Skip to content
Medical Devices In-Vitro Diagnostics ISO 15189 · MDSAP

QMS & Auditing According to ISO 13485 – Designed for Practical Use, Clearly Documented, Audit-Ready, and Manageable

Metecon supports manufacturers, laboratories, and regulated organizations in establishing, optimizing, and implementing audit-ready quality management systems. We organize processes, responsibilities, and documentation into a structure that transparently reflects the requirements of ISO 13485, ISO 15189, MDR/IVDR, MDSAP, or ISO 9001—while remaining practical for day-to-day operations. The goal is a QMS that is both compliant with the standards and pragmatic.

25+ years of QMS experience · 125+ SOPs/processes developed · 40+ audit readiness checks
25+
Years of QM experience
125+
SOPs & processes created
30+
internal audits supported
10+
Quality Management Experts

QMS & Auditing at Metecon: Practically Oriented, Fully Compliant with Standards, Audit-Ready and Controllable

Metecon supports manufacturers, laboratories, and regulated organizations in establishing, optimizing, and implementing audit-ready quality management systems. We organize processes, responsibilities, and documentation into a structure that transparently reflects the requirements of ISO 13485, ISO 15189, MDR/IVDR, MDSAP, or ISO 9001 in a transparent manner while remaining practical for day-to-day operations. During audits, we assist with preparation, support during the audit, and follow-up—and help thoroughly analyze the causes of nonconformities and to effectively implement corrective actions.

3 Common Challenges with the QMS—and How Metecon Solves Them

Challenge 1 · Formal vs. Reliable

The QMS is formally in place, but it isn’t resilient in day-to-day operations

Processes are interpreted differently, circumvented, or not properly documented.

Metecon Solution: We embed processes so that they are actually followed in day-to-day operations and properly documented —implemented in practical manner rather than merely described.

Challenge 2 · Recurring Nonconformities

Audit nonconformities recur despite CAPA

CAPA measures resolve symptoms but do not address the root causes within the process system.

Metecon Solution: Thorough root cause analysis and effective measures that target the root cause within the process—not the symptom.

Challenge 3 · Requirements Managed in Parallel

Requirements, processes, and responsibilities do not align properly

Normative, regulatory, and organizational requirements are managed in parallel rather than consolidated.

Metecon Solution: A robust QMS that consolidates all requirements into a single integrated management system.

Establishing a QMS in Accordance with ISO 13485: The Foundation for MDR and IVDR Compliance

An audit- and certification-ready quality management system in accordance with ISO 13485 is the foundation for MDR and IVDR compliance. Metecon develops, structures, and optimizes QMS processes as the basis for market readiness in Europe and international markets.

5 Steps to ISO 13485 Certification

1

Initial Consultation & Analysis
product type, risk class, initial situation
2

Gap Analysis
ISO 13485 gap analysis and assessment of audit readiness according to the standard and MDR/IVDR
3

QMS Structure
QMS documentation, SOPs, and audit-ready process structures
4

Internal Audit
comprehensive QMS audit prior to certification audit
5

Certification
support for and during the certification audit

Our QMS & Audit Services at a Glance

Establishing a QMS in Accordance with ISO 13485

ISO 13485-compliant QMS setup, including a quality manual, SOPs, document control, and audit-ready process structures compliant with MDR and IVDR.

Internal Audits & Supplier Audits

in accordance with ISO 13485, clause 8.2.4, to prepare for certification and surveillance audits.

MDSAP & International Audit Programs

Preparation for MDSAP, FDA-QMSR, and international audit programs for the U.S., Canada, Australia, Brazil, and Japan.

ISO 15189: Quality Management System for Laboratories

Support for medical laboratories in obtaining ISO 15189 accreditation and establishing audit-ready laboratory processes in accordance with ISO 15189.

FDA-QMSR Transition in 2026

Metecon supports you with a structured QMSR gap analysis.

MDR vs. IVDR: What Are the Differences in QMS Requirements?

