What Is a Quality Management System for Medical Devices?
A medical device QMS is how you systematically ensure MDR compliance. Here is what Article 10(9) requires and how EN ISO 13485:2016 helps you meet it.
57 in-depth guides in this cluster
A medical device QMS is how you systematically ensure MDR compliance. Here is what Article 10(9) requires and how EN ISO 13485:2016 helps you meet it.
MDR Article 10(9) requires a QMS. EN ISO 13485:2016+A11:2021 provides presumption of conformity. Here is exactly how the standard discharges the requirement.
MDR Article 10(9) mandates a QMS. Annex IX defines how a Notified Body assesses it. Here is what both require and how they connect to EN ISO 13485.
ISO 9001 is a general quality management standard. ISO 13485 is medical device-specific. Here is why MDR effectively requires the latter, and what the differences actually are.
A lean QMS is not a stripped-down QMS. It is a QMS where every process reflects real work and nothing else. Here is how startups build one that actually runs.
The minimum viable QMS is the smallest QMS that satisfies MDR Article 10(9) and EN ISO 13485:2016+A11:2021 for your specific device. Here is what you need before your first audit.
The process approach is the foundation of EN ISO 13485. Here is how to map a startup's real processes into a QMS that auditors recognize as a working system.
EN ISO 13485 clauses 5.3 and 5.4 require a quality policy and quality objectives. Here is how to write them for a startup without sounding like a corporate template.
Top management under MDR is accountable for the QMS. Here is what the CEO or founder must personally own, using EN ISO 13485 clause 5 as the framework.
Management review under ISO 13485 clause 5.6 is where the CEO signs off on the QMS. Here is how to run it efficiently in a small team without turning it into theatre.
EN ISO 13485 clause 6 covers personnel, infrastructure, and work environment for medical device manufacturers. Here is how to apply it in a startup.
EN ISO 13485 clause 6.2 requires documented competence for personnel performing work affecting product quality. Here is how startups operate it.
Document control is where most small-team QMS systems break. Here is an ISO 13485 clause 4.2.4-based approach that actually works for MedTech startups.
Records under EN ISO 13485 clause 4.2.5 must be identifiable, retrievable, legible, and retained for defined periods. Here is what that means for a startup.
EN ISO 13485 clause 7.3.2 requires design and development planning. Here is what to include and how to keep it proportionate in a startup.
Design inputs are the specifications that define what the device must do. EN ISO 13485 clause 7.3.3 expects them to be unambiguous and verifiable. Here is how to write them.
Design outputs are the specifications produced by development: drawings, code, parameters. EN ISO 13485 clause 7.3.4 defines what they must show. Here is how to document them.
Design reviews under ISO 13485 clause 7.3.5 are more than meetings. Here is how to run them effectively in a startup without making them theatre.
Design verification under ISO 13485 clause 7.3.6 proves that design outputs meet design inputs. Here is what that looks like in practice and how to document it.
Design validation under ISO 13485 clause 7.3.7 proves the finished device meets the user needs and intended use. Here is what validation evidence looks like for a startup.
Design transfer under EN ISO 13485 clause 7.3.8 moves a validated design into production. Here is what the clause requires and how startups handle the handoff.
Design changes are constant in MedTech development. EN ISO 13485 clause 7.3.9 defines how to manage them. Here is how to iterate without breaking compliance.
The Design History File documents your medical device development story. MDR does not use the term but ISO 13485 clause 7.3 requires exactly this. Here is how to build one.
DMR and DHR are FDA terms. Under MDR, the medical device file in ISO 13485 clause 4.2.3 and production records in clause 7.5 do the same job.
Supplier control is where many MDR audits surface findings. EN ISO 13485 clause 7.4 defines the expectation. Here is the startup-scale implementation.
EN ISO 13485 clause 7.4.1 requires supplier qualification proportionate to product impact. Here is the startup-scale qualification process.
