ISO13485

The full name of ISO13485 is "Medical devices — Quality management systems — Requirements for regulatory purposes." It is a quality management system standard applicable in the regulatory environment for medical devices, recognized by the Certification and Accreditation Administration of China. Below is a brief introduction and a checklist of considerations:

• Standard Focus: ISO13485 emphasizes regulatory requirements as the main thread, strengthening the primary responsibility of enterprises to meet these requirements; it advocates a risk-based approach to process management, requiring organizations to apply risk-based methods to control appropriate processes needed for the quality management system; it highlights the requirements for communication and reporting with regulatory authorities; compared to ISO9001, it places greater emphasis on documentation and record-keeping requirements.

• Scope of Application: This standard applies to organizations involved in the design and development, production, storage and distribution, installation, servicing, and final decommissioning and disposal of medical devices. This includes medical device designers and manufacturers, medical device distributors, medical device service providers, medical device software and hardware developers, and medical device component/material suppliers.

• Product Scope: ISO13485 certification covers related products divided into 7 technical fields: non-active medical devices, active (non-implantable) medical devices, active (implantable) medical devices, in vitro diagnostic medical devices, sterilization methods for medical devices, medical devices containing/using specific substances/technologies, and services related to medical devices.

Checklist of Considerations

• Document Preparation - Quality Manual: Should accurately reflect the enterprise's quality management system, cover all requirements of the ISO13485 standard, and provide detailed descriptions based on the enterprise's actual situation. Quality policy and objectives should be clear, measurable, and aligned with the enterprise's strategic direction.

• Procedure Documents: Must be complete and clear, specifying the operational processes and control requirements for each quality management process, with particular attention to key procedures such as document control, record control, and internal audits.

• Work Instructions: Should be practical and provide specific guidance for employees' actual work. Ensure all quality records are authentic, accurate, and complete, enabling traceability of the product production and quality control processes.

• Personnel Training - Comprehensive Training: Provide comprehensive ISO13485 standard training to all employees, ensuring they understand the purpose of certification, the requirements, and their responsibilities within the quality management system.

• Key Training: Focus on training key personnel, such as quality management staff and internal auditors, ensuring they possess the necessary professional knowledge and skills. Training content should include medical device regulations, quality management knowledge, and professional skills.

• Production Site Management - Environmental Management: Maintain a clean and orderly production site that meets the hygiene and environmental requirements for medical device production. Strictly manage the zoning and labeling of raw materials, semi-finished products, and finished products.

• Equipment Management: Ensure production and testing equipment are in good condition, with maintenance plans and records in place. Regularly calibrate and validate equipment.

• Special Process Control: Strengthen the validation and control of special processes, such as sterilization and welding processes. Ensure operators are qualified and skilled, and process parameters are effectively controlled.

• Supplier Management - Evaluation and Selection: Establish a strict supplier evaluation and selection mechanism. Conduct comprehensive assessments of supplier qualifications, product quality, delivery times, etc. Select qualified suppliers and sign quality assurance agreements.

• Performance Evaluation: Regularly evaluate supplier performance, promptly identify and resolve issues, and ensure the stable and reliable quality of raw materials and components.

• Regulatory Compliance - Monitor Regulatory Changes: Starting from 2025, Class II and above products must establish complete cybersecurity documentation; sterile medical devices must add packaging integrity verification items; AI medical devices need to provide algorithm training dataset traceability records, etc. Enterprises must stay informed and meet these regulatory requirements in a timely manner.

• Internal Audits and Management Review - Internal Audits: Conduct internal audits regularly as planned, covering all departments and processes of the quality management system. Auditors should possess appropriate qualifications and capabilities, and the audit process must be objective, fair, and rigorous.

• Management Review: Conduct regular management reviews chaired by top management to evaluate the suitability, adequacy, and effectiveness of the quality management system, and propose improvement directions and measures.

• Communication with Certification Body - Maintain Communication: During the certification process, maintain close communication with the certification body, stay updated on the certification progress and requirements, actively cooperate with the audit work, and provide authentic and accurate information and materials.

• Issue Handling: Take seriously any issues and suggestions raised by the certification body, promptly rectify and respond. If there are questions or disputes, fully communicate and negotiate with the certification body.