How to Harmonize QMS for SaMD, Digital Health & AI Across Global Sites in the US, UK and EU


Published on 05/12/2025

How to Harmonize QMS for SaMD, Digital Health & AI Across Global Sites in the US, UK and EU

Introduction to QMS for SaMD, Digital Health & AI

The rapid advancement of Software as a Medical Device (SaMD), digital health solutions, and AI-driven medical products has necessitated a robust Quality Management System (QMS) that meets regulatory compliance across multiple jurisdictions. This article provides a comprehensive, step-by-step tutorial on harmonizing QMS for SaMD, focusing on the regulatory landscapes of the US, UK, and EU. Quality managers, regulatory affairs professionals, and compliance specialists will find this guide essential for navigating the complexities of QMS implementation and maintenance.

Step 1: Understanding Regulatory Frameworks

Before implementing a QMS for SaMD, it is crucial

to understand the regulatory frameworks governing these products in the US, UK, and EU. The US Food and Drug Administration (FDA) regulates SaMD under the Federal Food, Drug, and Cosmetic Act, while the European Medicines Agency (EMA) and the UK’s Medicines and Healthcare products Regulatory Agency (MHRA) provide guidance in Europe.

Objectives: Familiarize yourself with the relevant regulations and standards, including ISO 13485, which outlines the requirements for a QMS in the medical device industry.

Documentation: Compile a list of applicable regulations, guidelines, and standards. This may include:

  • FDA Guidance on Software as a Medical Device
  • ISO 13485:2016
  • EU Medical Device Regulation (MDR) 2017/745

Roles: Assign roles within your organization for regulatory compliance, including a regulatory affairs manager and quality assurance personnel.

Inspection Expectations: Be prepared for inspections by regulatory bodies, which may include document reviews and audits of your QMS processes.

Step 2: Defining Quality Management System Scope

Defining the scope of your QMS is essential for ensuring that it aligns with your organization’s objectives and regulatory requirements. This includes identifying the products and processes that will be covered by the QMS.

See also  Post Checklist for Inspection-Ready QMS Compliance

Objectives: Establish a clear scope that encompasses all aspects of SaMD, digital health, and AI-driven products.

Documentation: Create a scope document that outlines:

  • The types of products included in the QMS
  • The geographical regions covered
  • The processes and activities that will be managed under the QMS

Roles: Involve cross-functional teams, including R&D, IT, and regulatory affairs, to ensure comprehensive coverage of the QMS scope.

Inspection Expectations: Inspectors will review the scope document to ensure it aligns with regulatory requirements and organizational goals.

Step 3: Developing QMS Policies and Procedures

Once the scope is defined, the next step is to develop the necessary policies and procedures that will govern your QMS. This includes quality policies, standard operating procedures (SOPs), and work instructions.

Objectives: Create a framework that promotes quality and compliance throughout the organization.

Documentation: Key documents to develop include:

  • Quality Policy
  • Document Control Procedures
  • Risk Management Procedures
  • Design and Development Procedures

Roles: Assign a quality manager to oversee the development of these documents, ensuring they are aligned with regulatory requirements.

Inspection Expectations: Inspectors will evaluate the adequacy and implementation of your QMS policies and procedures during audits.

Step 4: Implementing Risk Management Processes

Risk management is a critical component of QMS for SaMD, digital health, and AI products. It is essential to identify, assess, and mitigate risks throughout the product lifecycle.

Objectives: Establish a systematic approach to risk management that complies with ISO 14971, the standard for risk management in medical devices.

Documentation: Develop a risk management plan that includes:

  • Risk assessment methodologies
  • Risk control measures
  • Post-market surveillance strategies

Roles: Involve cross-functional teams, including engineering, clinical, and regulatory affairs, to ensure comprehensive risk management.

Inspection Expectations: Inspectors will review your risk management documentation and processes to ensure compliance with regulatory standards.

Step 5: Training and Competence Development

Training is vital for ensuring that all personnel involved in the QMS understand their roles and responsibilities. A well-trained workforce is essential for maintaining compliance and product quality.

Objectives: Develop a training program that addresses the specific needs of your organization and complies with regulatory requirements.

See also  Training Strategies to Embed Best Compliance Management Software Across Sites and Functions

Documentation: Create a training plan that includes:

  • Training needs assessment
  • Training materials and resources
  • Records of training completion

Roles: Assign a training coordinator to oversee the implementation of the training program and ensure that all personnel receive the necessary training.

Inspection Expectations: Inspectors will review training records and assess the effectiveness of your training program during audits.

Step 6: Monitoring and Measuring QMS Performance

Continuous monitoring and measurement of QMS performance are essential for identifying areas for improvement and ensuring ongoing compliance. This includes establishing key performance indicators (KPIs) and conducting regular audits.

Objectives: Implement a system for monitoring and measuring QMS performance to drive continuous improvement.

Documentation: Develop a performance monitoring plan that includes:

  • Defined KPIs
  • Audit schedules
  • Corrective and preventive action (CAPA) procedures

Roles: Designate a quality assurance team to conduct audits and monitor QMS performance.

Inspection Expectations: Inspectors will evaluate your monitoring and measurement processes to ensure they are effective and compliant with regulatory requirements.

Step 7: Conducting Internal Audits

Internal audits are a critical component of maintaining an effective QMS. They help identify non-conformities and areas for improvement, ensuring compliance with regulatory requirements.

Objectives: Establish a systematic approach to conducting internal audits that aligns with ISO 19011 guidelines.

Documentation: Create an internal audit plan that includes:

  • Audit schedules
  • Audit checklists
  • Audit reports and follow-up actions

Roles: Assign internal auditors who are trained and knowledgeable about the QMS and relevant regulations.

Inspection Expectations: Inspectors will review internal audit reports and follow-up actions to assess the effectiveness of your audit process.

Step 8: Management Review and Continuous Improvement

Management reviews are essential for ensuring that the QMS remains effective and aligned with organizational objectives. This step involves evaluating the performance of the QMS and identifying opportunities for improvement.

Objectives: Conduct regular management reviews to assess QMS performance and drive continuous improvement.

Documentation: Develop a management review agenda that includes:

  • Review of audit results
  • Analysis of performance data
  • Action items for improvement

Roles: Involve senior management in the review process to ensure commitment to quality and compliance.

Inspection Expectations: Inspectors will evaluate the effectiveness of your management review process and its impact on QMS performance.

Conclusion

Harmonizing a Quality Management System for SaMD, digital health, and AI-driven medical products across global sites is a complex but essential task. By following these steps—understanding regulatory frameworks, defining QMS scope, developing policies, implementing risk management, training personnel, monitoring performance, conducting audits, and engaging in management reviews—organizations can ensure compliance with the FDA, EMA, and MHRA regulations. A robust QMS not only facilitates regulatory compliance but also enhances product quality and patient safety.

See also  Design Controls, Risk Management in Contract Manufacturing and Outsourced Operations

For further guidance, refer to the FDA Guidance on Software as a Medical Device and ISO 13485:2016 for comprehensive standards on quality management in the medical device industry.