Glossary Updates12 new terms added to the glossaries · October 2, 2026, 22:44 CEST
AI TechDocKnowledge

Glossary · ISO and IEC standards for MedTech and pharma

ISO 13485

Also known as: ISO 13485:2016, EN ISO 13485:2016+A11:2021, Medical device QMS standard

ISO 13485 is the international standard for quality management systems of organizations involved in the lifecycle of medical devices. It sets requirements for regulatory purposes: documented processes for design, production, supplier control, complaint handling, corrective action and post-market feedback, applied in proportion to risk.

  • Standards
  • MDR
  • IVDR

In one sentence

ISO 13485:2016 sets QMS requirements for medical device organizations; harmonized under MDR and IVDR and referenced by the FDA QMSR.

Example

A manufacturer of class IIa infusion pumps is audited by its notified body against ISO 13485:2016 under Annex IX MDR; the auditors sample design history, supplier files, complaint records and CAPA reports.

How it applies

  • Legal hook: Article 10(9) MDR and IVDR requires manufacturers to establish a quality management system. EN ISO 13485:2016+A11:2021 is a harmonized standard under both regulations; its Annex Z sets out which regulatory requirements it covers and which it doesn't.
  • Conformity assessment: Certification to ISO 13485 is not a legal requirement in itself. What counts is the notified body's QMS assessment within the conformity assessment, for example under Annex IX MDR.
  • Risk-based processes: The standard asks for a risk-based approach to controlling QMS processes and links product risk management to ISO 14971; software used in the QMS must be validated.
  • Feedback loop: Complaint handling, reporting to authorities, CAPA and feedback from production and post-production feed the post-market surveillance system.
  • Technical documentation: The standard requires a medical device file per device type or family, controlled documents and records. These are the sources from which the technical documentation draws its evidence; keep them under document control.

ISO 13485 vs. ISO 9001

ISO 9001 is a general quality management standard built around customer satisfaction and continual improvement, and its 2015 edition follows the common ISO management system structure. ISO 13485:2016 kept the older ISO 9001:2008 structure and focuses on meeting regulatory requirements and maintaining the effectiveness of the QMS, with more mandatory documentation, design controls and traceability. An ISO 9001 certificate doesn't replace an ISO 13485 QMS for medical devices.

Compared with the USA

The FDA Quality Management System Regulation (QMSR), the amended 21 CFR Part 820, incorporates ISO 13485:2016 by reference and has been effective since February 2, 2026, replacing the former Quality System Regulation. FDA-specific requirements remain in addition; see QMSR.

By knowledge.aitechdoc.world · Published September 25, 2026 · Last reviewed

Source: ISO 13485:2016, Medical devices — Quality management systems — Requirements for regulatory purposes

Definitions follow the cited standards and specifications. Where a source is a copyrighted publication, such as an ISO, IEC or EN standard, the definition is a close paraphrase, not a verbatim quotation, so as not to infringe copyright. We recommend reading the original publication. The sections “How it applies” are editorial commentary by AI TechDoc Knowledge and are not part of any standard.

Seen a mistake? Send us a note!