The MDR and IVDR impose extensive requirements on quality management and regulatory processes. Some processes vary depending on the product class.

MDR vs. IVDR: Differences in QMS and Regulatory Requirements

 

Criterion QMS under the MDR (Medical Devices) QMS under the IVDR (IVDs)
Legal Basis MDR (EU) 2017/745, Article 10 & Annexes IX and XI IVDR (EU) 2017/746, Article 10 & Annexes IX and XI
Risk Classes I, IIa, IIb, III (conformity assessment without a Notified Body for class I) A, B, C, D (conformity assessment without a Notified Body for class A)
Internal Audits risk-based, in accordance with ISO 13485 clause 8.2.4 + MDR Article 10 & Annexes IX and XI, Section 2.2 risk-based, in accordance with ISO 13485 8.2.4 + IVDR Article 10 & Annexes IX and XI, Section 2.2
CAPA Requirement CAPA processes in accordance with ISO 13485, clause 8.5 identical requirements in accordance with ISO 13485, clause 8.5
Post-market surveillance in accordance with the MDR, Chapter VII, including clinical evaluation in accordance with IVDR, Chapter VII, including performance evaluation
Laboratory requirements — ISO 15189, relevant for medical laboratories
International requirements MDSAP · FDA-QMSR · ISO 13485:2016 identical requirements in accordance with MDSAP · FDA-QMSR · ISO 13485:2016
Transition periods Depending on the risk class and existing certificates for medical devices, by December 31, 2028, at the latest Depending on the risk class and existing certificates for the IVDs, by December 31, 2029, at the latest

 

Quality Management for Medical Devices in Accordance with the MDR

Audit-ready quality management systems for medical devices in accordance with the MDR and ISO 13485—prepared in a structured manner for certification, surveillance, and supplier audits.

MDR-Compliant QMS Implementation in Accordance with ISO 13485: Our Scope of Services

  • Gap Analysis of Existing QMS Documentation

    Systematic review of existing QMS documentation for compliance with the MDR and ISO 13485—including audit readiness, supplier management, and documented process structures. Prioritized gap analysis to prepare for certification and surveillance audits.
  • Quality Manual, Quality Policy, and SOPs

    Creation or update of audit-ready QMS documentation in accordance with ISO 13485—including the quality manual, quality policy, quality objectives, SOPs, and documented process control.
  • CAPA Processes in the Quality Management System

    Structured CAPA processes for handling nonconformities and audit findings in accordance with ISO 13485—including documented control and tracking of corrective and preventive actions.
  • Supplier Management and Supplier Qualification

    Supplier qualification and audit programs for critical medical device components and outsourced processes in accordance with the MDR and ISO 13485, including an approved supplier list (ASL) and supplier corrective actions.
  • Management Review & Improvement

    Structured, audit-ready management review to assess the QMS for suitability and adequacy—including quality objectives, resource planning, and documented effectiveness evaluation.
  • Employee Training and QM Competency Development

    Practical training on MDR/IVDR, ISO 13485, and audit requirements for quality management, regulatory, development, and production teams. Focus on audit preparation, CAPA processes, documentation requirements, and effective communication with Notified Bodies—available remotely or on-site in Mannheim. Also available as an in-house workshop.
  • QMS Interfaces with Regulatory Processes

    Definition of documented responsibilities and process interfaces between quality management, post-market surveillance processes, and regulatory documentation in accordance with the MDR.
  • Rapid support in the event of nonconformities identified by the Notified Body

    Nonconformities and inquiries from the Notified Body regarding the QMS are addressed within 48 hours by experienced QM consultants with expertise in communicating with Notified Bodies.
  • External Quality Management Representative / Quality Manager

    For manufacturers and startups without their own QM staff: Metecon assumes the role of external QM Representative—handling key QMS tasks, process control, audit support, and QMS maintenance. Compliant with ISO 13485 clause 5.5.2. Ideal for the initial setup and the first few years following certification.
  • Digital QMS (eQMS): Software Selection and Implementation

    Support in selecting suitable eQMS systems for document control, audit management, and training processes in a regulated environment.

