# ISO 13485 – Medical devices – Quality management systems – Requirements for regulatory purposes > ISO 13485 is the international standard for quality management systems specifically for medical device manufacturers. As a standard, it is not itself legally mandated, but in practice it is a precondition for obtaining CE marking under the EU MDR or authorisation via Swissmedic under the MedDO: without a certified QM system to ISO 13485, notified bodies and supervisory authorities generally refuse conformity assessment. - Type: Standard, Market-driven - Scope: Switzerland, EU, Germany - As of: 24 September 2026 - Page: https://sacosi.ch/en/norms/iso13485 - Regulatory Check: https://sacosi.ch/en/regulation#normencheck ## When does ISO 13485 apply to you? - Activity: Medical devices (Likely applies): You manufacture a medical device - ISO 13485 is the de facto basis of every MDR conformity assessment and every Swissmedic authorisation; without a certified QM system, you generally will not get CE marking or market access. - Industry: MedTech (Likely applies): As a MedTech company, your quality management system is highly likely to be measured against ISO 13485 by customers, notified bodies and supervisory authorities, even though your own certification needs to be checked case by case. - Role towards customers: Manufacturer, Supplier (applies if additionally: Activity: Medical devices) (Recommend individual review): As a manufacturer or supplier for medical devices, your customers and the conformity assessment bodies typically require an ISO 13485-certified QM system, including for supplied components or software. ## Exceptions - Certification to ISO 13485 is not legally mandatory in every case; for very simple products in a low risk class, a reduced conformity assessment procedure without full ISO 13485 certification may suffice, depending on the jurisdiction. Which product classes this concerns case by case was not verified in this session. - Pure suppliers of non-medical-device components with no specific medical intended purpose do not fall directly within the standard's scope, even though customers can impose contractually similar requirements. ## Obligations - Establish, document, implement and maintain a quality management system per the standard's requirements, across the entire product life cycle from development through manufacturing to post-market surveillance. - Integrate risk management into the QM system (in practice usually in conjunction with ISO 14971). - Ensure traceability of products and processes. - Conduct regular internal audits and management reviews. - Where certified: pass external surveillance audits by an accredited certification body. ## Evidence - ISO 13485 certificate from an accredited certification body. - QM manual and documented procedures. - Audit reports (internal and external). - Evidence of risk management, design and development documentation, supplier evaluation. ## Penalties ISO 13485 is not a statutory standard and carries no fines of its own. The de facto compulsion arises via the market: without a valid certificate, notified bodies and Swissmedic generally refuse conformity assessment or authorisation, which amounts to exclusion from the market. Where deviations are found in audit, consequences range from conditions up to withdrawal of the certificate by the certification body. ## Frequently asked questions **Is ISO 13485 legally required?** Not the standard itself, directly. Neither the EU MDR nor the Swiss MedDO literally prescribes 'ISO 13485' in their statutory text. In practice, however, it is the accepted evidence basis by which manufacturers meet the QM requirements of the MDR/MedDO - without it, you will in practice not get a conformity assessment. **Isn't ISO 9001 sufficient too?** No. ISO 9001 is a general QM system; ISO 13485 builds on a similar structure but adds additional, medical-device-specific requirements, for example on risk management, traceability and regulatory documentation. Since the 2016 revision, the two standards have diverged more in substance. **Does an ISO 13485 certification automatically apply equally to Switzerland and the EU?** The standard itself is international and region-independent. Whether a specific certification is recognised by the respective notified body or by Swissmedic depends on the accreditation of the certification body in the relevant jurisdiction - this was not examined in detail in this session. ## Open points of the research - iso.org blocks automated access (HTTP 403 on all attempted URLs, including via curl with a browser user agent); the full text of the standard or the catalogue page could not be read in this session. The current edition stated rests on established professional knowledge (ISO 13485:2016 is the most recently published international edition) and the secondary Johner Institut source, not on a primary text read in this session. - The Johner Institut page summarised via WebFetch inconsistently used the label 'ISO 13485:2021'; this presumably confuses it with the European implementation EN ISO 13485:2016/A11:2021 (an amendment for MDR/IVDR harmonisation), not a new ISO edition of its own. This was not conclusively verified against an iso.org source. - Whether and which product categories can do without full ISO 13485 certification (reduced conformity assessment) was not verified. ## Sources - [ISO 13485:2016 – Medical devices – Quality management systems – Requirements for regulatory purposes](https://www.iso.org/standard/59752.html), International Organization for Standardization (ISO), retrieved 24 September 2026 - [ISO 13485 – Alles Wichtige zur Norm für Medizinprodukte-QM-Systeme](https://www.johner-institut.de/blog/regulatory-affairs/iso-13485/), Johner Institut, retrieved 24 September 2026 --- A professional assessment based on publicly available sources, not legal advice. Whether a given rule applies in your specific case depends on circumstances that are not fully captured here. Source: SACOSI, Situational Awareness Consulting by Ivo Schönberner (https://sacosi.ch).