ISO 9001 for medical devices

ISO 9001 is the general quality management standard — industry-independent, widely held, and in medical technology the most common evidence among suppliers who do not place medical devices on the market themselves. It requires a process-oriented approach, leadership responsibility, handling of risks and opportunities and continual improvement, while leaving the company considerably more latitude than ISO 13485.

That latitude is also its limit. What matters in medical technology is not explicitly required by ISO 9001: traceability down to the batch, retention periods covering the product lifetime, validation of processes whose result cannot be verified, controlled documentation of design changes. A supplier certified to ISO 9001 may well master all of it — the certificate is simply not evidence of it.

For buyers this means ISO 9001 is a workable starting point for non-critical parts and services, but for critical processes it replaces neither a supplier assessment nor an audit. Many providers listed here hold both certifications side by side — ISO 9001 for the company as a whole, ISO 13485 for the medical device part.