ISO 13485:2016 is the quality management standard for medical device manufacturing, and its scope explicitly reaches suppliers. Since February 2, 2026 the FDA’s Quality Management System Regulation incorporates it by reference. For a component supplier, compliance shows up as validated processes, traceable records, controlled change, and contamination control where cleanliness affects the product. The FDA does not require a certificate, and holding one does not exempt a manufacturer from inspection.
Every finished device is only as reliable as the components inside it. A molded housing, a stamped contact, an overmolded subassembly: none of them carry the device’s brand, and any one of them can delay a launch, trigger a field action, or put a patient at risk.
That is the reason medical device manufacturing holds its supply base to a standard other industries do not apply, and why a component supplier’s quality system ends up inside the OEM’s risk file whether or not the supplier ever files a submission of its own.
What ISO 13485 Requires of a Component Supplier
ISO 13485:2016, titled Medical devices, Quality management systems, Requirements for regulatory purposes, sets out requirements for a quality management system used by organizations involved in the design, production, installation, and servicing of medical devices, and it extends to the suppliers behind them. Very little medical device manufacturing happens under a single roof, so OEMs rely on outside partners for molded parts, stamped metal components, subassemblies, and tooling.
The standard requires device companies to evaluate and select those suppliers on their demonstrated ability to deliver conforming product. That obligation flows downhill. A certified supplier has been audited against a framework built specifically for medical device manufacturing, which tells an OEM that processes are documented, changes are controlled, risk is managed, and records exist in the form a regulatory submission or an inspection will ask for.
The FDA does not require certificates of conformance to ISO 13485, and holding one does not exempt a manufacturer from inspection. What matters is whether process validation, traceability, change control, and contamination control show up in daily operations.
How the FDA QMSR Changed the Picture
For decades, U.S. device makers worked under the Quality System Regulation in 21 CFR Part 820 while companies selling internationally maintained parallel ISO 13485 systems. The FDA issued a final rule on February 2, 2024 amending Part 820 to create the Quality Management System Regulation, and that rule took effect on February 2, 2026.
The QMSR incorporates ISO 13485:2016 by reference and adds clarifying requirements so the standard operates consistently alongside other FDA rules. Two points are worth stating plainly because they are frequently misread. The FDA does not require certificates of conformance to ISO 13485, and holding a certificate does not exempt a manufacturer from inspection. The regulation also states that its provisions do not apply to manufacturers of components or parts of finished devices, while encouraging those manufacturers to consider the provisions as appropriate. Finished device manufacturers remain accountable for what they purchase, which is precisely why so many prefer component partners already operating inside the medical device manufacturing framework.
Many suppliers hold ISO 9001 and assume it covers medical work. The two standards share a structure but not a purpose.
| Factor | ISO 9001:2015 | ISO 13485:2016 |
|---|---|---|
| Scope | Any organization in any industry | Medical device organizations and their suppliers |
| Primary focus | Customer satisfaction and continual improvement | Regulatory compliance and consistently safe devices |
| Documentation | Flexible, based on organizational need | Extensive documented procedures and records |
| Process validation | General control of production processes | Required when output cannot be fully verified afterward |
| Traceability | Identification and traceability where needed | Documented requirements, with added rules for implantables |
| Regulatory alignment | Not tied to a specific regulation | Incorporated by reference into the FDA QMSR |
The Quality System Elements That Decide Component Quality
A certificate matters only to the extent it shows up in daily operations. Process validation is first, because some outcomes cannot be verified by inspecting the finished piece. The internal integrity of a molded part is the standard example. When output cannot be fully checked afterward, the process itself has to be validated to prove it produces conforming parts within defined parameters, and those parameters then have to be maintained.
Traceability is second. Lot and material records connect a component back to its raw material, production run, and equipment. When something surfaces in the field, traceability determines whether the investigation covers one lot or a year of production. Change control is third, since a new resin grade, a tool repair, or a relocated line can all invalidate a validated process. Nonconformance and corrective action close the loop. Where cleanliness affects product quality, contamination control belongs in the same list, which in medical device manufacturing usually means cleanroom molding and assembly for sensitive components.
