ISO 13485 — Medical Devices Quality Management
The international quality management system standard specific to medical device manufacturers, referenced by most major regulators.
Overview
What ISO 13485 is and why it matters
ISO 13485 specifies requirements for a quality management system where an organization needs to demonstrate its ability to provide medical devices and related services that consistently meet customer and regulatory requirements. It underpins CE Marking, is required for Health Canada licensing, and is referenced by FDA's Quality Management System Regulation (QMSR).
Requirements
What you'll need
- Documented quality management system
- Management responsibility and risk management aligned to ISO 14971
- Design and development controls
- Purchasing and supplier controls
- Production and process controls
- Corrective and preventive action (CAPA) system
- Internal audits and management review
- Annual certification body surveillance audits
Typical timeline
6–12 months
Includes QMS build-out plus Stage 1/Stage 2 certification audits; organizations with an existing quality system can move faster.
Estimated cost
$8k–$40k
Varies by company size, number of sites, and certification body; figure includes consulting, internal audit prep, and the 3-year certification cycle.
Where this applies
Applicable countries
Related
Regulatory Pathways
FAQ
Frequently asked questions
Is ISO 13485 mandatory?+
It's mandatory in some jurisdictions (e.g. Canada, via MDSAP) and a practical prerequisite in others (EU MDR compliance is very difficult without it) even where not literally required by name.
How is it different from ISO 9001?+
ISO 13485 is medical-device-specific, adding requirements around risk management, traceability, and regulatory compliance that general-purpose ISO 9001 does not include.
Related
Related Certifications
CE Mark
The conformity mark required to sell medical devices in the EU/EEA, issued once a device meets EU MDR or IVDR requirements.
View →
FDA 510(k) / PMA
US market authorization for medical devices via the FDA's 510(k), De Novo, or PMA pathways.
View →
GMP
The manufacturing quality framework underlying most device and pharmaceutical regulatory approvals worldwide.
View →
Reviewed launch planning
Ready to start your ISO 13485 project?
GHMAP structures your certification path, evidence gaps, and next actions — then connects you with a qualified consultant if you need one.
Professional review remains part of the workflow.