Quality Management System (QMS)

Overview

A robust Quality Management System (QMS) is the foundation of regulatory compliance and product quality in the medical device industry. It is not merely a collection of procedures and records, but a living framework that ensures your organization consistently designs, manufactures, and delivers devices that meet customer expectations and applicable regulatory requirements.

At Veritas Quality Solutions, we provide comprehensive QMS design, implementation, and auditing services aligned with ISO 13485:2016 and the FDA Quality Management System Regulation (QMSR) the updated framework that replaced the legacy Quality System Regulation (QSR) and incorporates ISO 13485 by reference. Our team works with manufacturers across Pakistan, KSA, UAE, Turkey, and beyond to build quality systems that withstand regulatory scrutiny and support global market access.

Understanding the Regulatory Landscape

ISO 13485:2016

ISO 13485:2016 is the international standard specifying requirements for a quality management system where an organization needs to demonstrate its ability to provide medical devices and related services that consistently meet customer and applicable regulatory requirements. It applies to organizations involved in one or more stages of the medical device lifecycle, including design and development, production, storage and distribution, installation, and servicing.

The standard is applicable to organizations of all sizes and types, and where requirements are specified for medical devices, they apply equally to associated services. Processes that are applicable to the organization but not performed internally remain the organization's responsibility and must be controlled through monitoring and maintaining within the QMS.

ISO 13485 forms the foundation for regulatory compliance in the European Union (under MDR), Canada, Australia, Japan, and many other jurisdictions worldwide.

FDA Quality Management System Regulation (QMSR)

On February 2, 2026, the FDA's Quality Management System Regulation (QMSR) became effective, replacing the prior Quality System Regulation (QSR) under 21 CFR Part 820. The most significant change is that the QMSR incorporates ISO 13485:2016 by reference, harmonizing U.S. requirements with the international consensus standard used by regulatory authorities around the world.

This harmonization reduces duplication for manufacturers serving multiple markets and promotes consistency in quality system expectations. However, the QMSR includes FDA-specific supplemental requirements that go beyond ISO 13485. Key additions include:

820.35 Control of Records: Specific requirements for record control, including UDI information

820.45 Device Labeling and Packaging Controls: Detailed requirements for labeling and packaging operations to ensure integrity and prevent mix-ups

Compliance with other FDA regulations: Including 21 CFR Part 803 (Medical Device Reporting), 21 CFR Part 806 (Corrections and Removals), 21 CFR Part 830 (UDI), and 21 CFR Part 821 (Device Tracking)

What Changed from QSR to QMSR

The transition from QSR to QMSR is substantial but not a complete reinvention. Many core requirements remain, reframed within ISO 13485's structure:

Source: Greenlight Guru comparison of QSR and QMSR requirements

Key terminology changes include the replacement of FDA-specific terms like Design History File (DHF), Device Master Record (DMR), and Device History Record (DHR) with the ISO construct of the Medical Device File (MDF).

Our QMS Services

1. QMS Design and Development

We design quality management systems from the ground up, tailored to your organization's size, product portfolio, and target markets. Whether you are a startup preparing for your first certification or an established manufacturer expanding into new jurisdictions, we build systems that are practical, scalable, and compliant.

What We Deliver:

Gap Assessment: A comprehensive review of your current quality system against ISO 13485:2016 and FDA QMSR requirements, identifying strengths, weaknesses, and areas requiring development

QMS Architecture: A documented framework covering all applicable ISO 13485 clauses, including:

Quality Manual and Quality Policy

Document and Record Control (Clause 4.2)

Management Responsibility (Clause 5)

Resource Management (Clause 6)

Product Realization (Clause 7)

Measurement, Analysis, and Improvement (Clause 8)

Process Mapping: Identification and documentation of all QMS processes, including their sequence, interaction, and criteria for effectiveness

Role Definition: Clear assignment of responsibilities, including the Person Responsible for Regulatory Compliance (PRRC) where required under MDR

2. QMS Implementation

We work alongside your team to implement the QMS in practice, not just on paper. Our implementation support ensures that processes are understood, followed, and effective.

What We Do:

Procedure Development: Drafting of Standard Operating Procedures (SOPs), Work Instructions, and forms that reflect actual practice while meeting regulatory requirements

Training and Awareness: Training programs to ensure personnel understand their responsibilities and the importance of their contribution to product quality and regulatory compliance

Risk Management Integration: Embedding ISO 14971 risk management principles throughout the product lifecycle, from design through production and post-market surveillance

Supplier Controls: Establishing supplier evaluation, qualification, and monitoring processes that meet both ISO 13485 and FDA expectations, including the new QMSR requirement that supplier audit reports are now inspectable by FDA

Design Controls: Implementing design and development processes that satisfy ISO 13485 Clause 7.3 and FDA QMSR requirements, including design planning, inputs, outputs, review, verification, validation, and transfer

3. QMS Auditing

We conduct internal audits on behalf of our clients to verify that the QMS is effectively implemented and maintained. Our audits are conducted by qualified lead auditors with direct experience in medical device regulations and quality management systems.

