ISO 13485:2016 is the quality management standard specific to medical devices, covering design and development, risk management (ISO 14971), traceability, sterile and clean-room controls, post-market surveillance and regulatory reporting. In India the Medical Devices Rules, 2017 require manufacturers to operate a quality management system conforming to the Fifth Schedule, which is closely aligned with ISO 13485, and CDSCO licence applications and notified-body audits expect it. It is also the gateway to CE marking, US FDA alignment and most export markets.
Legal basis: ISO 13485:2016 (voluntary international standard); Fifth Schedule of the Medical Devices Rules, 2017 under the Drugs and Cosmetics Act, 1940 (QMS requirements for manufacturers); ISO 14971 for risk management; referenced by notified bodies and foreign regulators
Who needs it
- Manufacturers of Class A, B, C and D medical devices and in-vitro diagnostics applying for or holding CDSCO manufacturing licences
- Contract manufacturers, component suppliers and sterilisation service providers to device companies
- Importers and distributors required to hold a QMS for storage, distribution and post-market activities
- Device start-ups preparing for CE marking, US FDA or other export registrations
- Hospitals and labs that manufacture or assemble devices in-house, where the Rules apply
Common in:Manufacturing & Industrial UnitsPharma & ChemicalsHospitals & Healthcare
Documents required
- 1CDSCO / State Licensing Authority manufacturing or import licence, or the planned application, with device classification
- 2Device master files, specifications, labelling and instructions for use
- 3Design and development records and the risk management file per ISO 14971, where design is in scope
- 4Plant layout with clean-room classification, environmental monitoring and validation records
- 5Process validation, sterilisation validation and equipment calibration records
- 6Supplier approval records and purchasing specifications for critical components
- 7Batch records, traceability records and device history records
- 8Complaint handling, adverse event reporting, recall and post-market surveillance records
- 9Training and competence records and the existing quality manual and procedures
Missing something? We help you obtain or regularise supporting documents before filing.
How we get it done
- 1
Scoping and device classification
Day 1–7We confirm the devices, processes and sites in scope and the regulatory pathway (CDSCO class, export markets) the QMS must support.
- 2
Gap analysis
Day 5–15Current practice is assessed against ISO 13485 and the Fifth Schedule of the Medical Devices Rules, with a dated action plan.
- 3
Risk management and documentation
Day 12–50Quality manual, procedures, device master records, the ISO 14971 risk management file and validation protocols are built with your technical team.
- 4
Implementation, validation and internal audit
Day 45–80Processes and validations run, records accumulate, staff are trained and our auditor conducts the internal audit and management review.
- 5
Certification audit
Day 75–110We attend the Stage 1 and Stage 2 audits, close findings and the ISO 13485 certificate is issued, ready for the CDSCO or notified-body file.
If you skip certification
Manufacturing or importing medical devices without a licence, or without the QMS the Medical Devices Rules, 2017 require, attracts suspension or cancellation of the licence and prosecution under the Drugs and Cosmetics Act, 1940, with product recalls at the manufacturer's cost. Without ISO 13485, CE marking and most export registrations are unavailable, notified-body audits fail, and hospital and government tenders that specify it are closed to you.
Why MYDA Group
Specialists, not generalists
Environmental compliance is our only practice, so your file is handled by people who do this every day.
Fixed fee, written scope
You know the professional fee and the statutory fees before we start. No surprise add-ons.
Inspection and audit-ready
We prepare your site and team for the board visit or certification audit and attend it with you.
Lifetime reminders
Every condition, return and renewal goes into your compliance calendar with alerts.
Frequently asked questions
Is ISO 13485 mandatory in India?
The Medical Devices Rules, 2017 require a QMS conforming to the Fifth Schedule, which is substantially aligned with ISO 13485. ISO 13485 certification is not named as mandatory, but it is the practical way to demonstrate Fifth Schedule compliance and is expected by CDSCO notified bodies auditing Class A and B manufacturers and by overseas regulators.
Does ISO 13485 cover ISO 9001 as well?
ISO 13485 is based on ISO 9001 but trades the emphasis on customer satisfaction and continual improvement for regulatory compliance and risk. Many device companies hold both; if you only make devices, ISO 13485 alone is usually sufficient.
What is the role of ISO 14971?
ISO 14971 is the risk management standard for medical devices and ISO 13485 requires it to be applied throughout the product lifecycle. A compliant risk management file is one of the most scrutinised items in certification and regulatory audits; we build it with your technical team.
Can we get CE marking with ISO 13485?
ISO 13485 is a prerequisite for the QMS route under the EU MDR and IVDR, but CE marking additionally requires technical documentation, clinical evaluation and a notified body assessment. We scope the QMS so it supports the CE project.