What is ISO 13485?
ISO 13485:2016 (BDS EN ISO 13485:2016, with applicable amendments) is an international standard that specifies requirements for quality management systems of organizations involved in one or more stages of the life cycle of medical devices.
The standard is intended for organizations that need to demonstrate their ability to provide medical devices and related services that meet customer requirements and applicable regulatory requirements.
ISO 13485 has been developed specifically for the medical device sector and focuses on regulatory compliance, risk management and the ability of organizations to provide medical devices that meet applicable safety and performance requirements.
A quality management system according to ISO 13485 complements the technical requirements for medical devices and supports organizations in controlling processes related to their design, production and delivery.
 
Who is ISO 13485 Applicable To?
ISO 13485 is applicable to organizations regardless of their size or type when they are involved in activities related to medical devices.
The standard can be applied by organizations performing one or more stages of the life cycle of a medical device, including:

• design and development;
• production;
• storage;
• distribution;
• installation;
• servicing;
• related activities, such as technical support.

ISO 13485 can also be used by suppliers and external organizations that provide products or services to organizations operating in the medical device sector.
Organizations for which the standard may be applicable include:

• medical device manufacturers;
• importers and distributors;
• authorized representatives of medical device manufacturers;
• suppliers of products and services related to medical devices;
• organizations providing specialized services within the supply chain.

 
Key Features of ISO 13485
Focus on Regulatory Requirements
ISO 13485 is a quality management system standard intended for regulatory purposes.
Organizations should determine their role within applicable regulatory requirements and integrate these requirements into their quality management system.
ISO 13485 differs from general quality management standards through its specific requirements for the medical device sector, including regulatory compliance and ensuring the safety and performance of products.
 
Risk Management
Risk management is a key element in the application of ISO 13485.
The standard requires organizations to apply a risk-based approach when managing quality management system processes and to document risk management processes related to product realization. ISO 14971 is a related standard that specifies requirements for the risk management process for medical devices.
 
Identification and Traceability of Medical Devices
ISO 13485 establishes specific requirements regarding the identification and traceability of medical devices.
Organizations shall establish documented procedures for traceability in accordance with applicable regulatory requirements.
This enables effective management of product information, including when actions are required after product delivery.
 
Management of Suppliers and Outsourced Processes
Medical devices often involve products and services provided by multiple participants within the supply chain.
ISO 13485 requires organizations to establish criteria for the evaluation and selection of suppliers and to control processes outsourced to external organizations when they affect product conformity.
 
Main Areas Covered by ISO 13485
A quality management system according to ISO 13485 includes requirements related to:

• quality management system and documented information;
• management responsibility;
• resource management and personnel competence;
• infrastructure and work environment;
• contamination control;
• design and development of medical devices;
• purchasing and supplier management;
• production and service provision;
• installation and servicing activities;
• traceability management;
• feedback and complaint handling;
• monitoring, measurement, analysis and improvement of the quality management system.

 
Benefits of Implementing ISO 13485
Implementing a quality management system according to ISO 13485 can support organizations in:

• establishing a structured approach to quality management for medical devices;
• managing applicable regulatory requirements;
• improving control over processes throughout the life cycle of the device;
• managing risks related to products and processes;
• ensuring traceability of medical devices;
• improving supplier and outsourced process management;
• effectively managing complaints, feedback and actions after product delivery;
• increasing confidence among customers, partners and regulatory authorities by demonstrating a structured approach to quality and regulatory compliance;
• preparing for certification audits and supporting conformity assessment processes, where applicable.

 
ISO 13485 and Other Management Systems
ISO 13485 can be integrated with other management systems when an organization applies more than one international standard.
Depending on its activities, an organization may combine ISO 13485 requirements with other standards, such as:

• ISO 9001 – Quality management systems;
• ISO 14001 – Environmental management systems;
• ISO 45001 – Occupational health and safety management systems.

ISO 13485 is a standalone standard that is related to ISO 9001 but contains specific requirements for organizations involved in the life cycle of medical devices, including requirements related to regulatory compliance.
ISO 13485:2016 provides a structured framework for quality management in organizations involved in the life cycle of medical devices. Through a systematic approach to processes, risk management, traceability and applicable regulatory requirements, the standard supports organizations in providing medical devices and related services that meet applicable requirements.