What ISO 13485 is and why buyers ask for it
ISO 13485 is the international standard for a quality management system specific to medical devices. While it shares the structure of a general quality system, it is written for the realities of designing, manufacturing and servicing devices where safety and regulatory compliance are paramount. It is the recognised baseline that the medical device industry expects.
For medtech manufacturers, ISO 13485 is rarely optional in practice. Conformity assessment for CE marking under the EU Medical Device Regulation is closely aligned with it, and customers, distributors and notified bodies expect to see it. Without it, market access and supply relationships stall. Issued under IAS accreditation and the IAF Multilateral Recognition Arrangement, an ISO 13485 certificate gives that assurance internationally and is among the higher-value certifications ABS issues for the healthcare and life-sciences sector.
What the audit covers
Certification is a two-stage assessment built around the demands of device quality, including:
- Design and development controls, where these apply to your scope
- Risk management across the product lifecycle
- Document and record control, with the traceability the sector requires
- Supplier and purchasing controls
- Production and process controls, including sterilisation and cleanliness where relevant
- Handling of complaints, corrective actions and regulatory reporting
Surveillance audits across the three-year cycle confirm the system stays effective as products and regulations evolve. The bar for evidence is deliberately high, which is also why a clean ISO 13485 certificate carries weight with buyers.
Typical timeline
For most organisations, ISO 13485 certification takes around 12–16 weeks from kick-off, depending on the complexity of your products and processes and how mature your quality system already is. Design-active manufacturers typically sit at the longer end. Each engagement begins with a fixed-price scoping call and a proposal within 24 hours.
Common questions
What is the difference between ISO 13485 and ISO 9001?
Both are quality management standards, but ISO 13485 is purpose-built for medical devices, with far stronger emphasis on regulatory requirements, risk management, design controls and traceability. Organisations sometimes hold both — ISO 9001 for general quality and ISO 13485 for device-specific activities.
Is ISO 13485 required for CE marking of medical devices?
ISO 13485 is not legally mandatory, but it is the recognised way to demonstrate a compliant quality management system, and conformity assessment under the EU Medical Device Regulation is closely aligned with it. Most manufacturers seeking CE marking maintain ISO 13485 as the foundation.
Who needs ISO 13485?
Manufacturers of medical devices and the suppliers and service providers in their supply chain — design houses, contract manufacturers, sterilisation services and distributors — where customers or regulators expect a device-specific quality system. It is especially relevant across healthcare and life sciences.
