ISO 13485
International standard for medical device quality management systems.
Definition
ISO 13485:2016 specifies requirements for a quality management system where an organization needs to demonstrate its ability to provide medical devices and related services that consistently meet customer and applicable regulatory requirements.What this means in practice
ISO 13485 is referenced or required by regulators worldwide, including the EU (under MDR/IVDR) and Health Canada. FDA's Quality Management System Regulation (QMSR), effective February 2, 2026, explicitly incorporates ISO 13485:2016 by reference, replacing the previous 21 CFR Part 820 Quality System Regulation. Certification is issued by accredited third-party registrars and is renewed on a three-year cycle with annual surveillance audits.Examples
- A Class II diagnostic manufacturer maintaining a single ISO 13485 QMS used to satisfy FDA QMSR, EU MDR, and Health Canada requirements.
- A contract manufacturer holding ISO 13485 certification to support MDSAP audits across five participating regulators.
Use cases
1 scenarioContract manufacturer onboarding a new medical device customer
Quality ManagerA CMO holds an ISO 13485 certificate from a notified body. A new EU MDR customer audits the QMS, confirms design transfer, supplier control, and CAPA processes meet the standard, and adds the CMO to their approved supplier list.
- •Treating ISO 13485 certification as proof of regulatory approval. Certification confirms QMS conformity; individual products still require the appropriate marketing authorization (510(k), PMA, CE mark, etc.).
- •Copying an ISO 9001 QMS without adding medical-device-specific requirements (design controls, risk management, UDI, post-market surveillance, complaint handling).
- •Weak supplier controls. ISO 13485 expects documented supplier evaluation, monitoring, and re-evaluation proportional to component risk.
- •Under-scoping the QMS. Software design, cybersecurity, and contract-manufacturer activities all fall within scope when they affect the finished device.
Frequently asked questions
Cross-references
Used by
Things that build on this term.
Contains
Sub-elements or required artefacts of this term.
Overlaps with
Covers some of the same ground; not interchangeable.
Related terms
Grouped by themeEditor's picks
· Hand-selected related conceptsInternational standard for the application of risk management to medical devices.
Structured process governing the design of medical devices.
FDA's harmonized successor to the QSR, incorporating ISO 13485:2016 by reference.
Systematic process to investigate and resolve quality issues and prevent recurrence.
QMS Foundations
· From this learning pathFDA's current good manufacturing practice (cGMP) requirements for medical devices.
Process for receiving, evaluating, and responding to device complaints.
Compilation of records describing the design history of a finished device.
Notice of inspectional observations issued at the conclusion of an FDA inspection.
Standards Stack for Medical Devices
· From this learning pathGeneral requirements for basic safety and essential performance of medical electrical equipment.
EMC requirements for medical electrical equipment.
Lifecycle requirements for medical device software.
Application of usability engineering to medical devices.
Primary references
3 sources- 1
ISO 13485:2016VerifiedISOiso.org
- 2
FDA Quality Management System Regulation (QMSR)UncheckedFDAfda.gov
- 3
FDA Recognized Consensus StandardsVerifiedFDAaccessdata.fda.gov
Inline markers like [1] jump to the matching reference above.