The Processes Behind Medical Device Manufacturing
Compliance is a system, but it is executed through specific processes, and most devices combine several. Injection molding produces housings, connector bodies, and other components where complex geometry and repeatable dimensions both matter. Insert molding and overmolding combine metal and plastic, or two resins, into a single part, which removes assembly steps and the failure points that come with them.
High speed metal stamping produces the contacts, springs, and clips that frequently serve as those inserts. Automated assembly then brings the pieces together with consistent placement and in-process inspection, which removes the variation manual handling introduces. Early design support ties the set together. As device designs and materials have grown more complex, involving the manufacturer during prototyping is what keeps material cost, cycle time, and manufacturability from being discovered after tooling is committed.
New Concept Technology holds ISO 13485:2016 certification for its medical devices quality management system alongside ISO 9001:2015, and maintains ISO 14644-1 cleanroom capability.
How to Evaluate a Medical Device Manufacturing Partner
Certification is the entry requirement, not the evaluation. Confirm that the ISO 13485 certificate is current and, more importantly, that its scope covers the processes your parts actually require. Ask how molding, stamping, and assembly processes are validated and how validated parameters are monitored over time rather than at qualification only.
Confirm that material lots, production runs, and inspection results can be traced for every shipment. Find out how process, material, and tooling changes are evaluated and at what point you are notified. If your parts need it, verify cleanroom capability and the current certification behind it rather than accepting a general claim. Finally, look for engineering depth, because a partner with in house design, tooling, and automation capability resolves problems in days instead of quote cycles. In medical device manufacturing, a site visit remains the most efficient way to see whether these practices are lived or filed.
Single Source Medical Device Manufacturing at NCT
New Concept Technology supports medical device manufacturing from concept through production at a 200,000 square foot facility on a 20 acre campus in Emigsville, Pennsylvania, with nearly 30 years of manufacturing experience. The company holds ISO 13485:2016 and ISO 9001:2015 certification, maintains ISO 14644-1 cleanroom capability, and is C-TPAT compliant.
Product and automation engineers with medical industry experience partner with designers on complex component work, drawing on rapid design and prototyping, custom overmold solutions, injection molding, high speed stamping, device assembly, and in house tool design and fabrication. NCT works with Fortune 500 customers as a single source, design through manufacturing partner across medical, automotive, electronics and datacom, telecommunications, industrial, and aerospace and defense markets.
Frequently Asked Questions
What is ISO 13485?
ISO 13485:2016 is the international standard for quality management systems in medical device manufacturing. It applies to organizations involved in the design, production, installation, and servicing of medical devices, and to the suppliers that provide products and services to them.
Does the FDA require ISO 13485 certification?
No. The FDA’s Quality Management System Regulation, effective February 2, 2026, incorporates ISO 13485:2016 by reference, but the FDA does not require certificates of conformance. A certificate also does not exempt a manufacturer from FDA inspection.
Does the QMSR apply to component manufacturers?
The regulation states that its provisions do not apply to manufacturers of components or parts of finished devices, though they are encouraged to consider the provisions as appropriate. Finished device manufacturers remain accountable for supplier quality.
What is the difference between ISO 9001 and ISO 13485?
ISO 9001 is a general quality standard for any industry that emphasizes customer satisfaction and continual improvement. ISO 13485 is built for medical device manufacturing and adds requirements for regulatory compliance, documentation, process validation, and traceability.
Why is process validation required for some parts and not others?
Because some outcomes cannot be verified by inspecting the finished piece. The internal integrity of a molded part is the standard example. When output cannot be fully checked afterward, the process itself must be validated to prove it produces conforming parts within defined parameters.
What should I ask when qualifying a medical component supplier?
Whether the ISO 13485 certificate is current and its scope covers your processes, how molding, stamping, and assembly are validated, whether lots and inspection results are traceable per shipment, how changes are evaluated and communicated, and what cleanroom certification is in force.
Qualify a partner that already works inside the framework.
New Concept Technology holds ISO 13485:2016 and ISO 9001:2015 with ISO 14644-1 cleanroom capability, and supports medical device manufacturing from prototyping and tooling through molding, stamping, and automated assembly. Contact us to discuss your program.
Contact Us →Sources
| Organization | Resource |
|---|---|
| International Organization for Standardization | ISO 13485:2016 Medical Devices Quality Management Systems |
| U.S. Food and Drug Administration | Quality Management System Regulation (QMSR) |