaining accurate documentation, coordinating quality processes and ensuring accountability across departments. QT9 QMS simplifies these responsibilities by centralizing quality management activities in one integrated electronic system.
With more than 28 included modules, QT9 QMS connects essential quality processes, eliminating the need to manage disconnected spreadsheets and separate applications.
Document control
QT9 QMS streamlines document control with electronic approval workflows, revision tracking and centralized access to controlled documents. When standards or regulatory requirements change, manufacturers can update procedures, maintain revision histories and ensure employees have access to current documentation.
Product design controls
QT9 QMS centralizes device design control activities, from design inputs and outputs to reviews, risk assessments and approvals. Configurable templates support Design History Files (DHFs) and custom development phases. Links to document control, engineering changes and FMEA enable end-to-end traceability throughout development.
Corrective and preventive action (CAPA)
QT9 QMS connects CAPA management with other quality processes, helping manufacturers document nonconformances, investigate root causes, manage corrective actions and track effectiveness. Centralized records improve traceability and simplify preparation for audits.
Employee training
QT9 QMS simplifies employee training management by tracking training assignments, completion and documentation. Its unlimited employee training portals help manufacturers maintain training records and ensure personnel stay informed when procedures change.
Supplier quality management
QT9 QMS centralizes supplier quality activities, including supplier evaluations and performance monitoring. Unlimited supplier portals support collaboration and communication, helping manufacturers maintain visibility into supplier-related quality processes.
Audits and management review
QT9 QMS streamlines audit management by organizing schedules, findings, corrective actions and supporting documentation. Connected quality data gives management greater visibility into quality performance and supports informed decisions.
For medical device manufacturers, QT9 QMS is also pre-validated, with capabilities that support 21 CFR Part 11 compliance and configurable functionality to fit their quality requirements.
By connecting documentation, training, CAPA, supplier management and audits within one platform, QT9 QMS helps manufacturers maintain control over quality processes, support ISO 13485 compliance and efficiently manage requirements associated with ISO 9001:2026.
ISO 9001 vs. ISO 13485: Maintaining compliance with evolving standards
The publication of ISO 9001:2026 does not change ISO 13485 compliance requirements. However, it does provide an opportunity for manufacturers to evaluate existing quality processes, strengthen risk management practices and reinforce a culture of quality and continual improvement. For organizations maintaining both certifications, understanding the updated requirements can help ensure their quality systems remain aligned with applicable standards.
QT9 QMS helps medical device manufacturers maintain control over quality processes while adapting to changing requirements. With integrated tools for document control, CAPA, training, audits and supplier quality management, QT9 QMS supports a more connected, efficient approach to maintaining quality and regulatory compliance.
Learn how QT9 QMS can help your organization manage medical device quality requirements and adapt to evolving standards.
ISO 9001:2026 - What Requires Action and What Does Not
