Get Your ISO 13485 Quote

Name *Email *Phone / WhatsApp *

What do you need? *Which standard? *

A specialist responds within 2 business hours ·

ISO 13485:2016 · Medical Devices Quality Management

ISO 13485 opens device markets for your quality system

Notified bodies, distributors and national regulators all start from ISO 13485 when they ask for your quality certificate. SIS audits design controls, process validation, sterile barrier integrity, traceability to component level and what happens after the device ships.

!The technical documentation review is on hold until a notified body sees your quality management system certificate.
!You are registering a device in a new market and the dossier requires a certified quality system.
!A hospital tender or distributor agreement lists ISO 13485 as a precondition for supply.
!You have moved from contract assembly into holding your own design responsibility, and design controls now apply.
!A pharmaceutical business has added a delivery device, prefilled syringe or diagnostic kit alongside its GMP operation.
!After a field action, nobody could show the authority when the complaint was received, assessed and reported.

What it is

The quality management system standard written specifically for medical devices. It governs how a device is designed, made, sterilised, labelled, traced and monitored in the field, with regulatory obligations built into the system rather than bolted on.

Who issues it

The certificate comes from an accredited certification body such as SIS. It is not market approval - regulators and notified bodies treat it as evidence when they assess the device.

Validity

Three-year certificate with annual surveillance audits and recertification before expiry; significant design or site changes are notified between visits.

Who can apply for ISO/IEC 22000 Certification?

Device manufacturers, sterilisation and contract service providers, component suppliers, importers and distributors that handle storage, installation or servicing.

2of 25 industries

Industries that require ISO 22000 Certification

ISO 13485 is applicable across 2 of the 25 industries SIS covers. The pages below set out the specific reason it comes up in each one.

Medical DevicesPharmaceutical Industry

What ISO 13485 Actually Requires

An organisation must understand the requirements for ISO 22000 certification to implement it effectively.

Regulatory role and scope

Establish which regulatory role you occupy in each market - manufacturer, importer, distributor - because that determines which clauses you may exclude and which you may not.

Device file

A medical device file per device family holding specifications, manufacturing and inspection methods, installation and servicing requirements, kept current as the design changes.

Risk management throughout

Risk management applied across the whole product realisation cycle, not a one-off file: hazard analysis, control measures, residual risk and production feedback into the risk file.

Design and development controls

Planned design inputs, outputs, review, verification, validation including clinical evaluation where required, design transfer to manufacturing, and controlled change with documented impact assessment.

Production and validation

Validated processes where output cannot be fully verified - sterilisation, welding, moulding, software - plus cleanliness, contamination control, labelling control and traceability down to component and batch.

Post-market and reporting

Complaint handling, feedback from the field, adverse event reporting to authorities, advisory notices and recall procedures, feeding corrective action and the risk file.

How ISO 13485 Certification Works

A clear, step-by-step process from your first call to a completed engagement.

Application & Proposal

We scope by device class, technology, sterilisation method and whether you hold design responsibility. Contract sterilisers, software and outsourced processes change audit duration and the sites we must visit.

1–2 days

Gap Review & Readiness

The product that has sold for nine years is the one that hurts: its design history file was assembled for a different regulation and nobody has touched the risk file since.

1–2 weeks

Stage 1 + Stage 2 Audit

Stage 1 examines the device file, risk management and regulatory scope. Stage 2 follows a device through design, purchasing, production, validation, release and complaint handling on the floor.

Scheduled around production

Certificate Issued

The certificate names the devices and processes covered, and that scope line is what a notified body reviewer or a distributor compares against your dossier. Surveillance checks design changes and complaints.

Valid 3 years

Eight to sixteen weeks is normal, driven almost entirely by how long process validation and design evidence take to assemble - if a filing date is already in the diary, put it in the application and the audit is planned around it rather than after it.

Industries That Need ISO 13485

🩺

Medical Devices

Open full page →

Why it applies hereISO 13485 is the quality management system standard written for medical devices and the basis on which most regulators grant market access. It imposes design controls, risk-based process validation, traceability, sterile barrier control and post-market surveillance, and is the system auditors examine for CE marking under MDR, for national device licensing and for most international registrations.Typical trigger: Market access; regulatory licensing

💊

Pharmaceutical Industry

Open full page →

Why it applies herePharmaceutical companies producing drug-device combinations, prefilled syringes, inhalers or diagnostic kits fall into device regulation as well. ISO 13485 provides the design control, validation and post-market surveillance framework those products require, alongside the existing GMP system.Typical trigger: Combination products; delivery devices

Commonly taken alongside

ISO 14971Medical Device Risk Management CE MarkingEU product conformity marking ISO 9001Quality Management System GMPGood Manufacturing Practice

ISO 14971 supplies the risk file ISO 13485 keeps referring to, CE marking is the route most exporters take next, and combining the assessments puts one team across one set of design and production records.

