ISO 13485 · Device makers, contract manufacturers and suppliers

Medical Devices certification

Quality management for medical devices

What ISO 13485 is

ISO 13485 is the quality standard built specifically for medical devices. It looks like ISO 9001 but adds strict rules for risk, traceability, cleanliness and record-keeping that regulators expect from anything that touches patients.

For US companies this standard connects directly to the FDA. The FDA has aligned its Quality Management System Regulation with ISO 13485, so a certified system maps closely to what the FDA inspects. Certification is also usually required to sell in Europe and Canada.

Every design choice, supplier and complaint has to be traceable. That documentation discipline is the biggest difference from ordinary quality systems.

How to get certified

  1. Define your device scope and the regulatory markets you sell into.
  2. Build the quality system with design controls, risk management and full traceability.
  3. Qualify suppliers and set up complaint handling and corrective action.
  4. Run the system, then complete an internal audit and management review.
  5. Choose a certification body experienced in medical devices and book the audits.
  6. Pass stage 1 and stage 2, then maintain through annual surveillance audits.

Always use an accredited certification body

In the US, look for a body accredited by ANAB. An accredited certificate is the one customers, regulators and buyers actually trust — and you can confirm any certificate through IAF CertSearch.

How much ISO 13485 costs

This is one of the more expensive standards to certify because audits are longer and auditors are specialists.

The figures here cover ISO 13485 only. FDA registration, 510(k) clearance and CE marking are separate and can dwarf the certification cost.

Design-heavy companies pay more than simple distributors, because design controls add audit time.

Calculate your cost range → Get free quotes →

Official and useful resources