Drug, and Cosmetic Act. In the EU, the Medical Device Regulation (MDR) and In Vitro Diagnostic Regulation (IVDR) apply. Understanding these regulations is crucial for compliance and quality assurance.

Objectives: The primary objective at this stage is to familiarize yourself with the relevant regulations and standards, including ISO 13485, which outlines the requirements for a QMS in the medical device industry.

Documentation: Key documents to review include:

• FDA Guidance Documents on SaMD
• ISO 13485:2016 Standard
• EU MDR and IVDR

Roles: Quality managers and regulatory affairs professionals should lead this effort, ensuring that all team members understand the implications of these regulations on product development and market access.

Inspection Expectations: During inspections, regulatory bodies will assess your understanding of the regulatory landscape and your ability to apply these regulations to your QMS.

Step 2: Establishing a Quality Management System (QMS)

Once you have a solid understanding of the regulatory framework, the next step is to establish a QMS that meets the requirements of ISO 13485 and other relevant regulations. This system should encompass all aspects of product development, from design to post-market surveillance.

Objectives: The goal is to create a comprehensive QMS that integrates quality management principles into every phase of the product lifecycle.

Documentation: Essential documents include:

• Quality Manual
• Standard Operating Procedures (SOPs)
• Work Instructions
• Quality Policy

Roles: The QMS should involve cross-functional teams, including R&D, regulatory affairs, and quality assurance, to ensure that all perspectives are considered in the development process.

Inspection Expectations: Inspectors will evaluate the completeness and effectiveness of your QMS documentation, looking for evidence of compliance with ISO 13485 and other applicable regulations.

Step 3: Risk Management in SaMD Development

Risk management is a critical component of any QMS, particularly for SaMD and digital health products. The ISO 14971 standard provides a framework for identifying, evaluating, and mitigating risks associated with medical devices.

Objectives: The objective is to implement a robust risk management process that identifies potential hazards and ensures that risks are adequately controlled throughout the product lifecycle.

Documentation: Key documents include:

• Risk Management Plan
• Risk Assessment Reports
• Risk Control Measures

Roles: A dedicated risk management team should be established, consisting of quality managers, engineers, and regulatory affairs professionals who are trained in risk management principles.

Inspection Expectations: Inspectors will review your risk management documentation to ensure that risks have been identified and appropriately managed, in accordance with ISO 14971.

Step 4: Design and Development Controls

Design and development controls are essential for ensuring that SaMD products meet user needs and regulatory requirements. This phase involves planning, execution, and verification of the design process.

Objectives: The aim is to establish a structured design and development process that incorporates user feedback and regulatory requirements at every stage.

Documentation: Important documents include:

• Design and Development Plan
• Design Input and Output Specifications
• Design Verification and Validation Reports

Roles: The design team, including product managers, engineers, and quality assurance personnel, should collaborate closely to ensure that all design requirements are met.

Inspection Expectations: Regulatory inspectors will assess the design and development documentation to verify that the process aligns with established quality standards and regulatory requirements.

Step 5: Verification and Validation (V&V)

Verification and validation are critical steps in the QMS for SaMD, ensuring that the product meets its intended use and regulatory requirements. This process involves rigorous testing and evaluation of the product.

Objectives: The goal is to demonstrate that the product performs as intended and meets all regulatory requirements through systematic testing and evaluation.

Documentation: Key documents include:

• Verification and Validation Protocols
• Test Plans and Reports
• User Acceptance Testing (UAT) Results

Roles: Quality assurance professionals and product development teams should collaborate to develop and execute V&V activities, ensuring comprehensive testing of the product.

Inspection Expectations: Inspectors will review V&V documentation to ensure that the product has been thoroughly tested and meets all regulatory requirements.

Step 6: Post-Market Surveillance and Continuous Improvement

Post-market surveillance is essential for monitoring the safety and effectiveness of SaMD products after they are on the market. This phase involves collecting and analyzing data to identify potential issues and drive continuous improvement.

Objectives: The objective is to establish a post-market surveillance system that enables ongoing monitoring of product performance and user feedback.

Documentation: Important documents include:

• Post-Market Surveillance Plan
• Incident Reports
• Periodic Safety Update Reports (PSURs)

Roles: A cross-functional team, including quality assurance, regulatory affairs, and clinical affairs, should be responsible for post-market surveillance activities.

Inspection Expectations: Inspectors will evaluate your post-market surveillance processes to ensure that you are effectively monitoring product performance and addressing any identified issues.

Step 7: Preparing for Regulatory Inspections

Preparing for regulatory inspections is a critical aspect of maintaining compliance with QMS requirements. This phase involves ensuring that all documentation is complete and that staff are trained to respond to inspector inquiries.

Objectives: The goal is to ensure that your organization is fully prepared for regulatory inspections, demonstrating compliance with all applicable regulations and standards.

Documentation: Key documents to prepare include:

• Inspection Readiness Checklist
• Training Records
• Audit Reports

Roles: Quality managers and regulatory affairs professionals should lead inspection preparation efforts, ensuring that all team members are aware of their roles during an inspection.

Inspection Expectations: Inspectors will assess your readiness for inspection, including the completeness of documentation and the preparedness of staff to respond to questions.

Conclusion

Establishing a QMS for SaMD, digital health, and AI-driven medical products is a complex but essential process for ensuring compliance with regulatory standards. By following these steps, organizations can create a robust QMS that not only meets regulatory requirements but also drives continuous improvement and enhances product quality. For further guidance, refer to the FDA’s guidance on SaMD and the ISO 13485 standard.