QRS Quality · ISO 13485
ISO 13485 Medical Devices
ISO 13485 is a medical-device quality management system standard for regulatory purposes. It addresses the organisation’s actual device-lifecycle role. A system certificate is not CE marking, device market authorisation or an exemption from regulatory inspection. QRS reviews the actual application and offered assessment scope; confirm the named programme and current authority before engagement. Client-specific consultancy cannot be equated with impartial certification.
Define role, devices and regulatory responsibilities
Specify whether the organisation designs, manufactures, supplies components, installs or services devices. Identify device families, sites, outsourced work and relevant market requirements. Do not assume a supplier carries every obligation of the finished-device manufacturer. Explain design responsibility and any permitted applicability limits against the standard and actual role. The application scope must describe the activities assessed, not suggest approval of every device sold.
Trace a device record through its controls
Connect product requirements, risk-related decisions, supplier controls, production records, acceptance and traceability. In a hypothetical component substitution, check whether the new material affects an approved design, process or regulatory file before release. Where process results cannot be fully verified afterwards, examine the applicable validation needs. A finished-product inspection does not automatically replace that evidence, and the test programme for an unknown device is not invented here.
Review complaints, changes and market boundaries
Link complaint assessment to the device or batch, investigation, corrective action and any applicable regulatory reporting. Retain competence, internal audit and management-review evidence. In the USA, FDA’s QMSR took effect on 2 February 2026 and incorporates ISO 13485:2016; an ISO certificate does not replace FDA requirements or inspection. EU MDR/IVDR and CE routes are separate. Device families, special processes, sites and outsourced work affect audit planning and the quotation.
Application, independent decision and quotation
Supply the legal entity, actual activities, locations, workforce, shifts, supplier dependencies and existing records. Verify the proposed programme, edition and the certification body’s current scope. Initial audit stages, findings and corrective-action evidence precede a separate impartial decision; ISO does not issue certificates. Distinguish implementation and any testing costs from independent assessment, surveillance, recertification, travel and follow-up. Missing records or unresolved actions affect the calendar; neither a paid application nor an audit report guarantees certification.
Official sources and application limits
The operating examples are hypothetical, not customer events or guaranteed decisions. The actual standard and competent body determine requirements.