MDR Article 10 and Annex IX require manufacturers to run production under controlled conditions that consistently produce conforming devices. EN ISO 13485:2016+A11:2021 section 7.5 is the blueprint: it covers controlled conditions, cleanliness, installation, servicing, sterile devices, validation of processes and sterilisation, identification, traceability, and preservation. Walk these sub-clauses and you walk the MDR production expectation.

By Tibor Zechmeister and Felix Lenhard.

TL;DR

  • MDR Article 10 holds the manufacturer responsible for ensuring that serial production remains in conformity with the device as assessed.
  • EN ISO 13485:2016+A11:2021 section 7.5 breaks this down into nine sub-clauses covering everything from work instructions to preservation.
  • Process validation (7.5.6) applies whenever the output cannot be fully verified by subsequent monitoring or measurement.
  • Sterilisation validation (7.5.7) is always required for sterile devices.
  • Identification and traceability (7.5.8 and 7.5.9) are the backbone of any field safety action.
  • Startup-sized compliance means right-sized work instructions, risk-based validation, and a single source of truth for batch records.

Why this matters

A technical file can be beautiful and a device can still fail in production. Stage 1 audits look at documentation. Stage 2 audits walk the shop floor, or the CMO's shop floor, and ask the operators what they are doing and why. That is where clause 7.5 lives. It is also where most first-time founders discover that "we have a QMS" and "our production is actually controlled" are different statements.

The good news is that clause 7.5 is written in plain language and maps cleanly to what any sensible manufacturing engineer would do anyway. The hard part is deciding how much formality is enough for a seven-person team making a hundred devices a quarter, without drowning in paperwork that nobody reads.

This post walks section 7.5 clause by clause with startup-sized expectations and shows you how to build a lean production control system that holds up to a notified body audit.

What MDR actually says

MDR Article 10 sets out the general obligations of manufacturers, including the obligation to ensure that serial production of devices remains in conformity with the requirements of the regulation. The QMS must address manufacturing process controls, product realisation, and verification of UDI assignments, among other things.

MDR Annex IX section 2.2 requires the notified body to assess, as part of the QMS audit, whether the manufacturer's system ensures that the devices manufactured conform to the documentation and requirements applicable to them. In practical terms, this is where production controls get audited.

EN ISO 13485:2016+A11:2021 section 7.5 translates this into nine operational sub-clauses.

7.5.1 Control of production and service provision. Production shall be carried out under controlled conditions. Controlled conditions include documented procedures, work instructions, reference documentation, suitable infrastructure, implementation of monitoring and measurement, implementation of product release, delivery and post-delivery activities, and traceability-related operations. The standard specifically requires records of the batch or quantity manufactured and the person authorising release.

7.5.2 Cleanliness of product. The manufacturer shall document requirements for cleanliness or contamination control for products that are cleaned before sterilisation, cleaned by the user before sterilisation, supplied non-sterile but intended for cleaning before use, or where cleanliness is critical to performance.

7.5.3 Installation activities. Where appropriate, the manufacturer shall document requirements for installation and acceptance criteria, and keep records of installations performed by the manufacturer or its authorised provider.

7.5.4 Servicing activities. Where servicing is a specified requirement, the manufacturer shall document servicing procedures and analyse servicing records to identify whether complaints should be fed back into the feedback system.

7.5.5 Particular requirements for sterile medical devices. The manufacturer shall retain records of the parameters of the sterilisation process used for each sterilisation batch. Sterilisation records shall be traceable to each production batch of medical devices.

7.5.6 Validation of processes for production and service provision. The manufacturer shall validate any processes where the resulting output cannot be, or is not, verified by subsequent monitoring or measurement. Validation shall demonstrate the ability of the process to achieve planned results. Criteria for review and approval, equipment qualification, personnel qualification, methods and procedures, records, revalidation, and approval of changes must be defined. Validation software used in production and service provision shall be validated prior to use and after changes.

7.5.7 Particular requirements for validation of processes for sterilisation and sterile barrier systems. Sterilisation processes and sterile barrier systems must be validated before implementation and after product or process changes. Records shall be maintained.

7.5.8 Identification. The manufacturer shall identify product throughout product realisation by suitable means, and identify product status with respect to monitoring and measurement requirements. Where traceability is a requirement, the organisation shall control and record the unique identification of the product.

7.5.9 Traceability. The manufacturer shall document procedures for traceability, defining the extent required and the records needed. For implantable devices, records of components, materials, and conditions for the work environment shall be retained where they could cause the device not to satisfy specified requirements.

7.5.10 and 7.5.11 Customer property and preservation of product. Property belonging to the customer must be protected. Product must be preserved during processing, storage, handling, and distribution, including identification, handling, packaging, storage, and protection.

That is the full blueprint. Everything on the shop floor, mapped to a clause.

A worked example

Imagine a small orthopaedic startup making a Class IIa reusable surgical guide. Production happens at a contract manufacturer: CNC machining, passivation, cleaning, inspection, packaging (non-sterile, user cleans and steam sterilises before use). Annual volume: 800 units across 30 lots.

Here is how 7.5 maps in practice:

7.5.1 Controlled conditions. One master work instruction per production step, versioned, signed, and present at the workstation. Batch record template captures lot number, operator, equipment IDs, in-process check results, and release signature. No lot ships without a completed batch record.

7.5.2 Cleanliness. Because the device is supplied non-sterile but intended for cleaning before use, the manufacturer documents the cleaning procedure, the residual bioburden specification, and the validation of the final cleaning step performed at the CMO before packaging. Operator cleaning logs are retained with the batch record.

