Get Your ISO 13485 Quote
ISO 13485 Certification the system that opens markets
A notified body, a distributor or a national regulator has asked for your quality system certificate. ISO 13485 is the medical device quality management standard that request refers to. It covers design controls, process validation, sterile barrier integrity, traceability to component level and what happens after the device leaves your building.
You need ISO 13485 if…
- !The technical documentation review is on hold until a notified body sees your quality management system certificate.
- !You are registering a device in a new market and the dossier requires a certified quality system.
- !A hospital tender or distributor agreement lists ISO 13485 as a precondition for supply.
- !You have moved from contract assembly into holding your own design responsibility, and design controls now apply.
- !A pharmaceutical business has added a delivery device, prefilled syringe or diagnostic kit alongside its GMP operation.
- !After a field action, nobody could show the authority when the complaint was received, assessed and reported.
The quality management system standard written specifically for medical devices. It governs how a device is designed, made, sterilised, labelled, traced and monitored in the field, with regulatory obligations built into the system rather than bolted on.
The certificate comes from an accredited certification body such as SIS. It is not market approval - regulators and notified bodies treat it as evidence when they assess the device.
Three-year certificate with annual surveillance audits and recertification before expiry; significant design or site changes are notified between visits.
Device manufacturers, sterilisation and contract service providers, component suppliers, importers and distributors that handle storage, installation or servicing.
Where this certification is demanded
ISO 13485 is applicable across 2 of the 25 industries SIS covers. The pages below set out the specific reason it comes up in each one.
What ISO 13485 Actually Requires
The backbone an implementer has to build, in the order it usually gets built.
Establish which regulatory role you occupy in each market - manufacturer, importer, distributor - because that determines which clauses you may exclude and which you may not.
A medical device file per device family holding specifications, manufacturing and inspection methods, installation and servicing requirements, kept current as the design changes.
Risk management applied across the whole product realisation cycle, not a one-off file: hazard analysis, control measures, residual risk and production feedback into the risk file.
Planned design inputs, outputs, review, verification, validation including clinical evaluation where required, design transfer to manufacturing, and controlled change with documented impact assessment.
Validated processes where output cannot be fully verified - sterilisation, welding, moulding, software - plus cleanliness, contamination control, labelling control and traceability down to component and batch.
Complaint handling, feedback from the field, adverse event reporting to authorities, advisory notices and recall procedures, feeding corrective action and the risk file.
How ISO 13485 Certification Works
No black box. A defined, time-bound route from first call to certificate in hand.
Application & Proposal
We scope by device class, technology, sterilisation method and whether you hold design responsibility. Contract sterilisers, software and outsourced processes change audit duration and the sites we must visit.
1–2 daysGap Review & Readiness
The product that has sold for nine years is the one that hurts: its design history file was assembled for a different regulation and nobody has touched the risk file since.
1–2 weeksStage 1 + Stage 2 Audit
Stage 1 examines the device file, risk management and regulatory scope. Stage 2 follows a device through design, purchasing, production, validation, release and complaint handling on the floor.
Scheduled around productionCertificate Issued
The certificate names the devices and processes covered, and that scope line is what a notified body reviewer or a distributor compares against your dossier. Surveillance checks design changes and complaints.
Valid 3 yearsIndustries That Need ISO 13485
Commonly taken alongside
Not Sure Which Certification You Need?
Three questions. The selector reads the same industry-to-standard mapping this whole site is built on, then shortlists what applies to you.
Which sector best describes your organisation?
The dossier stalls without a certified quality system
Which registration lands first - and does that dossier need the certificate at submission or at approval? That answer sets your audit date, not our calendar.
Get My Free Quote →What ISO 13485 Changes for Your Business
Certification is not a certificate on the wall. It is a working system that pays for itself.
Market registrations move
Regulators and notified bodies expect a certified quality system in the file. Having it removes the most common reason a device submission stalls before technical review even starts.
Hospital tenders qualify
Public health procurement and large distributors screen on the certificate. Without it, the bid is filtered out before anyone reads your clinical or price argument.
Fewer field actions
Design controls and validated processes catch failures at verification rather than in a hospital, where the cost is a recall, a report and a customer you do not get back.
Supplier position strengthened
Component and contract manufacturers holding the certificate get into device supply chains that will not qualify an uncertified source, whatever the part costs.
Evidence ready for inspectors
When an inspector arrives unannounced, traceability, batch release records and complaint files are already assembled instead of being reconstructed under pressure.
Cleaner design transfer
Formal transfer from development to production stops the familiar problem of a device that works in the laboratory and fails to build repeatably on the line.
Knowledge Base - Downloads
Practical documents prepared by our auditors. Fill the short form once and every download on the page unlocks.
ISO 13485 readiness checklist for manufacturers
Clause-by-clause check on device file, design history, validation protocols and complaint records, marked by what an auditor will ask to see.
Mapping ISO 13485 to device regulation
Where the standard satisfies regulatory expectations directly, where it stops short, and what the manufacturer must add for each market.
Process validation protocol template for devices
An IQ, OQ and PQ structure for sterilisation, moulding and sealing processes, with sampling rationale and the revalidation triggers auditors query.
Design transfer without production surprises
How development, tooling and quality hand over a device so that verification results still hold once volume manufacturing begins.
Frequently Asked Questions
Straight answers to what buyers ask before they commit to ISO 13485.
Does ISO 13485 certification mean my device is approved?
How is ISO 13485 different from ISO 9001?
Can we exclude clauses from the scope?
Do our suppliers need certification too?
How long does certification take?
Will SIS help us write the quality system?
Certify your medical device quality system
The assessor who audits a sterile implant file is not the one who audits electromechanical equipment. Ask which assessors cover your product class before you commit to a date.
Get My Free Quote → WhatsApp Us