ISO 13485 – Medical Devices Quality Management

TGA & FDA market access pathway

Enter markets. Pass audits. Prove Med-Tech Quality.

ISO 13485 is the medical device industry's non-negotiable quality standard — expected by the TGA, FDA, European MDR and every hospital procurement team. Get certified fixed-fee with ex-auditor consultants, UKAS accredited.

Get my fixed-fee quote → Call +61 38 256 7547
35K+Global clients
30K+Certifications issued
30+Years of experience
UKASAccredited partner
ISO 13485:2016

Medical Devices QMS

Global market-entry ready.

Accepted by TGA, FDA & EU MDR
Full design & lifecycle controls
Risk-based documentation built in
Unlocks hospital & export contracts
Typical timeline 14–18 weeks
About ISO 13485

The quality system medical device regulators around the world ask for — by name.

ISO 13485:2016 is the global standard for a Quality Management System (QMS) specific to medical devices. It's not a rebrand of ISO 9001 — it's stricter, traceability-driven, and built around the reality that a defect in your product can harm a patient.

For Australian manufacturers, importers, and sponsors, 13485 is the bedrock of a compliant ARTG inclusion, TGA conformity assessment, and export access into the EU, UK, Canada, and the US. It's the foundation every overseas regulator will assume you already have.

With the TGA's regulatory reforms, software-as-a-medical-device (SaMD) now in scope, and the FDA's QMSR (21 CFR 820) harmonising with ISO 13485 from 2026, there has never been a better time to get certified — or a more commercially costly time to delay.

Technical File · Extract TF-2025-0419
DOC · QMS/001 Rev 03 ISO 13485:2016
Manufacturer
Your Organisation Pty Ltd · Australian Sponsor
Classification
Class I / IIa / IIb / III per TGA Schedule 2
Intended Use
Defined, documented, risk-assessed and verified against user needs.
QMS Standard
ISO 13485:2016 — full applicability, no justified exclusions.
Risk File
ISO 14971:2019 risk management process, integrated.
Market Access
ARTG (AU) · CE Mark (EU) · UKCA (UK) · FDA 510(k) pathway
CONFIDENTIAL ✓ AUDIT-READY
The Australian MedTech Reality

The medical device market doesn't move without 13485.

Four numbers that explain why Australian medtech founders, importers, and contract manufacturers are prioritising 13485 this year.

ARTG
90,000+
Active device entries on the Australian Register of Therapeutic Goods.
Time to Market
−40%
Typical reduction in TGA conformity assessment time when a compliant 13485 QMS is already in place.
Export Access
60+
Countries that recognise ISO 13485 as the baseline medical device QMS standard.
Supplier Audits
1 in 3
AU medical device contracts now require 13485 as a prequalification — not a preference.
Indicative figures. TGA ARTG, IMDRF, industry reporting.
Why It Matters

One certificate. Three markets. Every regulator reading from the same page.

ISO 13485 is the common language of medical device regulation. Here's what your certificate actually unlocks in the jurisdictions Australian medtech companies care about most.

Australia · TGA

ARTG listing & TGA conformity

The baseline QMS the TGA expects before assessing a conformity application or approving an ARTG listing.

  • Supports Class I through Class III manufacturers
  • Aligns with the Essential Principles
  • Evidence for Australian Sponsor obligations
EU · UK · Canada

CE Mark, UKCA & MDSAP

The de-facto requirement for Notified Bodies under EU MDR, for UKCA transition, and for MDSAP audits into Canada.

  • EU MDR 2017/745 conformity baseline
  • UKCA post-Brexit QMS expectation
  • Accepted as the QMS pillar of MDSAP
United States · FDA

21 CFR 820 & the new QMSR

From 2026 the FDA's Quality Management System Regulation harmonises directly with ISO 13485 — get ahead of the transition.

  • Supports 510(k) submission documentation
  • Reduces duplication with FDA inspections
  • Positions you for QMSR effective date
What Your 13485 QMS Covers

The two halves of a medical device quality system

ISO 13485 structures your QMS around the full device lifecycle — from design intent to post-market surveillance. Here's what sits on each side.

Design & Development

Getting the device right before it ships

Clauses 7.3 · 7.2 · 4.2 · ISO 14971
  • ✓Design inputs & user needs, documented and traceable
  • ✓Design verification & validation with objective evidence
  • ✓Risk management file aligned to ISO 14971:2019
  • ✓Design history file (DHF) & technical documentation
  • ✓Regulatory intent: ARTG class, CE route, FDA pathway
  • ✓Clinical evaluation & usability engineering hooks
Production & Post-Market

Keeping the device safe after it's in use

Clauses 7.5 · 8.2 · 8.3 · 8.5
  • ✓Controlled production & sterile manufacturing environments
  • ✓Device Master Record (DMR) & traceable Unique Device ID
  • ✓Supplier controls & critical component qualification
  • ✓Complaints handling, CAPA & non-conformance
  • ✓Post-market surveillance & vigilance reporting (TGA IRIS)
  • ✓Field safety notices & recall readiness
Device Classification

Where does your device sit on the TGA risk ladder?

The higher the risk class, the more your QMS needs to prove. ISO 13485 is the baseline for every class — but the evidence bar rises sharply as you move right.

