What is the difference between ISO 9001 and ISO 13485?

ISO 9001 and ISO 13485 both establish requirements for quality management systems, but they serve different purposes.

ISO 9001:2026 applies to organizations of any size or sector. It emphasizes customer expectations, organizational performance, process effectiveness, improvement, leadership, quality culture, and management of risks and opportunities.

ISO 13485:2016 is specific to medical devices and related services. It focuses on consistently meeting regulatory and product requirements throughout the device lifecycle. Its requirements give particular attention to risk management, design controls, cleanliness, contamination control, sterile devices, traceability, process validation, complaint handling, and regulatory reporting.

Important distinctions include:

• ISO 9001 has a broad customer and business-performance orientation.
• ISO 13485 has a stronger medical-device safety and regulatory orientation.
• ISO 9001 emphasizes continual improvement of the QMS.
• ISO 13485 emphasizes maintaining QMS effectiveness and controlled regulatory compliance.
• ISO 13485 contains requirements specifically addressing medical-device production and post-market activities.
• Neither certificate provides product approval or market authorization.

A medical-device organization may maintain certification to both standards when commercially useful, but ISO 9001 certification does not substitute for ISO 13485 where the latter is required by customers or regulators. An integrated system can share document control, training, audits, management review, supplier management, and CAPA processes while preserving the distinct requirements of each standard.