Guide
ISO 13485 - in brief
ISO 13485 is the international standard for quality management systems for medical devices. It sets out the requirements for organisations that design, manufacture, install, service or distribute medical devices - so that the devices are safe and meet regulatory requirements.
The current version is ISO 13485:2016. The standard is the basis of the quality system required by the Medical Devices Regulation (EU) 2017/745 (MDR), the In Vitro Diagnostic Medical Devices Regulation (IVDR) and, since 2 February 2026, the FDA requirements in the USA (QMSR). The certificate is issued by an independent accredited certification body; Baltov Consult is a consultant - we prepare your system and your team for the audit and for the assessment by the notified body.
Who is ISO 13485 for
The standard is for everyone in the medical device chain:
- Medical device manufacturers
- Manufacturers of in vitro diagnostic medical devices
- Manufacturers of components and materials
- Sterilisation and packaging companies
- Importers and distributors of medical devices
- Service companies for medical equipment
What ISO 13485 requires
The standard puts regulatory requirements at the centre: risk management throughout the life cycle (according to ISO 14971), control of design and development, process validation - for example of sterilisation - cleanrooms and contamination control, and traceability and identification of devices. Design must be planned and documented, and every step checked: verification confirms that the design outputs meet the design inputs, validation confirms that the device meets the needs of the user, and design transfer hands the project over to production. All records are collected in the project file - the first thing the auditor and the notified body ask to see.
Also required are supplier management, complaint handling and post-market surveillance, incident reporting, corrective and preventive action, technical documentation and detailed records - more documented procedures than in ISO 9001. Behind every line on the label there is a process in the system: the manufacturer’s details, the unique device identifier (UDI), the batch number and expiry date that allow the affected devices to be traced and recalled, the sterilisation method, the instructions for use and the CE marking.
The benefits
Without an ISO 13485 system, a device will struggle to reach the market: the system is the basis for conformity assessment under the MDR and IVDR and for markets such as the USA, Canada and the MDSAP countries. Under the MDSAP programme, a single audit covers the requirements of the USA, Canada, Brazil, Australia and Japan. The higher the risk class of the device, the stricter the assessment - from a declaration of conformity by the manufacturer for class I devices (with a notified body involved for sterile devices, devices with a measuring function and reusable surgical instruments) to the strictest assessment for class III, covering the quality system, the documentation for each device and the clinical data.
For patients and doctors, the system means safe devices; for the manufacturer, it means fewer complaints and recalls, smoother audits by notified bodies and regulators, and well-organised technical documentation.
How implementation works
- Gap analysisWe compare your system, devices and documentation with ISO 13485 and the regulatory requirements.
- Risk managementA risk management file according to ISO 14971 for each device.
- Processes and validationDesign, production, sterilisation, cleanrooms and process validation.
- Traceability and surveillanceUDI, complaints, post-market surveillance and incident reporting.
- Training and internal auditWe train your team and check the system in operation.
- Certification auditWe prepare your organisation for the audit by the certification body or notified body.
What you get
- A quality management system to ISO 13485:2016
- Risk management files
- Design and validation procedures
- A traceability and UDI system
- Procedures for complaints and post-market surveillance
- Supplier management
- A trained team and internal auditors
- Preparation for the certification audit