Our Audit Services:

Internal Audit Program Development: Establishing a risk-based internal audit schedule, auditor qualification criteria, and audit procedures that satisfy ISO 13485 Clause 8.2.4

Internal Audits: Conducting audits of QMS processes, documenting findings, and reporting nonconformities with clear evidence

Pre-Certification Audits: Mock audits simulating the approach used by Notified Bodies and FDA investigators, helping you identify and resolve gaps before external audits

Supplier Audits: Auditing suppliers and subcontractors on your behalf to verify compliance with quality requirements and regulatory standards

CAPA Effectiveness Verification: Reviewing corrective and preventive actions to confirm effectiveness and closure

4. QMSR-Specific Compliance Support

With the QMSR now in effect, we provide specialized support to help manufacturers transition from the legacy QSR framework or ensure that their existing ISO 13485 system meets FDA's supplemental requirements.

What We Do:

QMSR Gap Assessment: Evaluating your current system against the QMSR framework, identifying gaps in documentation, terminology, and FDA-specific requirements

Procedure Remapping: Updating procedures to reference ISO 13485 clauses and the new Part 820 sections (820.10, 820.35, 820.45)

Labeling and Packaging Controls: Developing procedures that satisfy the new 820.45 requirements for labeling and packaging integrity, inspection, and release

Record Control Enhancement: Aligning record control practices with the new 820.35 requirements, including UDI information

Management Review and Internal Audit Records: Ensuring these records are documented with the awareness that they are now inspectable by FDA under the QMSR

The ISO 13485 and QMSR Relationship

One common misconception is that ISO 13485 certification automatically satisfies FDA requirements. This is not the case. While ISO 13485 certification indicates substantial alignment, FDA does not accept an ISO certificate as proof of QMSR compliance.

FDA compliance depends on satisfying the specific requirements of the QMSR, including obligations that go beyond ISO 13485. Companies participating in the Medical Device Single Audit Program (MDSAP) remain exempt from routine FDA inspections, but ISO 13485 certification alone does not confer this benefit.

Our approach ensures that your quality system satisfies both ISO 13485 and the FDA-specific requirements of the QMSR, positioning you for success in the U.S. market and globally.

Common QMS Deficiencies We Help You Avoid

Based on our experience and regulatory guidance, we help manufacturers address the most common quality system deficiencies:

Documentation Gaps: Procedures that exist on paper but are not effectively implemented or followed in practice

Risk Management Silos: Risk management confined to design controls rather than integrated throughout purchasing, production, and CAPA

Supplier Control Weaknesses: Inadequate supplier evaluation, monitoring, and documentation of supplier audits

CAPA Ineffectiveness: Corrective actions that address symptoms rather than root causes, without verification of effectiveness

Outdated Terminology: Quality manuals and procedures that still reference old QSR section numbers and terminology

Incomplete Traceability: Insufficient linkage between design inputs, risk controls, verification activities, and production records

Management Review Gaps: Reviews that are informal, underdocumented, or fail to address required inputs and outputs

Why Choose Veritas Quality Solutions

Regulatory Expertise

Our team has extensive experience with ISO 13485:2016, the FDA QMSR, and the broader regulatory frameworks governing medical devices, including EU MDR, MDD, and requirements in KSA, Brazil, UK, and other markets.

Practical Approach

We do not provide generic templates. Every QMS we design and implement is tailored to your organization's specific products, processes, and regulatory objectives. We focus on building systems that work in practice, not just in theory.

End-to-End Support

From initial gap assessment through certification and ongoing maintenance, we support the entire QMS lifecycle. Whether you need full design and implementation services or targeted support for a specific process, we adapt to your needs.

Proven Track Record

We have guided manufacturers across device classes and therapeutic areas through successful ISO 13485 certification and FDA inspections. Our clients include manufacturers in Pakistan, KSA, UAE, and Turkey, serving markets worldwide.

Audit-Ready Systems

We build quality systems with inspection readiness in mind. When your system is designed for effective implementation, audits become verification exercises rather than exercises in crisis management.

Get Started

Whether you are building a QMS for the first time, transitioning from the legacy QSR to the QMSR, or seeking to strengthen an existing system, Veritas Quality Solutions is here to help.

Veritas Quality Solutions, Your Partner in Quality Assurance