An ISO 13485 medical device QMS is the quality management system standard for organisations that design, produce, install, or service medical devices. Because patient safety is at stake, the ISO 13485 medical device QMS is far more prescriptive than a general quality standard — emphasising risk management, traceability, and regulatory compliance across the product life cycle. This guide explains what it is, how it’s structured, its relationship with the FDA, and how to get certified.
What is ISO 13485?
ISO 13485:2016 specifies requirements for a quality management system where an organization needs to demonstrate its ability to provide medical devices and related services that consistently meet customer and regulatory requirements. It applies to organizations across the device lifecycle — design, production, storage, distribution, installation, and servicing — as well as their suppliers.
Its full title says it all: “Medical devices — Quality management systems — Requirements for regulatory purposes.” Unlike a general quality standard, ISO 13485 exists specifically to support regulatory compliance.
Why the ISO 13485 medical device QMS matters
- Market access. It’s expected or required by regulators worldwide, making it the key that unlocks global markets.
- Patient safety. Its risk-based, tightly-controlled approach helps ensure devices are safe and effective.
- Regulatory alignment. It underpins compliance with the EU MDR, the FDA’s Quality Management System Regulation, and Health Canada, among others.
- Customer confidence. Certification is independent proof of a controlled, auditable QMS.
Who is ISO 13485 for?
Medical device manufacturers of all sizes, plus the suppliers and service providers in their value chain — component makers, sterilization services, contract manufacturers, and distributors.
How the standard is structured
ISO 13485 is based on the familiar ISO 9001 quality framework, but it retains the clause structure of earlier editions (Clauses 4–8) rather than the newer Harmonized Structure:
- Clause 4 — Quality management system (including the quality manual and medical device file)
- Clause 5 — Management responsibility
- Clause 6 — Resource management
- Clause 7 — Product realization (design controls, purchasing, production — the largest clause)
- Clause 8 — Measurement, analysis and improvement (complaints, CAPA, reporting to authorities)
What makes ISO 13485 distinctive
- Regulatory purpose first. Everything is oriented toward meeting regulatory requirements.
- Risk management throughout. Risk (per ISO 14971) runs across the entire product realization process — see our guide to risk management and ISO 14971.
- Heavier documentation. A quality manual and medical device file are required, and records are extensive.
- Maintain effectiveness rather than the broader “continual improvement” emphasis of ISO 9001 — more on that in our ISO 13485 vs ISO 9001 comparison.
Skip the blank page.
The ISO 13485 Toolkit gives you the full medical-device QMS — quality manual, procedures, design controls, risk management, and CAPA templates — as fully editable, auditor-written files mapped to ISO 13485:2016.
The documentation you’ll need
ISO 13485 is documentation-intensive — quality manual, procedures, design records, and more. See the full breakdown in the complete documentation checklist.
ISO 13485 and the FDA
US medical device regulation now aligns closely with ISO 13485 through the FDA’s Quality Management System Regulation. We explain what that means in our guide to ISO 13485 and the FDA QMSR.
Getting certified
Certification follows a structured route: build the QMS, operate it, run an internal audit and management review, then pass a two-stage external audit. We walk through it in our guide to the ISO 13485 certification process.
Who needs an ISO 13485 medical device QMS
An ISO 13485 medical device QMS is essential for medical device manufacturers, but its reach is wider: component suppliers, contract manufacturers, sterilisation providers, and companies offering design, distribution, or servicing all commonly need it. In many markets certification is effectively mandatory to place devices on the market or to win supply contracts. The standard is published by ISO, and because regulators worldwide recognise it, an ISO 13485 medical device QMS is often the foundation on which market access is built.
How to get started
The fastest path is to start from a complete, correctly-structured QMS — quality manual, procedures, design controls, risk management, and CAPA — then tailor it to your device and processes.
Skip the blank page.
The ISO 13485 Toolkit gives you the full medical-device QMS — quality manual, procedures, design controls, risk management, and CAPA templates — as fully editable, auditor-written files mapped to ISO 13485:2016.