Medical devices · Quality and regulatory context

ISO 13485 certification readiness

Build a quality system around your device-supply role, product risks and intended markets.

Standards and scheme rules

Use the current published baseline.

ISO 13485:2016 remains current; ISO records its review and confirmation in 2025. For manufacturers subject to US FDA requirements, the QMSR took effect on 2 February 2026 and incorporates ISO 13485:2016 by reference with additional US requirements. An ISO certificate does not substitute for FDA compliance or inspection.

Public-source review: 2 November 2026. Check the official references below for subsequent changes before contracting an audit.

Scope before schedule

Confirm what the certificate must cover.

Define whether you design, manufacture, supply components, install, service or distribute devices. Identify applicable markets, device classification and regulatory responsibilities before deciding QMS scope or justified non-applicability.

Practical preparation

Prepare evidence from real work.

  1. Risk and design evidence

    Link applicable design controls, reviews, verification and validation to device requirements and risk management. Keep outsourced design responsibilities explicit.

  2. Controlled operations

    Review suppliers, traceability, cleanliness and process validation where applicable, including sterilisation when in scope. Control monitoring equipment and QMS software validation as applicable.

  3. Post-delivery obligations

    Establish complaint handling, feedback, regulatory reporting and corrective action appropriate to your role. Define record retention and escalation responsibilities.

  4. Certification and market readiness

    Prepare internal audits and management review, then select an appropriately accredited certification body. Separately map licences, registrations and submissions needed for each intended market.

These are preparation topics, not a complete clause checklist. Use licensed standards and the applicable scheme documents to define the full requirements.

Decision boundaries

Keep certification and approval separate.

ISO 13485 certification does not authorise sale of a device. Indian licensing, EU conformity assessment and US market-access obligations depend on the device and economic-operator role; determine each applicable route separately.

Suriyavaan provides scoped advisory preparation. Independent certification bodies and responsible authorities make certification and approval decisions; no outcome is guaranteed.

Discuss your operation

Start with your scope and the evidence you need.

Confirm the activities, customer obligations, delivery competence and proposed outputs before agreeing an engagement.

Discuss the scope ↗

simon@suriyavaan.com