ISO 13485

Medical Devices Quality Management Systems

Quality management built specifically for medical device manufacturers.

About ISO 13485:2016

ISO 13485 takes the quality-management logic of ISO 9001 and rebuilds it around the specific demands of medical devices — risk management under ISO 14971, design controls, sterile-product requirements, and the regulatory traceability that device manufacturers must maintain across the full product lifecycle. It covers everything from design and development input through to production, installation, servicing, and post-market surveillance, with particular weight on documentation that can withstand regulatory scrutiny long after a product has shipped. For manufacturers selling into regulated healthcare markets, certification is frequently a market-access requirement, not an optional quality signal.

Key Benefits

  • Market access into regulated healthcare supply chains that require certification
  • Documented design controls and risk management specific to medical devices
  • Full lifecycle traceability from design through post-market surveillance
  • Audit-ready documentation that holds up under regulatory scrutiny

Who It's For

  • Medical device manufacturers
  • Healthcare product suppliers
  • Regulatory-affairs-driven organisations
  • Contract manufacturers in the medical sector

How It Works

Getting ISO 13485:2016 Certified

01

Application & Scope Review

Tell us about your organisation and its scope — we review fit against the standard and respond with a clear, itemised quotation.

02

Stage 1 Audit

A documentation and readiness review confirming your management system is designed to meet the standard before any on-site assessment begins.

03

Stage 2 Audit

An on-site (or remote, where permitted) assessment of how the system actually operates in practice, checked against every applicable clause.

04

Independent Certification Decision

A reviewer who was not part of the audit team evaluates the findings and makes the certification decision — the impartiality safeguard behind every certificate we issue.

05

Certificate Issued & Verifiable

Your certificate is issued with a QR code for instant online verification, valid for three years subject to annual surveillance audits.

Documentation You'll Need

  • Management system scope, policy, and objectives
  • Risk/opportunity assessment and planning records
  • Competence, training, and awareness evidence
  • Monitoring, measurement, and internal audit records
  • Management review minutes and corrective action records

Indicative, not exhaustive — your auditor confirms the exact list for your scope during Stage 1.

Validity & Surveillance

A ISO 13485:2016 certificate is valid for three years from the date of issue, subject to annual surveillance audits that confirm the management system is still being maintained — not a one-time snapshot. Recertification before the three-year expiry keeps the certificate (and the QR-code verification behind it) current.