Internal Audits & Supplier Audits: Identifying Audit Gaps Before They Come to Light During the Certification Audit

Structured audit programs in accordance with ISO 13485 clause 8.2.4 and ISO 19011—conducted by experienced lead auditors from the Metecon team.

Internal Audits and Supplier Audits in Accordance with ISO 13485

Audit Readiness with Regard to International Requirements for the QMS (Laws and Standards)

Professional planning and conduct of internal QMS audits in accordance with ISO 13485 and the MDR—including audit programs, audit execution, document review, and structured audit reports. As an independent external auditor, Metecon assists with preparations for certification and surveillance audits.

ISO 13485 Supplier Audit, Clause 7.4

Establish a supplier qualification system; provide support in preparing for audits of suppliers of critical components and outsourced processes: Define audit criteria. Provide input for the audit agenda. Conduct the audit, prepare the audit report, and maintain the approved supplier list. Provide assistance in evaluating the audit results.

Audit Preparation: Audit by a Notified Body

Preparation for the certification audit or recertification audit: mock audit, document review, closing identified process gaps, employee briefing.

Audits in Accordance with ISO 19011

Notified Bodies expect audits to comply with ISO 19011 as the state of the art. Metecon audits follow the guidelines for management system audits according to ISO 19011:2018: a structured audit plan, structured selection of relevant processes and audit areas, document review, opening meeting, audit report, and follow-up.

Early Detection of Audit-Critical Process Weaknesses

Process analysis of existing processes with respect to MDR and ISO 13485 requirements; establishment of audit-ready processes; risk-based audit program with prioritization of critical processes

Documented Follow-Up on Actions from Audits

Structured tracking of audit-related actions and documented corrections within the quality management system in accordance with ISO 13485.

MDSAP: An Audit for the U.S., Canada, Brazil, Australia, and Japan

The Medical Device Single Audit Program covers FDA, Health Canada, TGA, ANVISA, and PMDA requirements with a single audit—ideal for export-oriented manufacturers.

QMS International and MDSAP: One Audit for International Markets


MDSAP (Medical Device Single Audit Program)

MDSAP is an international audit program for medical device manufacturers that sell their products in Australia, Canada, the U.S., Brazil, and/or Japan.

Country-specific regulatory requirements and QMS requirements are assessed in a single audit.

Metecon prepares your QMS for MDSAP and guides you through the audit process.

flag-america

FDA QMSR Transition in 2026

Effective February 2, 2026, 21 CFR Part 820—the FDA Quality Management System Regulation (QMSR)—is based on ISO 13485:2016. ISO 13485-certified manufacturers thus meet a large portion of the FDA requirements. Metecon conducts your QMSR gap analysis—with a specific action plan for remaining FDA requirements.

flag-canada

Canada / Health Canada

QMS requirements for the Canadian market: Medical Device Regulations (SOR/98-282, Part 1, CMDR), ISO 13485 compliance.

australian-flag

Australia / TGA & Other Markets

TGA-compliant QMS documentation for Australia. Support for other regulatory markets, including PMDA (Japan), ANVISA (Brazil), and GCC/Middle East, is available upon request.

flag-gb

UKMDR – The United Kingdom After Brexit

Since Brexit, the United Kingdom has its own regulatory requirements: the UK Medical Device Regulations (UKMDR) with UKCA marking. The ISO 13485-compliant QMS remains the foundation but must be adapted to meet UK-specific requirements (MHRA). Metecon supports companies in preparing for UKMDR compliance.

QMSR/FDA – FDA-QMSR will be based more heavily on ISO 13485 in the future

Manufacturers with a presence in the U.S. market should review their existing QMS processes for potential adjustments in light of regulatory changes.

