The Standard Asks for a System. Most Companies Maintain a Binder.
ISO 13485 certification is won with a paper QMS and kept — barely — through surveillance audits that sample the seams: the SOP revision nobody trained on, the complaint trend that never reached CAPA, the supplier re-evaluation that was really a calendar reminder. Each cycle, the findings list grows, and the quality manual describes a system that daily work quietly contradicts.
With FDA’s QMSR incorporating the standard and MDSAP auditing it across five jurisdictions at once, the gap between the documented system and the operating one has never been more expensive.
What ISO 13485:2016 Requires, Clause by Clause
Clause 4.2: documented, controlled records and documents. Clause 5.6: management review with defined inputs and recorded outputs. Clause 6.2: competence established, training effective. Clause 7.3: design and development with controlled changes. Clause 7.4: supplier evaluation proportionate to risk, monitored and re-evaluated. Clause 8: feedback, complaint handling, nonconformance, CAPA — connected, with records for all of it.
Kintavo maps the clause structure to workflows that generate the records as work happens — so the quality manual and the operation are the same system, and surveillance audits sample a machine that is actually running.
The Clause Structure, Running.
The notified body’s surveillance audit lands on clause 7.4. The auditor asks for the supplier re-evaluation process: the quality manager opens the ASL — every supplier shows its risk class, last evaluation, scorecard, and next re-evaluation date. The auditor samples one: certificate current, two receiving rejections trended, re-evaluation completed on schedule with documented criteria and a signed retention decision. One clause, zero findings, eleven minutes.
Surveillance Audits Sample a Running System.
The auditor picks a clause and pulls a thread: the record exists because the workflow created it, current, signed, and linked to its neighbors. Findings stop coming from the seams, because the seams are joins.
