Auditor Expectations for ISO 13485 Documentation & Record During FDA, EMA and MHRA Inspections


Published on 05/12/2025

Auditor Expectations for ISO 13485 Documentation & Record During FDA, EMA and MHRA Inspections

Introduction to ISO 13485 Documentation & Record-Keeping

ISO 13485 is the international standard that specifies requirements for a quality management system (QMS) where an organization needs to demonstrate its ability to provide medical devices and related services that consistently meet customer and regulatory requirements. In the context of FDA, EMA, and MHRA inspections, proper documentation and record-keeping are crucial for compliance and successful audits.

This article serves as a comprehensive guide for quality managers, regulatory affairs professionals, and compliance officers in regulated industries. It outlines the step-by-step process for establishing and maintaining ISO 13485 documentation and record-keeping practices, ensuring readiness for inspections by regulatory bodies.

Step 1: Understanding ISO 13485 Documentation Requirements

The first step in achieving

compliance with ISO 13485 is to understand the specific documentation requirements outlined in the standard. Key documents include the Quality Manual, Quality Policy, and various procedures related to the QMS.

Objectives: The primary objective is to establish a clear understanding of what documents are required and how they should be structured. This includes defining the scope of the QMS and identifying the processes that need to be documented.

Documentation: Essential documents include:

  • Quality Manual
  • Documented Procedures
  • Work Instructions
  • Records of Training
  • Design History File (DHF)
  • Device Master Record (DMR)
  • Device History Record (DHR)

Roles: Quality managers should lead the documentation process, while cross-functional teams (including R&D, manufacturing, and regulatory affairs) should contribute to ensure comprehensive coverage of all processes.

Inspection Expectations: During inspections, auditors will review the completeness and accuracy of the documentation. They will assess whether the documents are current, approved, and accessible to relevant personnel.

Step 2: Developing a Quality Manual

The Quality Manual is a crucial document that outlines the QMS and its scope. It serves as a reference point for the organization’s quality policies and objectives.

Objectives: The goal is to create a manual that accurately reflects the organization’s commitment to quality and compliance with ISO 13485.

See also  Best Practices for CRO & Clinical Research QMS in GxP and ISO-Certified Organizations

Documentation: The Quality Manual should include:

  • Scope of the QMS
  • Quality Policy
  • Organizational Structure
  • Responsibilities and Authorities
  • Processes and Interactions

Roles: The quality manager typically oversees the development of the Quality Manual, while input from senior management and department heads is essential to ensure alignment with organizational goals.

Inspection Expectations: Auditors will verify that the Quality Manual is up-to-date and that it accurately reflects the organization’s practices and compliance with regulatory requirements.

Step 3: Establishing Document Control Procedures

Document control is a critical aspect of ISO 13485 compliance. Organizations must establish procedures to manage the creation, review, approval, distribution, and revision of documents.

Objectives: The objective is to ensure that all documents are controlled and that only the most current versions are in use.

Documentation: Document control procedures should include:

  • Document Creation and Review Process
  • Approval Process
  • Distribution and Access Control
  • Revision and Archiving Procedures

Roles: Document control coordinators or quality assurance personnel are typically responsible for maintaining document control systems.

Inspection Expectations: Auditors will examine document control procedures to ensure compliance with ISO 13485 requirements. They will check for evidence of document reviews, approvals, and revisions.

Step 4: Creating and Maintaining the Design History File (DHF)

The Design History File (DHF) is a compilation of records that describes the design and development of a medical device. It is essential for demonstrating compliance with regulatory requirements.

Objectives: The goal is to create a comprehensive DHF that documents the design process, including design inputs, outputs, verification, and validation activities.

Documentation: The DHF should include:

  • Design Inputs
  • Design Outputs
  • Design Review Records
  • Design Verification and Validation Records
  • Change Control Records

Roles: Design engineers and project managers are typically responsible for compiling the DHF, with oversight from quality assurance personnel.

Inspection Expectations: Auditors will review the DHF to ensure it is complete, accurate, and reflects the design process as required by FDA and ISO standards.