Standards & Guidelines: QMS for Medical Devices (MDR)

  • MDR (EU) 2017/745 – Article 10 (QMS Requirements) + Annex IX and Annex XI (Conformity Assessment Procedures)
  • ISO 13485:2016 – Medical Devices – Quality management systems – Requirements for regulatory purposes
  • FDA 21 CFR Part 820 Quality Management System Regulation (QMSR)
  • MDSAP – Medical Device Single Audit Program: USA (FDA), Canada (Health Canada), Australia (TGA), Brazil (ANVISA), and Japan (PMDA)
  • ISO 14971:2019 – Risk Management (QMS Integration)
  • MDCG 2019-13 – Guidance on the Assessment of Technical Documentation by Notified Bodies
  • ISO 13485:2016, clause8.2.4 – internal audit
  • ISO 13485:2016, clause7.4 – purchasing (including supplier management)
  • ISO 13485:2016, clause8.5 – improvement (CAPA = corrective and preventive actions)
  • ISO 19011:2018 – Guidelines for auditing management systems (state of the art for internal audits)
  • ISO 13485, clause5.5.2 – management representative (QMR)
  • ISO 13485, clause 4.2.4/4.2.5 – control of documents and records: SOPs, work instructions, forms

Ready for Certification and Surveillance Audits

We are familiar with the key audit areas of Notified Bodies and will prepare you and your QMS specifically for certification and surveillance audits.


Over 25 Years of Practical Experience in Quality Management

Practical experience gained from real-world certification projects and from a manufacturer’s perspective—pragmatic and compliant with regulatory requirements.


Quick Start: Gap Analysis in 2–4 Weeks

A clear action plan with prioritized measures and a transparent assessment of regulatory risks.


eQMS Consulting: Paperless and Audit-Compliant

Software-independent consulting on the selection and implementation of a digital QMS—MDR/IVDR-compliant.


Quality Management for IVD in Compliance with the IVDR

Audit-ready quality management systems for IVD manufacturers in accordance with the IVDR and ISO 13485 – implementation of QMS requirements and regulatory processes.

IVDR Transition Periods:

Class D through December 31, 2027 · Class C through December 31, 2028 · Class B through December 31, 2029. A certified quality management system in accordance with ISO 13485 is required for the conformity assessment procedures for these IVD classes.

QMS Implementation and Auditing in Accordance with the IVDR: Our Scope of Services

QMS Implementation under the IVDR

Establishment or optimization of an IVDR-compliant quality management system in accordance with ISO 13485 and IVDR Article 10—including roles, responsibilities, and documented regulatory process control.

QMS Structure in Accordance with the IVDR, Annex IX, or Annex XI

Establishment or optimization of an IVDR-compliant quality management system in accordance with IVDR Article 10 and Annex IX or XI and ISO 13485—including the integration of regulatory documentation and evaluation processes in a manner that is audit-ready.

CAPA Processes in an IVDR-Compliant QMS

Structured handling of documented nonconformities and audit findings within the quality management system in accordance with ISO 13485 and the IVDR.

Internal Audits for IVD Manufacturers

Internal QMS audits in accordance with ISO 13485, with a focus on IVDR-relevant process control and audit-ready documentation.

Supplier Audits and Reagent Suppliers

Support with the qualification and auditing of critical suppliers for IVD products—including reagent, antibody, and OEM suppliers. Assessment of IVDR-relevant supplier processes and audit-ready supplier documentation in accordance with ISO 13485.

Preparing for Notified Body Audits Under the IVDR

Preparation for audits as part of the conformity assessment procedure under IVDR Annex IX or Annex XI—including mock audits, document reviews, and preparation of relevant teams for certification audits.

Regulatory Process Interfaces in the IVDR QMS

Documented control of regulatory processes, including post-market surveillance, within the quality management system in accordance with ISO 13485 and the IVDR.

