ISO 13485 quality management system as a turnkey service
We build a practical ISO 13485 quality management system for medical device manufacturers and take it all the way to certification. You do not need to be quality management experts, as we do the heavy lifting for you.
You receive ready-made document templates, expert support and a clear path to certification. The system is built from the outset to align with MDR and technical documentation, so the same work supports both.
ISO 13485 is the internationally recognised quality management standard for medical device manufacturing and the foundation for meeting MDR requirements.
Our service covers
Initial assessment
System development
Implementation
Certification readiness
- Not just a documentation exercise
- No in-depth standards expertise required
- Not a system left gathering dust
What is ISO 13485?
ISO 13485 is an international standard that defines quality management system requirements for the entire life cycle of medical devices, from design and manufacturing to distribution and servicing. It is based on the ISO 9001 structure, but places significantly greater emphasis on patient safety, risk management and traceability. In practice, ISO 13485 is the system a notified body expects to find when you seek CE marking for your device under MDR.
Documented processes
Design, manufacturing, purchasing and change control are described so that every stage is repeatable and traceable.
Patient safety first
The standard puts patient and user safety at the centre: requirements are derived from risks, not assumptions.
Nonconformities and improvement
Nonconformities, corrective actions and market feedback guide the system towards systematic improvement.
A certified ISO 13485 system demonstrates to notified bodies, customers and distribution partners that your device manufacturing is controlled and compliant.
How we build your ISO 13485 system
MDRpankki delivers your quality management system at a fixed price. You receive a practical implementation that works in your day-to-day operations and withstands notified body scrutiny.
Practical implementation, not a repetition of standard text. We build a system that describes how your device is actually designed and manufactured, rather than an imaginary ideal process.
Tailored to your device risk class. A Class I device manufacturer does not need the same system as a Class IIb manufacturer. We scale the scope according to your product, risk class and organisation size.
Lean, aligned documentation. Quality management documents are made compatible with technical documentation, risk management (ISO 14971) and post-market surveillance, so the same information is not maintained in two places.
Support throughout the journey. Our experts are involved from the initial assessment through the certification audit and subsequent maintenance. You will never be left alone with the auditor's questions.
The result is a quality management system that is a genuine part of your operations, not a separate project for obtaining a certificate.
Implementing ISO 13485, step by step
We deliver the system through a clear service process, with agreed content and a timetable for every stage. We do the writing; you approve it and focus on your product.
Initial assessment
We review your device, its risk class and your current operations. We identify what ISO 13485 and MDR require specifically for your product and what is already in place.
- Define the device risk class and system scope
- Assess existing processes and documents against the requirements
- Prepare a roadmap and a fixed-price implementation proposal
You receive a precise picture of what is missing and what certification requires from you.
System design
We design the quality management system structure around your processes. We define which processes are documented, who is responsible for what and how the system connects to MDR documentation.
- Define the quality policy, objectives and responsibilities
- Describe design, manufacturing and purchasing processes
- Integrate risk management and surveillance into the system
The structure is agreed before writing begins, so no documentation is created unnecessarily.
Documentation
We prepare the quality manual, procedures and form templates for you. We use templates designed for medical devices and tailor them to suit your device.
- Prepare the quality manual and procedures
- Create records for design controls, change control and traceability
- Ensure compatibility with technical documentation
The most labour-intensive stage is precisely the part we complete entirely for you.
Implementation and training
We implement the system together with our team and your personnel. We ensure that everyone knows their role and that records genuinely begin to be created.
- Embed processes into daily work
- Train personnel and designated responsible persons
- Monitor implementation and make the necessary refinements
Certification requires evidence of use, so the system is implemented in good time.
Certification readiness
Through an internal audit and management review, we ensure that the system meets the standard's requirements before the certification body arrives.
- Conduct an internal audit and correct identified nonconformities
- Prepare the management review and its records
- Review likely audit questions together
We confirm readiness only when the overall system withstands scrutiny.
The full implementation is typically completed within a few months, depending on the device risk class and your organisation's starting point.
What are the benefits of an ISO 13485 system?
The certificate is the most visible benefit, but a functioning quality management system also makes a tangible difference to daily operations.
Smoother product development
Design controls and change control eliminate duplicate work and retrospective documentation. The necessary evidence is generated alongside the work.
Fewer nonconformities
Risk-based processes and clear responsibilities prevent errors in advance and reduce the risk of costly corrective actions and recalls.
Market access
A certified system is a practical prerequisite for CE marking and increasingly a requirement of distributors, hospitals and procurement bodies.
The system pays for itself through faster market access and less corrective work.
Who is ISO 13485 implementation for?
Our service is designed for medical device manufacturers and importers that need a certifiable quality management system but want their team to focus its time on the product.
The service is particularly suitable when
Whether you are a start-up device manufacturer or a growing organisation, we scale the implementation to your product risk class and organisation.
ISO 13485 certification: we take you all the way
A certification audit is a clear process when it has been prepared for properly. We handle the preparations and support you throughout the audit.
