What Is ISO 13485?
ISO 13485:2016 is an international standard developed for the quality management systems of organisations operating in the medical device sector.
The standard defines quality management system requirements that support the organisation's ability to meet customer and applicable regulatory requirements in the design, development, production, installation, servicing and related processes of medical devices. According to ISO's official record, ISO 13485:2016 is the existing and current edition; the standard was reviewed and confirmed in 2025.
Unlike the general-purpose ISO 9001 standard, ISO 13485 focuses on the specific quality, safety and regulatory requirements of the medical device sector. In particular, risk management, control of processes, verification/validation activities and meeting regulatory requirements are among the important elements of the standard.
For Which Organisations Is ISO 13485:2016 Suitable?
ISO 13485 can be applied not only by medical device manufacturers but also by different organisations involved in the life cycle of medical devices.
For example, the following can be assessed under ISO 13485:
- Medical device manufacturers,
- Companies designing and developing medical devices,
- Organisations providing services to medical device importers and distributors,
- Companies installing and providing technical service for medical devices,
- Suppliers providing parts or components for medical devices,
- Organisations providing sterilisation services,
- Companies developing software for medical devices,
- Packaging and auxiliary product providers,
- Organisations providing production or outsourced process services to the medical device sector
According to ISO's explanation, the standard can be used by organisations involved in the design, production, installation and servicing of medical devices, as well as by suppliers and external parties providing products or quality management system services to these organisations.
Basic Purpose of the ISO 13485 Quality Management System
The basic purpose of ISO 13485 is to make the organisation's quality management processes relating to medical devices systematic and to support its ability to meet customer and regulatory requirements.
In this context, depending on the organisation's activities, processes such as the following may be addressed:
- Establishing the quality policy and quality objectives,
- Planning products and processes,
- Controlling design and development processes,
- Managing medical device risks,
- Controlling suppliers and outsourced processes,
- Keeping production processes under control,
- Managing clean area and hygiene conditions,
- Controlling sterilisation processes,
- Establishing traceability and product identification systems,
- Controlling measuring and monitoring equipment,
- Verifying product conformity,
- Controlling nonconforming products,
- Carrying out corrective and preventive actions,
- Managing complaints and feedback,
- Tracking product-related regulatory requirements
ISO 13485 and Risk Management
Because of product safety and regulatory requirements in the medical device sector, risk management is an important element.
Compared with previous editions, ISO 13485:2016 places greater emphasis on risk management and a risk-based approach to decision-making.
For this reason, the quality management system can be addressed within a life cycle approach such as:
Design → Identification of Risks → Control Measures → Production → Verification/Validation → Monitoring → Feedback → Continual Improvement
In terms of risk management, the ISO 13485 system should be structured taking into account the intended use of the medical device, the production process and the relevant regulatory requirements.
Benefits of the ISO 13485 Certificate
Depending on the organisation's field of activity and product structure, the ISO 13485:2016 Quality Management System can contribute to:
- Making medical device quality processes systematic,
- Improving standardisation in production and service processes,
- Controlling design and development processes,
- Strengthening the risk management approach,
- More effective management of suppliers and outsourced processes,
- Improving product and process traceability,
- Strengthening the documentation and record system,
- Systematic management of nonconformities and customer complaints,
- Tracking regulatory requirements,
- Raising employees' awareness of quality and medical device requirements,
- Supporting the fulfilment of the quality expectations of customers and business partners in international markets
ISO 13485 certification can be used, in particular, by organisations operating in the medical device sector to demonstrate their quality management systems to customers, business partners and the relevant regulatory parties. However, an ISO 13485 certificate does not by itself mean that all the product conformity requirements for placing a medical device on the market in a particular country have been fulfilled. The product must also meet the relevant legislation and conformity assessment requirements in the target market.
The Difference Between ISO 13485 and ISO 9001
ISO 9001 is a general quality management system standard that can be applied in different sectors.
ISO 13485, on the other hand, is structured according to the specific needs and regulatory requirements of the medical device sector.
ISO 13485 takes a more specific approach to matters particular to the medical device sector, such as:
- Regulatory requirements for medical devices,
- Product safety,
- Risk management,
- Design and development controls,
- Production processes,
- Traceability,
- Validation,
- Supplier control,
- Complaint and feedback management
According to ISO's explanation, compared with ISO 9001, ISO 13485 has a greater sector-specific focus on regulatory requirements, risk management and process validation in particular.
ISO 13485 Certification Process
The ISO 13485 certification process starts with an assessment of the organisation's scope of activity and its quality processes relating to medical devices.
In general, it can be planned as follows:
- Determining the organisation and the certification scope
- Assessing products and activities
- Analysing the existing quality management system
- Determining applicable regulatory requirements
- Creating the quality management system documentation
- Structuring risk management processes
- Establishing or reviewing design and development processes
- Establishing production and operational controls
- Controlling suppliers and outsourced processes
- Establishing traceability, complaint and nonconformity processes
- Carrying out the internal audit and management review
- Conducting the certification audit
- Certification following the conformity assessment
- Maintaining and continually improving the system
The ISO 13485 standard itself does not require organisations to obtain a certificate. Organisations can implement the standard to improve their quality management systems or obtain third-party certification services. ISO itself does not carry out certification and does not issue certificates.
ISO 13485 and Medical Device Legislation
ISO 13485 is a quality management system standard. The product conformity assessment, technical file, risk management, clinical evaluation, labelling, registration and similar requirements needed to place medical devices on the market must be assessed separately according to the legislation of the target market.
For this reason, it should be understood that:
ISO 13485 Certificate ≠ Medical Device Product Conformity Document
For example, in medical device exports to the European Union, the ISO 13485 quality management system can form an important foundation; however, the product's requirements under the EU Medical Device Regulation (MDR 2017/745) must be assessed separately.
Similarly, additional conformity assessments may be required in different countries according to the product class, intended use and legislation.
ISO 13485 Certification and Consultancy Service
At Istanbul Certificate Office, we assess the ISO 13485:2016 Quality Management System needs of organisations operating in the medical device sector in line with their field of activity, product groups, production processes and target markets.
As part of the work, support can be provided on:
- Assessment of ISO 13485 requirements,
- Analysis of the existing quality system,
- Quality management system documentation,
- Structuring risk management processes,
- Assessment of design and development processes,
- Management of suppliers and outsourced processes,
- Traceability and complaint management,
- Internal audit preparations,
- Management review preparations,
- Preparation for the certification audit,
- Process coordination with the certification body
To Obtain an ISO 13485 Certification Quotation
To receive information about ISO 13485:2016 certification or consultancy services for your company, you can share with us:
- Your company's field of activity,
- The medical devices you manufacture or supply,
- The intended use of the products,
- Your production and service processes,
- Your number of employees,
- The countries you are targeting,
- Your existing ISO and other quality certificates
By assessing your company's existing structure, we can draw up an appropriate work plan for ISO 13485:2016 Medical Devices Quality Management System set-up, certification and quality/regulatory preparation for the target market.
