ISO 13485 Certification in Nigeria: The Complete Guide for Device Companies
Published
Looking for the best ISO 13485 certification body in Nigeria? There is no single “best” certification body. The right choice is a certification body that is accredited by a recognised accreditation body, has auditors with medical device experience, remains impartial, and does not provide consultancy to the same client. For ISO 13485 certification Nigeria, compare accreditation status, auditor competence, audit programme, and certificate recognition before making a decision.
Key takeaways
● ISO 13485 audits your quality system. It doesn’t approve your product.
● It isn’t NAFDAC registration, and it doesn’t replace it.
● Importers, distributors and storage providers can be certified too.
● Check a certification body’s accreditation before you commit.
What is ISO 13485 certification in Nigeria?
ISO 13485 is a Quality Management System Standard for organisations in the Medical Device life cycle. Certification means an independent body has audited your system against it. Designers, manufacturers, importers, distributors, storage providers and servicing firms can all be certified. The standard itself makes certification voluntary.
It covers document control, risk management, supplier checks, traceability and complaints. It looks like ISO 9001 but adds rules specific to medical devices.
Why does ISO 13485 matter for device companies in Nigeria?
ISO 13485 certification gives buyers and partners independent evidence that your quality system works. Hospitals, procurement teams and foreign suppliers may ask for it. Importers and cold-chain operators can use it to show control over storage and traceability. It doesn’t guarantee sales or regulatory approval.
Tip: Decide your scope first. Choose which activities (import, storage, distribution, manufacture) the certificate will cover before you write any procedure.
Is ISO 13485 the same as NAFDAC registration?
No, ISO 13485 certification isn’t NAFDAC registration, a licence or a product approval. It audits your quality system, not an individual product. It also doesn’t automatically meet every Nigerian legal or NAFDAC obligation. Check current NAFDAC requirements separately and keep them in your regulatory register.
NAFDAC regulates medical devices in Nigeria (It is suggested to check the current rules, registration categories and import requirements). The Standards Organisation of Nigeria (SON) also works on standards and conformity. Treat both as separate checks.
What does ISO 13485 require?
ISO 13485 certification in Nigeria requires a documented quality system that controls how medical devices are designed, made, stored and distributed. Auditors look for risk management, supplier control, traceability, complaint handling and corrective action. What applies depends on your role.
● Documentation: quality manual, procedures, records, and control of both.
● Management: quality policy, objectives, management review.
● Regulatory tracking: a current list of the rules that apply to you.
● Risk management: across the whole product life cycle.
● Resources: trained staff, suitable premises, contamination control.
● Purchasing: supplier evaluation and monitoring.
● Production and service: validation, identification, traceability.
● Storage and distribution: handling and cold-chain controls.
● Feedback: complaints, reporting to authorities, corrective action.
● Internal audits: planned, with findings closed.
Which parts of ISO 13485 apply to your business in Nigeria?
Not every company in the medical device chain does the same work, so not every part of the standard applies to everyone.
● Manufacturers: You must control product design if you design the device yourself. You must also control suppliers, tracking, storage and complaints.
● Importers: You don’t need to control product design if you only bring devices into Nigeria and don’t design them. You must still control suppliers, tracking, storage and complaints.
● Distributors: You don’t need to control product design if you only sell and deliver devices. You must still control suppliers, tracking, storage and complaints.
● Storage providers: You don’t need to control product design if you only store devices for others. You must still control suppliers, tracking, storage and complaints.
In simple words, these four things apply to every business:
● Suppliers: Check that the people you buy from are reliable.
● Tracking: Know where each product came from and where it went.
● Storage: Keep products at the right temperature and in safe conditions.
● Complaints: Record every complaint and follow it up.
If you don’t design devices, you can leave out the design part of the standard. You must explain why, and the auditor will check your reason.
Tip: Auditors follow evidence. If a procedure says you do something, expect a request for the record that proves it.
How does the ISO 13485 certification process work in Nigeria?
The process of ISO 13485 certification in Nigeria runs from scope definition through two audit stages to a certificate decision, then surveillance audits. You build and run the system yourself. The certification body only audits it and can’t help you build it. Cycle lengths follow accreditation rules.
Define your scope.
Build your quality system.
