ISO 13485
Quick facts
| Category | Medical device-specific quality management standard |
|---|---|
| Used by | Medical devices and related life sciences manufacturing |
| Also called | None widely standardized |
| Related standards | ISO 9001, FDA 21 CFR Part 820, EU MDR, ISO 14971 |
| Related processes | Design controls, risk management, document control, CAPA, complaint handling |
| Semantic match | ISO 13485, medical device quality management, ISO 13485 certification, medical device QMS standard |
What is ISO 13485?
ISO 13485 sets out quality management system requirements specifically for organizations across the medical device supply chain, including manufacturers, suppliers and service providers involved in a device's lifecycle.
While structured similarly to ISO 9001, ISO 13485 differs in several key ways: it does not require the same explicit continual improvement commitment, focusing instead on effective implementation and maintenance of the QMS, and it removes ISO 9001's customer satisfaction emphasis in favor of medical device-specific priorities such as risk management, design controls and regulatory compliance.
ISO 13485 places strong emphasis on risk management throughout the product lifecycle, often referencing ISO 14971 for medical device risk management specifically, and requires robust traceability connecting design, production and post-market activities.
Why is ISO 13485 important?
ISO 13485 certification is often a prerequisite for selling medical devices in many global markets, including alignment with EU MDR requirements, making it essential infrastructure for medical device manufacturers and their suppliers.
The standard's strong emphasis on risk management and design controls reflects the elevated stakes of medical device quality, where failures can directly affect patient safety rather than only customer satisfaction.
For organizations operating internationally, ISO 13485 provides a globally recognized framework that can streamline regulatory submissions and audits across multiple markets requiring similar quality system evidence.
How does ISO 13485 work?
ISO 13485's key requirements include:
- QMS documentation. Maintain a quality manual and documented procedures specific to medical device processes.
- Design controls. Follow a structured design and development process with defined inputs, outputs, verification and validation.
- Risk management. Apply risk management throughout the product lifecycle, often per ISO 14971.
- Traceability. Maintain traceability of components, materials and processes throughout production.
- Complaint handling. Establish a defined process for evaluating and responding to customer complaints.
- Regulatory compliance. Ensure the QMS supports applicable regulatory requirements in each market served.
ISO 13485 vs. ISO 9001
| Comparison | ISO 13485 | ISO 9001 |
|---|---|---|
| Industry focus | Medical devices specifically | General-purpose, any industry |
| Risk management emphasis | Strong, throughout product lifecycle | General risk-based thinking |
| Continual improvement | Not explicitly required | Explicitly required |
Real-world examples of ISO 13485
A medical device manufacturer maintains ISO 13485 certification to support sales into the European market, aligning its QMS with both the standard and EU MDR requirements.
A contract manufacturer serving multiple medical device clients builds its quality system around ISO 13485 from the outset, recognizing the certification as essential to winning business in this sector.
A components supplier to medical device manufacturers pursues ISO 13485 certification specifically because several key customers require it as part of their supplier qualification criteria.
Regulations and standards related to ISO 13485
ISO 13485 aligns closely with FDA's Quality Management System Regulation for medical devices in the United States and supports compliance with EU MDR requirements for the European market, though organizations should confirm the specific regulatory expectations for each market they serve.
The standard is frequently used alongside ISO 14971 for risk management and often integrated with broader design control and traceability expectations specific to medical devices.
How QT9 helps with ISO 13485
QT9 QMS ISO 13485 capabilities
- Automate design controls, risk management and complaint handling required under ISO 13485.
- Maintain full traceability from design through production and post-market activities.
- Provide pre-validated, audit-ready documentation for faster certification readiness.
- Support electronic signatures and complete audit trails.
- Integrate seamlessly with QT9 ERP for connected device history and traceability.
- Align workflows with EU MDR and FDA regulatory expectations.
See QT9 Software in Action
Discover how QT9 Software helps manufacturers improve efficiency, strengthen compliance and connect quality management and ERP processes within one integrated platform.
Common mistakes with ISO 13485
Common mistakes include treating ISO 13485 as simply "ISO 9001 for medical devices" without recognizing its distinct emphasis on risk management and design controls specific to device safety.
Other problems include failing to maintain the traceability rigor the standard expects, which can create significant gaps if a quality issue later requires tracing back through the device's design and production history.
Frequently asked questions
Related quality management terms
Related content
Ready to Transform Your Business?
See how QT9 Software helps manufacturers simplify operations, improve traceability and drive continuous improvement with integrated quality management and ERP software.