Preparing for the audit
We review the system against the clauses of the standard and ensure that procedures, records and evidence of use are in order before the audit.
“Thorough preparation eliminates surprises”
Audit support
We support you during the certification body's audit. We help answer the auditor's questions and address any nonconformities within the agreed timetable.
“You are not alone in the audit”
Certificate and maintenance
Once you pass the audit, you receive an ISO 13485 certificate. We also agree on surveillance audits, system maintenance and updates.
“Your certificate remains valid under control”
There is no need to worry about the audit when the system has been reviewed in advance, point by point.
The most common mistakes in an ISO 13485 project
The same pitfalls recur among device manufacturers year after year. Our experience makes them easy to avoid.
Documentation that is too extensive
No one maintains a system of hundreds of pages. We build documentation that covers the requirements while remaining up to date after the project.
Separate from MDR documentation
If quality management and technical documentation are created separately, inconsistencies begin to emerge. We build them as one coherent whole.
The system is left on the shelf
Without real use, no records are created, and this is immediately evident in an audit. We ensure that the system is implemented before certification.
Avoiding these mistakes shortens the path to certification and reduces the number of nonconformities in the audit.
How much does ISO 13485 system implementation cost?
Our package pricing is fixed and predictable. You know in advance what you will pay and what is included.
Fixed project price for the agreed scope. You receive a detailed proposal after the initial assessment, and the price covers the agreed implementation in full.
A complete service from initial assessment to certification readiness. Documentation, implementation and audit support are included in the price, with no unexpected invoices during the project.
The price scales according to the device risk class and your organisation's size. A lighter implementation for a single-product manufacturer and a more comprehensive one for a broader product family.
A certified system is a prerequisite for market access, so the investment pays for itself through faster CE marking and less corrective work.
See our price list for detailed pricing information.
Why choose MDRpankki as your ISO 13485 partner?
We prepare regulatory documentation for medical devices every day. The same team builds your quality management system, technical documentation and risk management, keeping the whole package aligned.
Industry expertise
We work exclusively with medical devices. We understand the requirements of MDR, ISO 13485 and ISO 14971, and how notified bodies interpret them.
Practical approach
We build a system that reflects your actual operations and that even a small team can maintain without a separate quality department.
Predictable progress
Fixed pricing, agreed stages and a clear timetable. You always know what has been done, what is missing and when you are ready for the audit.
You receive one accountable partner for all your regulatory documentation, at a fixed price and within the agreed timetable.
Talk to an ISO 13485 expert
Together, we will assess what an ISO 13485 system requires for your specific device and the appropriate scope for implementation. Leave your email address and we will get in touch.
Frequently asked questions about ISO 13485
- MDR does not mention ISO 13485 by name, but it requires manufacturers to have a quality management system. ISO 13485 is a harmonised standard that provides a practical way to demonstrate compliance with this requirement. For most manufacturers, a certified ISO 13485 system is therefore practically essential, and notified bodies expect it as part of their assessment.
- ISO 13485 is based on the same quality management principles as ISO 9001, but it is designed for medical devices. Its focus is on patient safety, risk management, traceability and meeting regulatory requirements, rather than continual improvement of customer satisfaction. In practice, ISO 13485 requires more documented procedures and records.
- Typically, from a few months to around six months. The timetable depends on the device risk class, the size of your organisation and how much of your processes are already documented. In addition, the system must be in use for some time before the certification audit so that records and evidence of operations can be generated.
- The quality management system is the framework within which technical documentation, clinical evaluation, risk management and post-market surveillance are created and kept up to date. When they are built together, the same information does not become inconsistent in two places. This is why we deliver both at the same time.
- Yes. The standard does not require a specific organisation size or a separate quality department; the system simply needs to be proportionate to the operations and device risk. In practice, many of our clients are device manufacturers with only a few employees, for whom we build a lean but compliant system.
- The certification body conducts surveillance audits during the certificate's validity period. The system must be maintained: internal audits, management reviews and the handling of nonconformities continue as normal. We agree maintenance with you so that your certificate remains valid without a last-minute rush before audits.
Is ISO 13485 mandatory for medical device manufacturers?+
What is the difference between ISO 13485 and ISO 9001?+
How long does it take to build an ISO 13485 system?+
How does ISO 13485 relate to MDR documentation?+
Can a small company certify an ISO 13485 system?+
What happens after certification?+
Explore also
MDR requirements, quality management, risk management and clinical evidence form one whole. Learn more about each element.
MDR regulation (2017/745)
What the regulation requires from manufacturers, how devices are classified and which route demonstrates conformity.
Read more →ISO 14971 risk management
The risk management file, risk assessment and control measures throughout the device's entire life cycle.
Read more →MDR documentation
Technical documentation, the GSPR matrix and the documentation required under Annexes II-III as one whole.
Read more →CE marking
Classification, conformity assessment route, notified body and EU declaration of conformity.
Read more →