How MDR and EN ISO 13485 treat outsourced processes and contract manufacturers, with a quality agreement playbook for lean MedTech startups.
Walk MDR production controls clause by clause through EN ISO 13485 section 7.5, with a lean production control playbook for MedTech startups.
EN ISO 13485 clause 7.5.6 requires validation of processes whose output cannot be fully verified. Here is what that means in practice.
MDR requires traceability of devices from production to end user. EN ISO 13485 clauses 7.5.8 and 7.5.9 provide the framework. Here is the startup implementation.
How EN ISO 13485 clause 7.6 governs calibration, traceability, and software validation for monitoring and measuring equipment under MDR.
CAPA under MDR relies on EN ISO 13485 clauses 8.5.2 and 8.5.3. Here is the full process from nonconformity detection to effectiveness verification.
A good CAPA process finds real root causes and prevents recurrence. A bad one generates paperwork. Here is how to run the effective kind in a small team.
Root cause analysis is the heart of CAPA under EN ISO 13485. Here are the techniques that work in small MedTech teams without bureaucratic overhead.
How nonconforming product control MDR ISO 13485 clause 8.3 segregation, decision records, and the bridge to FSCA and vigilance actually work.
Internal audits under ISO 13485 are mandatory and independent. Here is how a 3-person startup actually runs them without faking independence or drowning in paperwork.
Internal audits are mandatory under EN ISO 13485 even for the smallest teams. Here is how a 3-person MedTech startup runs them without breaking independence.
EN ISO 13485 clause 8.2.2 requires a documented procedure for customer feedback. Here is how it ties to MDR PMS, vigilance, and CAPA.
EN ISO 13485 clauses 8.4 and 8.5.1 require data analysis and continual improvement. Here is how to operate them in a startup without theatre.
How to compare eQMS platforms for a MedTech startup under MDR — what the tool must support, build vs buy, and a neutral selection playbook.
Cloud-based eQMS platforms are attractive for startups, but they bring specific MDR compliance considerations. Here is what to check before committing.
How to build an EN ISO 13485:2016+A11:2021 QMS for a software-first MedTech startup that runs agile sprints, without burning runway on paper.
ISO 13485 design controls can coexist with agile sprints if the design record is captured at the right cadence. Here is how.
The essential QMS documentation templates startups need for MDR: the document list mapped to Article 10(9) and EN ISO 13485:2016+A11:2021 clause 4.2.
ISO 13485 certification is how you demonstrate the QMS that MDR Article 10(9) requires. Here is the path from application to certificate.
An ISO 13485 certification body is not the same as an MDR Notified Body. Here is how to choose one that actually serves your MDR path.
ISO 13485 certification costs both fixed fees and ongoing effort. Here is the honest startup cost picture at general framing.
How to combine ISO 13485 and MDR Annex IX audits into one efficient assessment, what overlaps, and the gap items only MDR covers.
MDSAP startup decision guide: what the single audit covers, the five member markets, and how it relates to ISO 13485 and MDR conformity.
Remote and multi-site MedTech startups face specific QMS challenges. Here is how to keep one QMS coherent across distributed teams.
The ten most common QMS audit nonconformities in MDR startup audits — and the ISO 13485 clause each one violates.
Most MedTech startups have years of chaos before they need a QMS. Here is the phased approach that converts the mess into compliance without starting from zero.
Certification is the start, not the finish line. Here is the rhythm that keeps a MedTech QMS alive after the first MDR audit without drowning the team.
A five-level QMS maturity model for MDR startups — from minimum compliant to strategic excellence, tied back to EN ISO 13485:2016+A11:2021 clauses.
The complete QMS audit preparation checklist for MedTech startups: every document, every process owner, every rehearsal step before the auditor walks in.
A documented regulatory monitoring MDR process: how to track amendments, MDCG releases, and standard updates, and turn signals into action.
GEMBA walks in MedTech manufacturing under MDR: frequency, what to observe, and how to record findings as continuous-improvement evidence.