Industries
Medical Devices
Device manufacturers face a quality system regulation aligned to ISO 13485 and an inspection approach that follows the product from design through post-market. We support the full system, not isolated procedures.
xFDA supports medical device manufacturers with QMS/QMSR implementation, design control and design transfer, CAPA, complaint handling, supplier controls, production and process validation, audits and quality system remediation — including consultants who evaluated device systems as FDA investigators.
How we support this sector
Where engagements typically focus
- QMSR transition assessment and implementation
- Design controls, design history files and design transfer
- Risk management integrated with design and production controls
- Production and process controls, DMR and DHR discipline
- Complaint handling, MDR decisions and post-market surveillance
- Process, software and sterilization validation
Our device consultants include former FDA device investigators who evaluated these systems in the field.
When companies call us
Situations we are asked into
- A QSR-era quality manual has to be reconciled with QMSR and ISO 13485 structure.
- CAPA records are open far past their due dates and management review has no reliable metrics.
- Design history files cannot be reconstructed for a legacy product still in distribution.
- Complaint and MDR decision-making is inconsistent between reviewers.
- A supplier of a critical component has never been audited.
Flagship practice
Medical Devices: how we work in this sector
xFDA supports medical device manufacturers on the quality-system side of the business: QMSR transition, design controls, CAPA and complaint handling, supplier and manufacturing quality, validation strategy and remediation. Our device consultants include former FDA investigators and senior industry quality leaders who have built and repaired these systems from both sides.
Quality systems & QMSR
Transition from QSR terminology and structure to the incorporated ISO 13485 requirements, without rebuilding a system that already works.
- QMSR gap assessment against the incorporated standard
- Quality manual and top-level procedure rewrite
- Terminology and clause mapping across the document set
- Management review and risk-based thinking integration
- Training refresh sequenced after documents stabilise
Design controls & design history files
Design inputs that can be verified, traceability that survives change, and design files that reconstruct the decision, not just the outcome.
- Design input and requirement quality review
- Trace matrix reconstruction from executed protocols
- Design review governance and independent reviewer practice
- Design transfer readiness and post-transfer change control
- Design history file remediation
CAPA, complaints & remediation
Root cause analysis that survives scrutiny, effectiveness checks defined before the action, and backlogs brought down without closing records empty.
- CAPA system assessment and record re-analysis
- Complaint handling and reportability decision records
- Nonconformance and investigation process redesign
- Remediation planning, sequencing and governance
- Effectiveness verification design
Manufacturing, supplier & validation quality
Process and product controls that hold in routine production, including at contract manufacturers.
- Manufacturing quality system assessment
- Supplier qualification, quality agreements and audits
- Process validation strategy and revalidation triggers
- Software and computer system quality where in scope
- Contract manufacturer oversight
Typical engagements
QMSR readiness assessment
A structured review of the current system against the incorporated standard, producing a prioritised gap list, a document remediation plan and a realistic sequence.
Design control remediation
Reconstruction of traceability and design file evidence for one or more product families, with the change process corrected so it does not recur.
Quality system rebuild for a growing manufacturer
Right-sized document, design, supplier and training controls for a company scaling from development into routine manufacturing.
Preparing for an FDA inspection, or responding to a Form FDA 483 or Warning Letter? That work is covered in depth at FDAinspections.com. FDAinspections.com
Medical Device Quality System Assessment
Have a former FDA investigator or senior device quality specialist review your quality system, design controls and CAPA program, and tell you plainly where the exposure is.
Expert Answers
Medical Devices: answered by our consultants
- What does QMSR mean for medical device manufacturers?FDA's Quality Management System Regulation replaces the Quality System Regulation in 21 CFR Part 820 by incorporating ISO 13485 by reference, effective February 2, 2026. For most manufacturers already certified to ISO 13485 the change is one of terminology, documentation mapping and record expectations rather than a wholesale system rebuild.
- What are the most common design control weaknesses in medical devices?Design inputs written as marketing statements rather than verifiable requirements, verification that does not trace to a specific input, and design changes made after transfer without returning to the design file. Nearly every design control observation traces back to one of those three.
- How should CAPA effectiveness be verified in a device quality system?By measuring the thing that failed, over a period long enough for it to fail again, against a criterion defined before the corrective action was implemented. Confirming that training was delivered is not an effectiveness check.
Questions we are asked
Medical Devices: common questions
Direct answers from the consultants who do this work.
- What changes when a device manufacturer transitions to QMSR?
- QMSR incorporates ISO 13485 by reference, so the substance of the requirements is familiar, but terminology, risk management integration and record structure shift. The practical work is mapping existing procedures to the new structure, closing genuine gaps such as risk-based process control, and retraining staff on the vocabulary they will be inspected against.
- What makes a CAPA system fail an inspection?
- Root cause statements that restate the problem, corrections recorded as corrective actions, no verification of effectiveness, and no linkage between complaints, service, nonconformances and CAPA inputs. The system usually fails on quality of analysis rather than on missing paperwork.
- Do you help with design controls for a product already on the market?
- Yes. Legacy design remediation reconstructs the design history file from available evidence, documents the current design inputs and verification/validation status honestly, and defines what must be re-executed rather than back-dated.
- How much supplier control does FDA expect?
- Control proportionate to the risk the supplied item carries. That means defined acceptance activities, documented supplier evaluation, purchasing data that specifies requirements, and change notification obligations for suppliers of critical components.
- Can you validate manufacturing processes and software?
- Yes — process validation, equipment and software validation for production and quality system use, and sterilization validation where consultant experience supports it, each tied to a documented risk rationale.
Technical guidance for this sector
- QMSR TransitionThe Quality Management System Regulation incorporates ISO 13485 into FDA's device quality system requirements.
- ISO 13485ISO 13485 defines a quality management system for organizations involved in the medical device lifecycle.
- Process ValidationDevice manufacturers must validate any process whose results cannot be fully verified by subsequent inspection and test.
- CAPACAPA is the system FDA examines first in a device quality system, because it reveals whether the organization detects and fixes its own problems.
- Supplier QualityPurchasing controls make you responsible for the quality of what others make for you.
- 510(k) SupportA 510(k) is an argument for substantial equivalence, supported by evidence your quality system has to be able to produce on demand.
- PMA SupportA PMA is reviewed alongside a pre-approval inspection of the manufacturing site, which means the manufacturing section is not paperwork — it is a description of a facility that will be examined.
- De Novo SupportA De Novo asks FDA to create a classification, which means the submission has to propose the controls that will make the device type safe and effective.
- IDE SupportAn IDE requires a description of how the investigational device is made and controlled, and design controls apply even though the device is not yet cleared.
- 510(k) Quality SupportThis page is about the part of a 510(k) that lives inside your quality system: the design history file, process and sterilization validation, supplier controls and the manufacturing description.
Newsletter
Insights from Former FDA & Industry Experts
Practical perspectives on GMP, quality systems, validation, manufacturing and development — written by the consultants doing the work. No newsletter-only sales pitches.
Start a project
Tell us what you're working on.
Describe the product, the process or the problem. We will tell you honestly whether we are the right people to help, and who should be on the team if we are.