Resources
ISO 13485 & QMS
Articles on ISO 13485 and quality management systems: CAPA, internal audit, document control, management review and QMS requirements for medical devices.
15 articles
Validation of special processes under ISO 13485: sterilisation, welding, moulding
When a result can only be checked once the patient is exposed, final verification no longer suffices. Section 7.5.6 of ISO 13485 then requires upstream validation, structured into IQ, OQ and PQ.
The ISO 13485 management review: what it must really contain
Clauses 5.6.2 and 5.6.3 set out precise inputs and outputs. A review that records findings without deciding or allocating resources is non-compliant, and shows in five minutes of reading the minutes.
ISO 13485 supplier qualification: requirements, method, pitfalls to avoid
A supplier's ISO 13485 certificate attests to its QMS, never to its ability to meet your specifications. Clause 7.4 requires control proportionate to risk and a documented periodic reassessment.
Control of Nonconformities under ISO 13485: Procedure, Traceability, Closure
Clause 8.3 of ISO 13485 structures the handling according to when the nonconformity is detected, before or after delivery, and demands seamless traceability from finding to closure. A system nonconformity instead falls under the CAPA process of clause 8.5.2.
Document management under ISO 13485: document control without bureaucratic overkill
Thirty procedures that are kept up and actually followed beat a catalogue of two hundred nobody opens. Clauses 4.2.4 and 4.2.5 separate documents from records, with a two-year retention floor that the MDR extends for technical documentation.
Keeping an ISO 13485 QMS alive between two surveillance audits
Once the audit is over, the pressure eases and the QMS falls asleep: indicators abandoned, internal audits postponed, nonconformities left pending. Five routines, anchored in clauses 8.2.4, 8.5.2 and 5.6, keep the system alive instead of switching it back on three weeks before the auditor.
Subcontractors and service providers: what are the real obligations under ISO 13485?
Section 4.1.5 requires outsourced processes to be controlled in proportion to risk, without requiring the provider to be certified. Regulatory responsibility stays with the manufacturer under Article 10 of the MDR.
The link between ISO 13485 and MDR: how the two frameworks fit together
An ISO 13485 certificate attests to a compliant quality system, not to devices compliant with the MDR. The clinical evaluation under Article 61, the technical file, UDI and EUDAMED all remain outside the scope of the standard.
ISO 13485:2016 vs the 2003 version: the 7 structural changes to remember
The migration from the 2003 version of ISO 13485 to the 2016 version has often been reduced to a documentary reformatting. This is a mistake that auditors spot without difficulty. Seven structural changes distinguish the two texts: risk-based approach extended to the QMS, software validation, strengthened supplier control, explicit integration of regulatory requirements. A QMS genuinely compliant with the 2016 version does not look like a pre-March 2019 one.
ISO 13485 calibration and verification: what auditors really check in section 7.6
ISO 13485 section 7.6 distinguishes traceable calibration from internal verification. What auditors try to catch is something else: the procedure when equipment is found out of tolerance. Because every measurement taken since the last valid calibration must be reassessed, and the products concerned identified.
From zero to ISO 13485 certified: steps, realistic timelines and indicative budget
Between kickoff and certificate, a realistic SME counts twelve to eighteen months and a budget of 40,000 to 80,000 euros once the internal cost of the quality manager, which many forget, is included.
ISO 13485 process mapping: where to start when you begin from scratch
The costliest mistake is shaping the QMS around the standard's requirements rather than the company's real activity: clause 4.1 expects a process map faithful to the ground, not a theoretical ideal.
Corrective and Preventive Actions (CAPA): the most common audit mistakes
The lack of effectiveness verification is the most frequent gap among six mistakes that betray surface-level handling: root cause glossed over, immediate action disguised as corrective action, CAPAs never brought to management review.
ISO 13485 internal audit: programme, auditor training, use of results
An internal audit that surfaces no nonconformity is suspicious: over the three-year certification cycle, the programme covers every process, requires independent auditors and closes with a CAPA whose effectiveness is verified.
The 10 Most Frequent Nonconformities in ISO 13485 Certification Audits
A CAPA without root cause analysis, an expired calibration or missing software validation surface in nearly every ISO 13485 audit. Ten recurring nonconformities that can be neutralised before the certification body arrives.
Ready to secure your regulatory compliance?
Contact us to discuss your project. We will get back to you within 24 hours.