Step 5: Compiling the Device Master Record (DMR)

The Device Master Record (DMR) is a collection of documents that contain the specifications and procedures for a medical device. It is vital for ensuring that the device is manufactured consistently and meets quality standards.

Objectives: The objective is to compile a DMR that provides comprehensive information about the device, including manufacturing processes and specifications.

Documentation: The DMR should include:

  • Device Specifications
  • Manufacturing Procedures
  • Quality Assurance Procedures
  • Packaging and Labeling Specifications

Roles: Manufacturing engineers and quality assurance personnel are typically responsible for developing and maintaining the DMR.

See also  Linking ISO 13485 Documentation & Record with CAPA, Deviation Management and Change Control

Inspection Expectations: Auditors will assess the DMR to ensure it is complete and that all necessary documentation is included to support manufacturing processes.

Step 6: Maintaining the Device History Record (DHR)

The Device History Record (DHR) is a compilation of records that demonstrate that a medical device was manufactured according to the DMR and that it meets the required specifications.

Objectives: The goal is to maintain a DHR that accurately reflects the manufacturing history of each device.

Documentation: The DHR should include:

  • Production Records
  • Quality Control Records
  • Inspection and Test Records
  • Distribution Records

Roles: Production and quality assurance personnel are responsible for maintaining the DHR, ensuring that all records are complete and accurate.

Inspection Expectations: Auditors will review the DHR to verify that it aligns with the DMR and that all records are complete and properly maintained.

Step 7: Training and Competence Records

Training and competence records are essential for ensuring that personnel are qualified to perform their tasks within the QMS. Compliance with ISO 13485 requires organizations to maintain records of training and competence.

Objectives: The objective is to ensure that all personnel are adequately trained and competent in their roles.

Documentation: Training records should include:

  • Training Plans
  • Training Attendance Records
  • Competence Assessments

Roles: Human resources and quality assurance personnel typically manage training programs and maintain training records.

Inspection Expectations: Auditors will review training records to ensure that personnel are qualified and that training is documented according to regulatory requirements.

Step 8: Conducting Internal Audits

Internal audits are a critical component of the QMS, providing an opportunity to assess compliance with ISO 13485 and identify areas for improvement.

Objectives: The goal is to conduct regular internal audits to ensure that the QMS is functioning effectively and in compliance with regulatory requirements.

Documentation: Internal audit documentation should include:

  • Audit Plans
  • Audit Checklists
  • Audit Reports
  • Corrective Action Plans

Roles: Internal auditors, often selected from various departments, are responsible for conducting audits, while the quality manager oversees the audit process.

Inspection Expectations: Auditors will review internal audit reports to assess the effectiveness of the QMS and the organization’s commitment to continuous improvement.

Step 9: Management Review Meetings

Management review meetings are essential for evaluating the performance of the QMS and ensuring alignment with organizational goals.

Objectives: The objective is to review the effectiveness of the QMS and make informed decisions regarding improvements and resource allocation.

Documentation: Management review documentation should include:

  • Meeting Agendas
  • Meeting Minutes
  • Action Items
See also  Auditor Expectations for ISO 13485 Quality Management System Fundamentals During FDA, EMA and MHRA Inspections

Roles: Senior management and quality managers typically participate in management review meetings to ensure that quality objectives are aligned with business goals.

Inspection Expectations: Auditors will review management review documentation to assess the organization’s commitment to quality and compliance with ISO 13485.

Conclusion: Preparing for Regulatory Inspections

In conclusion, maintaining ISO 13485 documentation and record-keeping is essential for compliance with FDA, EMA, and MHRA regulations. By following the outlined steps, organizations can ensure that they are prepared for inspections and can demonstrate their commitment to quality management.

Quality managers, regulatory affairs professionals, and compliance officers must work collaboratively to establish and maintain effective documentation practices. Regular reviews, internal audits, and management meetings will further enhance the organization’s ability to meet regulatory expectations and continuously improve its QMS.

For further guidance on ISO 13485 and related regulatory requirements, refer to the FDA’s official website and the ISO 13485 standard.