Certification / Accreditation

ISO 13485 Medical devices supply chain

ISO 13485 is the international standard for quality management in the medical device industry. It exists to protect patient safety, with every requirement, from design controls to traceability, ultimately serving that purpose. In most major markets it is the foundation that regulatory approval is built on, not just a quality credential alongside it.

At its core, it’s based on ISO 9001 but adapted for the regulatory, risk and traceability demands of medical devices, including a medical device file (technical file) for each device type and stricter traceability for implantable devices.

Book a free discovery call

Who it’s for and what’s involved

Relevant if you are:

A manufacturer of medical devices or IVDs

A supplier of components, sterilisation or calibration services in the supply chain

Pursuing CE marking, UKCA marking or Canadian device approval

Weighing up whether certification is proportionate to your position in the supply chain

Achieving certification involves:

Building a medical device file for each device type or family

Embedding risk management, referencing ISO 14971

Meeting stricter traceability requirements, especially for implantables

Passing an external certification audit

How Q! supports certification

Traceability is the real test

We have supported businesses across the medical device supply chain through certification, including those weighing up whether full certification is proportionate to their position in the chain. Knowing exactly which batch, supplier and process touched a given device, and proving it instantly when something goes wrong, is the real test of a system, far more than the documentation that sits behind it.

ISO 13485 isn’t just quality assurance. In most markets, it’s the regulatory route in.

Contact us

Mini FAQs

In several major markets, yes, or the practical route to one. Canada requires it directly for most device classes. In the EU, conformity is generally accepted as demonstrating the quality management requirements of the EU Medical Device Regulation, making it the standard route to CE marking. ISO 13485 is scalable to whichever device classification applies, EU Class I to III and IVD equivalents, or UK equivalents.

Great Britain’s medical device framework is in active reform. The MHRA published draft amendment regulations in 2026 to align more closely with EU MDR and IVDR, and has separately consulted on extending CE mark recognition. None of this is finalised; current UKCA marking and transitional CE acceptance remain in force in the meantime. Whatever the final shape, ISO 13485 continues to underpin every route under discussion.

Not necessarily. It depends on what your customers require, the risk classification of the end device, and whether ISO 9001 alone would satisfy them. We help clients work through that judgement rather than assuming certification is the automatic answer.

Less difficult than starting from nothing, since the two standards share substantial common ground. However conformity to ISO 13485 does not automatically confer conformity to ISO 9001, since some ISO 9001 requirements are deliberately excluded as inappropriate for regulatory purposes. It is straightforward to hold both, but each needs to be properly addressed.