What is ISO 13485?

ISO 13485 provides a structured quality management system for the design, development, production, storage, distribution, installation, servicing, and related support of medical devices. It can be used by legal manufacturers, contract manufacturers, sterilization providers, specification developers, distributors, and critical suppliers.

The standard addresses major quality-system processes such as:

• Management responsibility and quality planning
• Document and record control
• Personnel competence and infrastructure
• Design and development controls
• Risk-based product realization
• Supplier qualification and purchasing controls
• Production and process validation
• Identification, traceability, and preservation
• Complaint handling and regulatory reporting
• Internal audits, corrective action, and improvement

ISO 13485 is intended to help organizations demonstrate that their processes can consistently produce devices meeting defined requirements. It does not specify the technical performance requirements for every device; those are established through the device specification, risk management, applicable regulations, and product-specific standards.

Organizations may implement ISO 13485 without becoming certified. Certification involves an independent certification body assessing whether the quality system conforms to the standard. However, certification does not constitute product approval, market authorization, or automatic compliance with every national regulation. Manufacturers must still satisfy the specific registration, technical-documentation, labeling, vigilance, and post-market requirements of each target market.