TGA Schedule 2
Class I
Low risk. Non-invasive or transient use. Self-assessment path available in Australia.
ExamplesBandages, wheelchairs, reusable surgical instruments.
TGA Schedule 2
Class IIa
Low-medium risk. Short-term invasive or active devices. Conformity assessment required.
ExamplesHearing aids, infusion sets, contact lenses, dental fillings.
TGA Schedule 2
Class IIb
Medium-high risk. Long-term invasive or energy-emitting devices requiring deeper scrutiny.
ExamplesVentilators, surgical lasers, dialysis equipment, anaesthesia pumps.
TGA Schedule 2
Class III
Highest risk. Life-supporting, life-sustaining, or substantial impact. Full conformity assessment.
ExamplesImplantable pacemakers, heart valves, spinal implants, SaMD decision systems.
The IMSM 13485 Pathway

Seven stages. Fixed fee. Medical-device experienced consultants.

Most medtech SMEs reach certification in 6–9 months with IMSM. We've done this with start-ups, contract manufacturers, and listed device companies — no two projects are identical.

01
Scope

Scoping & fixed-fee quote

We map your devices, classes, sites, and target markets — then give you a single all-inclusive price. No hourly surprises.

02
Gap

Gap analysis vs ISO 13485:2016

A clause-by-clause assessment of where you are today — including 14971, IEC 62366, and relevant GxP expectations.

03
Risk

Risk file & clinical hooks

We build or refresh your ISO 14971 risk management file and make sure your clinical evaluation story is traceable.

04
QMS

QMS build & documentation

Policies, procedures, DHF/DMR templates, design controls, and CAPA workflows — written for your product, not a generic medtech kit.

05
Training

Staff training & awareness

Role-based training for design, production, QA, regulatory, and top management — with evidence logs auditors will ask for.

06
Audit

Internal audit & mgmt review

A realistic dry run: findings documented, corrected, and signed off before the certification body ever walks in.

07
Cert

Stage 1 & Stage 2 certification

We sit beside you through both audit stages with an accredited certification body, then stay on for annual surveillance.

✓
What you walk away with

A TGA-, FDA-, and Notified-Body-ready QMS

Not a shelf document. A living system.

  • Audit-ready Device Master Record & Design History File
  • ISO 14971-aligned risk file mapped to your clinical evidence
  • Supplier & CAPA workflow that survives inspection
  • Certificate on the wall. Confidence on the shop floor.
FAQ

Questions Australian medtech teams actually ask

Straight answers. No hourly consulting waffle.

How much does ISO 13485 certification cost in Australia?
For most Australian medtech SMEs, the IMSM fixed fee sits between $22,000 and $55,000 all-in, depending on device class, number of products, headcount, and sites. Certification body audit fees are separate and typically sit between $8,000 and $18,000 over Stage 1 and Stage 2.
How long will certification take?
Most small-to-mid Australian medtech businesses reach Stage 2 in 6–9 months. Class III implantables, sterile manufacturers, and SaMD companies typically sit in the 9–12 month range because the evidence bar is higher. We commit to a fixed timeline at quote stage.
We're already ISO 9001 certified. Can we bridge?
Partly. 9001 gives you maybe 40–50% of the structural QMS — document control, management review, CAPA. But 13485 adds design controls, risk management, sterile production, post-market surveillance, and regulatory file requirements that 9001 doesn't touch. We quote the bridge honestly — no pretending it's a rubber-stamp.
How does 13485 interact with TGA conformity assessment?
Under TGA regulations, a compliant 13485 QMS is typically the foundation of a conformity assessment evidence package. Australian sponsors and manufacturers of higher-risk devices (IIa and above) will find a 13485 certificate significantly compresses conformity assessment time and reduces back-and-forth with the TGA.
Do we need ISO 14971 as well?
Practically, yes. ISO 13485 references a risk management process and ISO 14971:2019 is the de-facto expectation from Notified Bodies, the TGA, and the FDA. We build your 14971 risk file as part of the 13485 project so they align by design, not afterthought.
What about CE Mark and UKCA?
ISO 13485 is the QMS pillar underneath both. For CE Mark under EU MDR 2017/745, a 13485 certificate from an accredited body is essentially non-negotiable. For UKCA post-Brexit, the UK recognises 13485-based QMS as the baseline. One project. Three market doors.
We make software-as-a-medical-device (SaMD). Does 13485 apply?
Yes — and increasingly so. SaMD is regulated as a medical device under the TGA (and the FDA, EU MDR, UKCA). ISO 13485 covers the QMS side, and we extend it with IEC 62304 (software lifecycle), IEC 62366 (usability) and cybersecurity considerations so your SaMD story holds up under inspection.
Ready to start

Bring your medical device to market with a certification partner that knows what's at stake.

Talk to our Australian team for a fixed-fee 13485 quote, a realistic timeline built around your device class, and a clear path through TGA, FDA, and Notified Body expectations.

Get my fixed-fee 13485 quote → Book a 15-min discovery call
30+ yrsIn ISO certification
35K+Certificates issued
30K+Organisations supported
Fixed-feeNo hourly billing. Ever.