Not Sure Which Certification You Need?

Three questions. The selector reads the same industry-to-standard mapping this whole site is built on, then shortlists what applies to you.

Question 1 of 3

Which sector best describes your organisation?

The dossier stalls without a certified quality system

Which registration lands first - and does that dossier need the certificate at submission or at approval? That answer sets your audit date, not our calendar.

Get My Free Quote →

What ISO 13485 Changes for Your Business

More than a certificate — a testimony that you have raised the bar and built customer confidence.

🌐

Market registrations move

Regulators and notified bodies expect a certified quality system in the file. Having it removes the most common reason a device submission stalls before technical review even starts.

🏥

Hospital tenders qualify

Public health procurement and large distributors screen on the certificate. Without it, the bid is filtered out before anyone reads your clinical or price argument.

🧾

Fewer field actions

Design controls and validated processes catch failures at verification rather than in a hospital, where the cost is a recall, a report and a customer you do not get back.

🔗

Supplier position strengthened

Component and contract manufacturers holding the certificate get into device supply chains that will not qualify an uncertified source, whatever the part costs.

📁

Evidence ready for inspectors

When an inspector arrives unannounced, traceability, batch release records and complaint files are already assembled instead of being reconstructed under pressure.

⚙️

Cleaner design transfer

Formal transfer from development to production stops the familiar problem of a device that works in the laboratory and fails to build repeatably on the line.

Frequently Asked Questions

Straight answers to what buyers ask before they commit to ISO 13485.

Does ISO 13485 certification mean my device is approved?

No. The certificate covers your quality management system, not the device. Market approval is a separate assessment of the device itself: its technical documentation, clinical evidence and conformity assessment route. What the certificate does is satisfy the quality system element of that assessment, which is why notified bodies and regulators ask for it before they will look at the dossier.

How is ISO 13485 different from ISO 9001?

ISO 9001 is built around customer satisfaction and continual improvement. ISO 13485 is built around maintaining effectiveness and meeting regulatory requirements, which is a different emphasis. It adds design controls, validation of processes whose output cannot be verified, sterile barrier and cleanliness control, traceability to component level, complaint handling and reporting to authorities. Holding ISO 9001 helps, but it does not substitute.

Can we exclude clauses from the scope?

Some, and only for reasons tied to your regulatory role. Design and development may be excluded if you manufacture to a customer’s design and hold no design responsibility, and certain product realisation clauses may be excluded where they do not apply to your device. Every exclusion has to be justified in writing, and the auditor will test whether it is real.

Do our suppliers need certification too?

Not automatically, but you carry the obligation. The standard requires you to evaluate and select suppliers against defined criteria proportionate to the risk the purchased item carries, to keep records of that evaluation, and to verify purchased product. A certified supplier makes that easier; an uncertified one means you do the verification yourself, on paper and on incoming goods.

How long does certification take?

Eight to sixteen weeks for most manufacturers, and the variable is almost never documentation. It is process validation and design evidence, particularly for legacy products designed before controls were formalised. Sterilisation validation and supplier requalification can add time on their own. Bring us in early with a target registration date and the audit is scheduled to fit it.

Will SIS help us write the quality system?

No. Accreditation rules keep certification bodies independent of the systems they audit, so SIS cannot write your procedures, build your device file or run your validations. Consultants do that. SIS assesses what exists and issues the certificate, and that separation is the reason a notified body or regulator treats the certificate as meaningful evidence.

ISO 13485 certification across Qatar

Pick your region to see the industries concentrated there and the standards their buyers and regulators ask for most.

Doha Ras Laffan Industrial City Mesaieed Industrial City Lusail Al Wakrah / Hamad Port Al Khor Dukhan

Certify your medical device quality system

The assessor who audits a sterile implant file is not the one who audits electromechanical equipment. Ask which assessors cover your product class before you commit to a date.

Get My Free Quote → WhatsApp Us