ISO 13485 Certification (Medical Devices)

Overview

ISO 13485:2016 is the international quality management system standard written specifically for organisations that design, manufacture, or service medical devices. It sits alongside, not inside, India’s own regulatory framework — the certificate is issued by an independent, accredited certification body after an audit, and CapEasy’s role is to get your quality system ready for that audit, not to issue anything ourselves.

Here is the wording that matters for an Indian manufacturer or importer: the text of the Medical Device Rules, 2017 does not itself mandate ISO 13485. What CDSCO actually does, for a Class C or D manufacturing licence, is run a site inspection that assesses your quality management system against criteria described as substantially equivalent to ISO 13485. In practice, that makes a genuine ISO 13485 certificate the fastest and most defensible way to walk into that inspection with your QMS already documented and evidenced — even though nothing in the Rules requires you to hold the certificate as a piece of paper. For Class A and B devices, the standard is not required at all; it is a documentation aid at most.

We do not blur that line to make a sale. If your business needs a Class C/D manufacturing licence, we will tell you plainly that certification is the practical route to a smooth inspection, not a legal precondition — and we will help you build the QMS either way, because the underlying work (document control, risk management, design controls, CAPA, traceability) is what the inspector actually checks.

The certification itself runs on the standard three-year cycle any ISO management-system standard uses: an accredited certification body audits your documented QMS (Stage 1), then its implementation on the ground (Stage 2), issues the certificate, and returns for surveillance audits before a full three-year recertification. We prepare the file and run the internal audit before your assessor arrives; the certificate itself is issued only by them.

Who it’s for

• Medical device manufacturers preparing a CDSCO Class C or D manufacturing licence application
• Class A/B device makers who want a documented QMS to support their licence file, even though the standard is not required at that class
• Importers and distributors of medical devices whose overseas principals or Indian buyers ask for ISO 13485 evidence
• Contract manufacturers and component suppliers selling into medical device supply chains where the standard is a buyer expectation
• Companies that already hold ISO 9001 and want to extend into the medical-device-specific version of the same management system

Eligibility & requirements

• A functioning quality management system covering document control, management review, and internal audit — built if you do not already have one
• Design and development controls appropriate to your device class, including documented risk management records
• Traceability records from incoming components through to finished device and, where applicable, post-market surveillance
• Corrective and preventive action (CAPA) procedures with evidence they are actually used, not just written
• Engagement with a NABCB-accredited (or other IAF-MLA-signatory-accredited) certification body — unaccredited "certificates" are not recognised internationally and will not carry weight with CDSCO or export buyers
• For Class C/D manufacturing licence applicants: alignment between your QMS documentation and what a CDSCO site inspection actually checks, since the two processes run on similar but not identical criteria

How CapEasy handles it

1. Scope the engagement against your device classification and whether the goal is CDSCO licence support, export buyer requirements, or both
2. Gap analysis against ISO 13485:2016 clauses, mapped to what your current documentation and practice already cover
3. Build or repair the QMS: document control, design and development files, risk management records, CAPA and traceability procedures
4. Run an internal audit and management review as the standard itself requires, before any external assessor is involved
5. Shortlist and help you select a NABCB-accredited certification body for the actual Stage 1 and Stage 2 audit
6. Support you through the certification body’s Stage 1 (documentation review) and Stage 2 (on-site implementation) audits, closing any findings raised
7. Once certified, set up the surveillance-audit calendar and keep records current through the three-year cycle to recertification

Documents you’ll typically need

• Existing quality manual, SOPs, and any prior ISO 9001 or QMS documentation
• Device technical file: design specifications, risk management file, and design history records
• Manufacturing process records, incoming inspection and traceability logs
• CDSCO licence documents or the application file in progress, if you are pursuing a Class C/D licence in parallel
• Records of any prior internal audits, management reviews, or customer/regulatory complaints
• Supplier and distributor agreements relevant to your device’s supply chain

CapEasy is a private consultancy and is not affiliated with any government authority. We help you assess eligibility and prepare and file your application; eligibility and approval depend on your specifics and the relevant department’s discretion.