Medical standard
ISO 13485: Medical Device Quality Management System
ISO 13485 is the international standard for a quality management system (QMS) for organizations that design, develop, and manufacture medical devices.
What is ISO 13485?
ISO 13485 defines the QMS requirements for consistently meeting customer and regulatory needs across the medical device lifecycle. It emphasizes design controls, risk-based decision-making, traceability, and documented evidence, and is the backbone regulators and notified bodies expect behind a compliant device.
Who needs ISO 13485?
Medical device manufacturers, and the design houses, contract manufacturers, and suppliers in their chain. Many manufacturers require their engineering partners to work under ISO 13485 or to deliver design records their own QMS can absorb.
Key requirements
Design & development controls
Planned design inputs, outputs, reviews, verification, validation, and transfer, recorded in the design and development file (ISO 13485 clause 7.3.10; formerly the FDA 'Design History File').
Risk-based processes
Risk management applied across product realization, aligned with ISO 14971.
Document & record control
Controlled procedures and records that demonstrate what was done and why.
Traceability
Requirements traced through design outputs to verification and validation.
CAPA
Corrective and preventive action to detect, contain, and prevent recurrence of issues.
Supplier controls
Evaluation and monitoring of suppliers whose work affects device quality.
Relationship to FDA QMSR (21 CFR Part 820)
The FDA Quality Management System Regulation (QMSR) incorporates ISO 13485:2016 by reference into 21 CFR Part 820, with additional FDA requirements. Manufacturers must determine the requirements and exemptions applicable to their devices.
The FDA does not require or issue ISO 13485 certificates. A third-party certificate does not exempt a manufacturer from FDA inspection or establish clearance or approval for a device.
How Rapid Circuitry helps
Rapid Circuitry structures its design documentation to ISO 13485 and IEC 62304 expectations so your QMS can absorb it, or works directly within your existing procedures, delivering controlled design inputs and outputs, verification records, and a design and development file ready for audit.
Frequently asked questions
Is ISO 13485 the same as ISO 9001?
No. ISO 13485 is built for medical devices and is more prescriptive about design controls, risk management, traceability, and documentation. It shares roots with ISO 9001 but removes the continual-improvement emphasis in favor of regulatory compliance and safety.
Do I need ISO 13485 to sell a medical device?
The applicable QMS and market-access requirements depend on the device and target market. In the United States, the QMSR has incorporated ISO 13485:2016 requirements by reference since February 2, 2026, subject to applicable FDA requirements and exemptions. The FDA does not require an ISO 13485 certificate, and certification alone does not establish FDA clearance or approval. Determine the required evidence and regulatory pathway for the specific device.
Can a design partner work under our ISO 13485 QMS?
Yes. A capable engineering partner can operate within your procedures and produce records your QMS absorbs, or apply their own controlled process that maps cleanly to your system.