ISO 13485 Consulting Services for Your QMS

Any medical device developer or manufacturer is required to establish and maintain a quality management system within their organization.

While the law does not always explicitly demand certification to ISO 13485, this standard is internationally recognized and accepted under multiple regulatory frameworks, including EU MDR, FDA’s Quality Management System Regulation (QMSR), and MDSAP.

No. Importers are not required to implement a full ISO 13485 quality management system or hold certification.

However, under EU MDR Article 13, FDA 21 CFR 806, and Health Canada CMDR/MDSAP requirements, importers must have documented procedures ensuring that imported devices comply with all regulatory obligations.

These include verifying CE marking and technical documentation (for E.U.), ensuring that devices come from MDSAP-certified manufacturers (for Canada), and maintaining processes for traceability, complaint handling, and incident reporting across all regulated markets.

The time needed to implement an ISO 13485–based QMS depends on the size, structure, and complexity of your organization.

For smaller companies establishing a QMS from the ground up, typically with 10–40 employees, it is feasible to complete the full implementation within 3 to 4 months, provided that decision-making is efficient and the project is well-coordinated.

For larger organizations with more complex structures, extensive documentation, and numerous interlinked processes, implementation or transition projects can range from 6 to 18 months, depending on the level of QMS redesign and system integration required.

Speeding up QMS implementation is about focus, structure, and clear responsibilities.

For smaller companies and startups, the fastest approach is to start with a set of predefined, proven QMS documents and adapt them to your organization. The goal is feasibility, not unnecessary complexity.

We take care of the full implementation, designing and connecting all processes efficiently, and avoiding common pitfalls seen during audits. Once the system is complete, we hand it over to your Quality Management Representative, train your team, and remain available for ongoing support.

For larger organizations, successful and timely implementation depends on a clearly defined scope, clear objectives, and realistic boundaries. It is essential to set what will be done now and what will be addressed in later phases, so the effort stays focused and leads to measurable results.

We can lead the transformation and manage the workload, but the key decisions must come from within your organization. Every QMS transition requires commitment and resources and may temporarily shift focus from other activities. It is therefore essential that the organization decides to move in this direction and fully supports the implementation effort from the start.

Joint workshops at the beginning help define the scope, goals, and expectations, ensuring that decisions are made quickly and consistently throughout the project.

Implementing ISO 13485 provides the essential foundation for a medical device quality management system, but in most cases, it is not sufficient on its own.

The standard defines core requirements but often references other processes without detailing how they should be managed; for example, design and development controls, technical documentation, or risk management integration, where it is necessary to apply and integrate additional ISO and IEC standards.

Additional requirements arise from jurisdiction-specific regulations such as FDA 21 CFR QMSR, EU MDR, and the Canadian Medical Device Regulations (CMDR).

These frameworks introduce specific obligations for post-market surveillance, vigilance, clinical follow-up, and periodic safety reporting, as well as for recall management, labeling and packaging controls, device registration, and oversight of import and distribution activities. Addressing these areas within your QMS ensures complete and consistent compliance across all regulatory markets.

We help you integrate these complementary requirements into your QMS so that your system functions as a complete, compliant, and globally aligned framework.

The additional standards to be integrated into your QMS depend on the type and intended use of your medical device.

Beyond jurisdiction-specific regulations such as the U.S. QMSR, EU MDR, or Canadian CMDR, most manufacturers also implement ISO 14971 for risk management.

If you develop medical software, standards such as IEC 62304, IEC 82304, or IEC 81001-5-1 will apply. For needle-based injection systems, the relevant standard is ISO 11608, while electrical medical device manufacturers must comply with IEC 60601-1 and its collateral standards.

Each product category has its own applicable set of requirements, and we can help you integrate them into a single, compliant, and efficient QMS framework.

Having documents and templates is a good start, but it’s not enough to pass an audit or FDA inspection.

Auditors look beyond what is written, they want to see how your quality management system actually works in daily practice.

It’s not about having a folder full of procedures; it’s about showing that your team follows them, understands them, and uses them to make decisions.

A QMS must be a living system, something that connects management with the rest of the organization, helps evaluate how processes perform, and ensures that your products remain safe and compliant.

The real challenge is not creating documents, but building a QMS system that truly reflects how your company operates. A system that is practical, sustainable, and part of your everyday work.