Run an internal audit.
Hold a management review.
Stage 1 audit: the auditor reviews your documents and readiness.
Stage 2 audit: the auditor checks the system in practice.
Certificate decision.
Surveillance audits during the certificate cycle.
Recertification.
How should a company choose an ISO 13485 certification body?
Choose an accredited body for ISO 13485 by an accreditation body recognised under the IAF arrangement. Check that its auditors know medical devices. Confirm it’s impartial and has clear audit, complaint and appeals processes. Then verify everything in public directories.
● Accreditation covering ISO 13485 or medical device scope (VERIFY whether the Nigeria National Accreditation Service (NiNAS) currently accredits for it).
● Auditors with medical device experience.
● No advisory work for the same client.
● A transparent audit programme and appeals route.
● A certificate your buyers, regulators and foreign partners accept.
To verify accreditation, search the accreditation body’s public directory for the certification body’s name and scope.
What do auditors check first at a device company?
Auditors commonly start where systems and reality drift apart. They want to see that written procedures match daily work and that records prove it.
● A quality manual that doesn’t match what happens on the floor.
● Records that can’t be traced to a batch or serial number.
● Suppliers who were never qualified.
● Storage temperatures with no monitoring.
● A complaint log with no follow-up.
● Training records that don’t match job roles.
● Internal audit findings that never close.
How should a company prepare for an ISO 13485 audit in Nigeria?
Check your own records before the auditor does. Compare what your procedures say with what your staff actually do. Fix any gaps you find. Then go through this checklist:
● Scope statement
● Procedures and records
● Risk management file
● Supplier list and evaluations
● Training and competence records
● Calibration and maintenance records
● Temperature and storage logs
● Complaint and corrective action records
● Internal audit results
● Management review records
● Regulatory register, including NAFDAC and other applicable requirements
You can also read: ISO 45001 for workplace health and safety, which many device and storage sites also use.
What Nigeria-specific points should device companies check?
Confirm each point below with the official body before you rely on it.
● NAFDAC requirements for registering and importing your device type.
● SON conformity requirements, if they apply to your product.
● Federal Ministry of Health requirements for your sector.
● Whether NiNAS accredits certification bodies for ISO 13485.
● Any fees or timelines. Don’t assume them.
ISO 13485 certification doesn’t replace any of these. And it is advised to verify the above mentioned points.
Conclusion
ISO 13485 certification shows your quality system works. It isn’t a product approval, and it sits beside NAFDAC rules rather than replacing them. Define your scope, keep records that prove your procedures, and test traceability before the audit. When you choose a certification body, check accreditation and impartiality first. SIS Certifications is an independent certification body. It audits systems and issues certificates, but it doesn’t help companies build them.
FAQ
Q: What is ISO 13485 certification?
A: ISO 13485 certification is independent confirmation that an organisation’s quality management system meets the ISO 13485 standard for medical devices. An accredited certification body audits the system and issues the certificate. It applies to organisations anywhere in the medical device life cycle, including makers, importers, distributors and storage providers.
Q: Is ISO 13485 mandatory in Nigeria?
A: The ISO 13485 standard itself makes certification voluntary. However, buyers, hospitals, foreign partners or regulators may still ask for it. Check the current requirements with NAFDAC before you decide.
Q: Is ISO 13485 the same as NAFDAC registration?
A: No, ISO 13485 certification audits your quality system, while NAFDAC registration is a separate regulatory step for your products or business. One doesn’t replace the other. Keep both in your regulatory register.
Q: Can importers and distributors get ISO 13485 certification?
A: Yes, importers and distributors can be certified for the activities they carry out, such as importing, storing and distributing devices. They usually leave out the design and development part of the standard, but they must give a reason for doing so.
Q: How do I choose an ISO 13485 certification body in Nigeria?
A:Choose a certification body that is accredited for ISO 13485 and has auditors with medical device experience. Check its accreditation and scope in the accreditation body’s public directory. Also confirm it is impartial and doesn’t offer consultancy to the same client. SIS Certifications is an independent certification body that audits management systems and issues certificates. It doesn’t help companies prepare for audits
Need help getting certified?
Talk to a SIS Certifications specialist about the standards covered in this blog.
Get My Free Quote →