01
Where ISO 13485 fits in the European device pathway
ISO 13485 is the internationally recognised medical-device QMS standard. It can provide a strong operating framework for manufacturers and supply-chain organisations, but conformity assessment depends on the applicable legislation, device classification, role, route, technical documentation, and notified-body involvement.
- Legal manufacturers and specification developers
- Contract manufacturers and critical outsourced-process providers
- Importers, distributors, or other organisations with applicable quality-system duties
- Component, software, sterilisation, packaging, testing, and service suppliers
02
Connect the QMS to the complete device lifecycle
The quality system should show how regulatory and customer requirements become controlled decisions and records. Device risk and patient impact must remain visible through design, transfer, production, release, post-market activity, and corrective action.
- Regulatory strategy, device classification, design controls, risk management, and technical-documentation interfaces
- Supplier controls, quality agreements, outsourced processes, validation, and change notification
- Production, identification, traceability, preservation, release, and nonconforming product
- Complaints, vigilance interfaces, post-market surveillance, corrective action, and field action
03
Control notified-body and certification interfaces accurately
A notified body may perform conformity-assessment tasks under MDR or IVDR where third-party intervention is required. ISO 13485 certification and regulatory conformity assessment can use related QMS evidence, but their scope and legal consequences must not be confused.
- Confirm the legal entities, facilities, devices, and activities covered by each assessment
- Align QMS records with technical-documentation and post-market ownership
- Maintain clear responses to findings, changes, supplier issues, and audit commitments
- Keep certificate and CE-marking communications precise
04
Build a scalable system across European and global markets
Vecta designs shared lifecycle controls while preserving market-specific obligations. This reduces duplicated work for organisations supporting Europe, the United States, and international customers without making unsupported claims of regulatory equivalence.
Frequently asked questions
Is ISO 13485 certification mandatory under EU MDR or IVDR?
Requirements depend on the organisation's role, devices, classification, conformity-assessment route, and applicable obligations. ISO 13485 is widely used as QMS evidence, but legal requirements must be evaluated against MDR or IVDR directly.
Does ISO 13485 certification provide CE marking?
No. CE marking depends on the applicable regulatory pathway, conformity assessment, technical documentation, clinical or performance evidence, and other legal requirements.
Can one ISO 13485 certificate cover multiple European sites?
Potentially. Legal entities, site activities, shared governance, central controls, local responsibilities, certification-body rules, and audit coverage determine the appropriate structure.
Can suppliers obtain ISO 13485 certification?
Yes. A supplier's certification scope should accurately describe the medical-device products, services, processes, facilities, and responsibilities included in its QMS.
Who issues ISO 13485 certification?
An independent certification body performs the certification audit and makes the certification decision. Regulatory conformity assessment remains a separate process where applicable.
Primary sources