ISO 13485 for medical devices

ISO 13485 is the quality management standard of the medical device industry. It describes how a company controls development, purchasing, production, traceability and post-market surveillance so that products are made safely and consistently. Unlike ISO 9001 it does not require continual improvement of metrics but demonstrability: documented procedures, controlled changes, and records that still show years later how a product came about.

In practice it is the key to the MDR. Article 10(9) requires manufacturers to operate a quality management system, and a notified body assesses it as part of conformity assessment. Certification puts that evidence in your hands — but it does not certify the product. The two are regularly confused: an ISO 13485 certificate says something about the company, a CE mark says something about the device.

Buyers are better served by reading the certificate than by looking at the seal on the letterhead. What matters is the scope — does it cover the service you are sourcing? — the issuing body, and validity. Certificates run for three years with annual surveillance; an expired one will surface in an audit, and it will surface at your end.