Glossary · Regulatory

ISO 13485 Medical Devices Quality Management Systems.

The international quality management system standard for medical-device manufacturers, recognized by regulators in the EU, Canada, Japan, Australia, and aligned with the FDA QMSR effective February 2, 2026.

ISO 13485.

What it is.

ISO 13485:2016 is published by the International Organization for Standardization and developed by Technical Committee ISO/TC 210, Quality management and corresponding general aspects for medical devices. It is the third edition, published March 1, 2016, superseding ISO 13485:2003. The standard specifies requirements for a quality management system where an organization needs to demonstrate its ability to provide medical devices and related services that consistently meet customer and applicable regulatory requirements. The structure follows the seven clauses of ISO 9001 with medical-device-specific augmentation across design and development controls, risk management aligned with ISO 14971, sterile barrier system validation, software lifecycle alignment with IEC 62304, and process validation under stricter parameters.

Regulatory recognition is broad. The EU Medical Device Regulation 2017/745 and In Vitro Diagnostic Medical Devices Regulation 2017/746 both reference ISO 13485 as the harmonized QMS standard for Notified Body certification. Health Canada's Medical Device Regulations under the Canadian Medical Devices Conformity Assessment System and the broader Medical Device Single Audit Program (MDSAP) require ISO 13485 certification through an authorized auditing organization. Japan's PMDA Ministerial Ordinance 169, Australia's TGA, and Brazil's ANVISA all align with ISO 13485 through MDSAP or direct recognition. The standard is the de facto international QMS passport for medical-device manufacturers selling cross-border.

In the United States, the FDA Quality Management System Regulation (QMSR), 21 CFR Part 820 as amended, incorporates ISO 13485:2016 by reference effective February 2, 2026. The QMSR replaces the legacy Quality System Regulation that had operated since 1996. Manufacturers selling into the United States must operate a QMS that meets ISO 13485:2016 plus the additional FDA-specific overlays the QMSR retains, including labeling, complaint files, medical-device reporting, and corrections and removals reporting under 21 CFR Part 806. The transition does not eliminate FDA inspection authority; it harmonizes the substantive QMS baseline.

Cross-border implication.

For a German, Swiss, French, Italian, Dutch, or Israeli medical-device manufacturer with an MDR CE mark and an ISO 13485 certificate from a Notified Body, the cross-border read into the United States simplifies substantially under the QMSR. The existing QMS infrastructure carries forward. The work that remains is the FDA-specific overlay: US Agent designation under 21 CFR 807.40, 510(k) or De Novo or PMA pathway evaluation under 21 CFR 807 Subpart E, US-specific labeling under 21 CFR Part 801, Unique Device Identification compliance under 21 CFR Part 830, Medical Device Reporting under 21 CFR Part 803, and FDA establishment registration and device listing. The QMS itself does not have to be rebuilt; the regulatory dossier does.

For a US manufacturer planning to sell into the EU, Canada, Japan, or other ISO 13485 jurisdictions, the same standard works in reverse. A US-grade QMS aligned to ISO 13485:2016 satisfies the EU Notified Body audit and the MDSAP audit on the QMS portion. The work that remains is the EU MDR or jurisdiction-specific technical-file and clinical-evaluation submission.

Where this shows up on the GMA work.

ISO 13485 sits in the medtech-trajectory work in the Operators entering the US book, in the Answers hub on QMS-to-US-pathway sequencing, on the 510(k) and QMSR/21 CFR Part 820 related entries, and in the Knowledge pillar on cross-border medtech commercialization. The presentation work covers how the firm names its ISO 13485 certification, its Notified Body history, its MDSAP coverage, and its FDA establishment registration on US-facing surfaces. The QMS implementation, audit, and certification work belongs with the firm's quality function and certification body.

Scope note.

Global Marketing Agency does not provide ISO 13485 implementation, QMS audit, certification, or regulatory-affairs filing services. Those activities belong to the firm's quality function, its certification body, and US regulatory counsel. GMA works on how the firm's QMS and regulatory posture is presented, sequenced, and read on US-facing surfaces, alongside that team.

If an ISO 13485 firm is bridging into the US under the QMSR.

Send the certification scope, the device portfolio, and the US pathway under consideration. Response within one business day.

Start the conversation

Sources cited on this page: ISO 13485:2016, Medical devices, Quality management systems, FDA Quality Management System Regulation final rule, 89 Fed. Reg. 7496, EU Medical Device Regulation 2017/745, US FDA, Quality System Regulation, FDA Medical Device Single Audit Program, Health Canada, Medical Devices.

Start the conversation