ISO 13485-2016 PDF

Full title and description

St ISO 13485-2016 — Medical devices — Quality management systems — Requirements for regulatory purposes. This international standard specifies requirements for a quality management system (QMS) for organizations involved in one or more stages of the medical device lifecycle, with emphasis on meeting customer and applicable regulatory requirements for safety and performance.

Abstract

ISO 13485:2016 establishes a sector-specific QMS framework tailored to medical device manufacturers, suppliers and service providers. It focuses on risk-based control of processes, process validation (including sterile processes), traceability and post-market feedback, and is intended to support regulatory compliance across jurisdictions. The standard is commonly used alongside risk-management (ISO 14971) and post-market surveillance guidance.

General information

• Status: Published (confirmed in ISO systematic review 2025; remains current).
• Publication date: March 2016.
• Publisher: International Organization for Standardization (ISO).
• ICS / categories: 03.100.70; 11.040.01.
• Edition / version: Edition 3 (2016).
• Number of pages: 36.

Details above are taken from the ISO catalogue entry for ISO 13485:2016, which shows its publication, edition, page count, ICS codes and confirmation status.

Scope

ISO 13485:2016 specifies QMS requirements where an organization needs to demonstrate its ability to provide medical devices and related services that consistently meet customer and applicable regulatory requirements. It applies to organizations at any stage of the device lifecycle (design and development, production, storage and distribution, installation, servicing, decommissioning and disposal) and can be used by suppliers and external parties providing product- or QMS-related services. Requirements apply irrespective of organization size or type except where explicitly stated.

Key topics and requirements

• Quality management system structure and documented QMS requirements (management responsibility, objectives, internal audit, management review).
• Risk-based approach to process control and integration with medical device risk management practices.
• Design and development controls where applicable, including verification and validation outputs.
• Control of suppliers and purchased product, including supplier evaluation and monitoring.
• Production and service provision controls, including process validation for processes that cannot be fully verified (e.g., sterilization, aseptic processing).
• Identification and traceability (UDI and batch/lot/serial trace where applicable) and device history records.
• Monitoring and measurement: inspection, testing, calibration and control of nonconforming product.
• Complaint handling, vigilance/reporting (where regulatory requirements apply) and corrective and preventive actions (CAPA).
• Post-market surveillance input and feedback into the QMS; record keeping to demonstrate regulatory and customer conformity.
• Documentation and records control, including control of design and device master records and retained samples where required.

Typical use and users

Organizations that design, develop, manufacture, install, service or supply medical devices or related services use ISO 13485:2016 to structure their QMS and demonstrate regulatory and customer conformity. Typical users include medical device manufacturers (OEMs), contract manufacturers, sterilization and calibration service providers, distributors, and suppliers of components and raw materials. Certification bodies, regulators and conformity assessment programs (including MDSAP participants) reference ISO 13485 in audits and regulatory assessments.

Related standards

Commonly referenced documents and related standards include ISO 14971 (risk management for medical devices), ISO 9000/9001 (QMS fundamentals and vocabulary), ISO/TR 24971 (guidance on application of ISO 14971), MDSAP framework and relevant regional regulations such as the EU Medical Device Regulation (MDR) and the U.S. FDA Quality Management System Regulation (QMSR) which incorporates ISO 13485:2016 by reference. These instruments are used together to achieve regulatory compliance and robust device safety practices.

Keywords

medical devices, quality management system, QMS, ISO 13485, regulatory compliance, risk management, design controls, process validation, traceability, complaint handling, CAPA, post-market surveillance.

FAQ

Q: What is this standard?

A: ISO 13485:2016 is an international standard that defines requirements for a quality management system specifically for organizations involved in the medical device lifecycle, with emphasis on meeting regulatory as well as customer requirements.

Q: What does it cover?

A: It covers establishment and maintenance of a QMS for design, development (where applicable), production, storage, distribution, installation, servicing, and post-market activities, including supplier control, process validation, traceability and complaint handling tied to regulatory reporting.

Q: Who typically uses it?

A: Medical device manufacturers, suppliers, contract manufacturers, service providers (sterilization, calibration, distribution), regulatory and quality professionals, and certification bodies use ISO 13485 to structure and assess QMS conformity.

Q: Is it current or superseded?

A: The 2016 edition (Edition 3) is the current edition; ISO’s catalogue shows the publication date as March 2016 and records that the publication was reviewed and confirmed in 2025, so the 2016 edition remains current.

Q: Is it part of a series?

A: ISO 13485 is part of a family of medical device and QMS-related standards commonly used together (e.g., ISO 14971 for risk management, ISO/TR 24971 guidance, ISO 9000 for vocabulary) and is referenced in regional conformity frameworks (for example MDSAP and national regulations).

Q: What are the key keywords?

A: Key keywords are medical devices, quality management system, risk-based approach, process validation, traceability, complaint management, CAPA, regulatory requirements, ISO 14971, post-market surveillance.