7.5.3 Installation. Not applicable — no installation required. Documented as not applicable in the QMS scope statement.

7.5.4 Servicing. Not applicable in the classical sense, but the IFU instructs users on inspection before reuse. Complaints about wear or damage feed into the feedback system.

7.5.5 and 7.5.7 Sterilisation. Not applicable — the device is supplied non-sterile. Documented accordingly, but the cleaning validation in 7.5.2 is still required.

7.5.6 Process validation. The cleaning process and the passivation process are validated, because the resulting output (surface cleanliness, corrosion resistance) cannot be fully verified on every unit non-destructively. Each validation has a protocol, qualification records for equipment and personnel, acceptance criteria, and a revalidation trigger list.

7.5.8 Identification. Each unit is laser-marked with a UDI-DI and lot number. In-process status is tracked by colour-coded trays and a simple Kanban system on the shop floor.

7.5.9 Traceability. Procedure defines lot-level traceability. Each lot traces to raw material certificates, machining run, passivation batch, cleaning batch, and final inspection records. Retention: 10 years minimum.

7.5.11 Preservation. Packaging validation confirms that the transport packaging protects the device from the CMO to the end user under defined conditions. Storage conditions at the CMO and at the startup's small warehouse are monitored.

Total production control documentation: about 25 documents. One folder per clause. The notified body auditor can follow the thread from any device back to its batch record in under five minutes. That is the target.

The Subtract to Ship playbook

Section 7.5 looks intimidating, but most of it falls away if you apply two filters honestly: "does this sub-clause apply to our device?" and "how much formality does the risk justify?"

1. Write a section 7.5 applicability matrix on one page. For each sub-clause, state: applicable yes/no, justification, and pointer to the controlling document. This kills the "where is our 7.5.5 evidence?" question in about two minutes during an audit. Non-sterile devices, for example, can document 7.5.5 and 7.5.7 as not applicable with a sentence of justification.

2. One work instruction per production step, and actually use it. Work instructions that live in a binder nobody opens are worse than no work instructions, because they create evidence of a documented system that is not followed. Put them at the workstation. Revise them when the process changes. Have the operator sign the batch record to confirm they followed the current version.

3. Validate what you cannot verify, and only what you cannot verify. Clause 7.5.6 is risk-based. Cleaning, sterilisation, sealing, moulding, welding, soldering, adhesive bonding — typical candidates. Dimensional machining that you 100% inspect is not process validation territory, it is monitoring and measurement. Do not validate what you can simply measure.

4. Sterilisation validation is non-negotiable if the device is sterile. There is no lean shortcut here. Use the appropriate validation standard for your method (ethylene oxide, steam, radiation, etc.), keep the records, and re-validate on change. If you cannot afford to do this right, reconsider whether the device needs to be supplied sterile.

5. Traceability ends with a phone call at 2 a.m. The real test of clause 7.5.9 is: at 2 a.m. on a Sunday, can you identify every unit affected by a defective lot of incoming raw material? If the answer is "yes, in fifteen minutes," your traceability system works. If the answer is "we would have to spend a week reconstructing it," it does not.

6. Preservation is the cheapest way to fail an audit. A beautifully manufactured device sitting in a cardboard box on a warehouse floor, exposed to temperature swings, will fail clause 7.5.11. This is one of the easiest fixes (shelving, temperature log, segregation of released vs non-released stock) and one of the most commonly overlooked.

7. Keep batch records in one place. Paper, spreadsheet, or eQMS — your choice, but one place. Split batch records across three systems and you will lose them at exactly the wrong moment.

Reality Check

  1. Do you have a one-page 7.5 applicability matrix, with justifications for every "not applicable"?
  2. Can you show a controlled work instruction for every production step, at the workstation where it is used?
  3. For every process where output is not fully verified, do you have a current, approved validation?
  4. If your device is sterile, is the sterilisation validation current and are per-lot sterilisation records retained?
  5. Can you pull a complete batch record for the last lot you shipped, without asking three people?
  6. Could you identify every affected unit within one hour if a raw material lot were recalled?
  7. Does your warehouse (or CMO's warehouse) actually maintain the storage conditions you specified?
  8. When a process changes, does revalidation get triggered automatically, or is it something someone has to remember?

Frequently Asked Questions

What counts as a "controlled condition" under 7.5.1? A documented procedure or work instruction, suitable equipment, trained personnel, defined monitoring, and release records. If any of those four are missing, the condition is not controlled.

Do we need process validation for every production step? No. Only for steps where the output cannot be verified by subsequent monitoring or measurement. A dimensional inspection after machining is verification. A steam sterilisation cycle is validation territory because you cannot inspect sterility on every unit.

How often do we need to revalidate a process? Whenever there is a significant change (equipment, materials, operators, environment, specifications), or at a defined periodic interval driven by risk. Annual revalidation for high-risk processes is common; three-year cycles can be acceptable for stable low-risk processes with continuous monitoring.

Is UDI marking enough for traceability under 7.5.9? UDI covers identification under 7.5.8 and is part of traceability, but clause 7.5.9 also requires the link back to components, materials, and process records. UDI without batch record linkage does not satisfy the clause alone.

What retention period applies to batch records? MDR requires records to be kept for at least 10 years after the last device is placed on the market, and at least 15 years for implantable devices.

Can electronic batch records replace paper? Yes, provided the eQMS or MES is validated (clause 7.5.6 covers software used in production), records are controlled, audit trails are intact, and retention requirements are met.

Sources

  1. Regulation (EU) 2017/745 on medical devices, consolidated text. Article 10, Annex IX section 2.2.
  2. EN ISO 13485:2016+A11:2021, Medical devices — Quality management systems — Requirements for regulatory purposes. Section 7.5.