IVD Laboratory Management According to ISO 15189: Specialized IVD Expertise

Metecon supports diagnostic laboratories with accreditation and IVDR-compliant laboratory operations in accordance with ISO 15189.

ISO 15189 for Medical Laboratories: Quality Management and Accreditation

ISO 15189 is the international quality standard for medical laboratories and serves as the foundation for accredited laboratory processes in the field of diagnostics.

Preparing for ISO 15189 Accreditation

Preparation for the German Accreditation Body (DAkkS): Gap analysis against ISO 15189, document structure, process descriptions, and a mock audit prior to the official assessment process.

Laboratory Documentation in Accordance with the IVDR

Preparation of IVDR- and ISO 15189-compliant laboratory documentation—including SOPs, process descriptions, and audit-ready quality documentation.

QMS Integration: ISO 15189 + ISO 13485

Structured integration of ISO 13485 requirements into an existing ISO 15189 QMS—for laboratories that both develop IVDs and use them in their own laboratories (integrated management system).

Regulatory Evaluation Processes in the IVDR QMS

Metecon supports diagnostic laboratories with accreditation and IVDR-compliant laboratory operations in accordance with ISO 15189.

IVDR Performance Evaluation as a Documented QMS Process

1

Documented Literature and Evaluation Processes

Structured literature and review processes as part of audit-ready evaluation and documentation procedures within the IVDR QMS.

2

Method and Testing Process Control

Documented testing, approval, and method processes within the framework of structured laboratory and quality processes in accordance with ISO 15189 and the IVDR.

3


Continuous Updating of Regulatory Evidence

Clinical evidence of the IVD’s performance in the target population—PMPF as an ongoing QMS process for the continuous updating of PER.

Standards & Guidelines: QMS for In-Vitro Diagnostics (IVDR)

  • IVDR (EU) 2017/746 – Article 10, Annex IX, and Annex XI (QMS Requirements)
  • ISO 13485:2016 – Medical devices – Quality management systems – Requirements for regulatory purposes
  • ISO 15189:2022 – Medical laboratories: Requirements for quality and competence
  • IVDR Annex XIII – Performance Evaluation (PER update as an integrated QMS process)
  • IVDR Annex III – Post-market Surveillance (PMS and PMPF)
  • MDCG 2022-2 – Guidance on general principles of clinical evidence for IVDs
  • Common Specifications (CS) – for Class D IVDs in accordance with the IVDR
  • ISO 20916 – Clinical performance studies using specimens from human subjects - Good study practice
  • CLSI Standards for Analytical Method Validation (EP Documents)
metecon-kirsten-theiling

Dr. Kirsten Theiling

Expert Quality Management & Regulatory Affairs, QMR · Metecon GmbH

Dr. Kirsten Theiling is an experienced expert in quality management and regulatory affairs and serves as Metecon’s Quality Management Representative. Our QM experts focus on the following areas related to QMS and auditing: establishing and optimizing quality management systems in accordance with ISO 13485, ISO 9001, ISO 15189, ISO 17025, and 21 CFR Part 820 (QMSR), integration of MDR/IVDR and MDSAP requirements, internal audits and supplier audits, audit readiness checks, as well as CAPA root cause analysis and effective implementation of corrective actions. Metecon’s quality management experts support manufacturers, laboratories, and other regulated organizations in establishing processes, responsibilities, and documentation in a practical and audit-ready manner.

“A good QMS isn’t one that sits in a file cabinet; it’s one that’s put into practice every day. Our goal is a QMS that fits the organization, reliably integrates requirements, and supports audits not just formally but in substance.”

– Dr. Kirsten Theiling, Expert Quality Management & Regulatory Affairs, QMR, Metecon

FAQs About the QMS and Quality Management According to ISO 13485

How can a QMS be structured in a way that fits the organization while also meeting the requirements of ISO 13485, ISO 15189, MDR/IVDR, or MDSAP?

The key is to approach the QMS from the organization’s perspective rather than from the standard’s: Which processes are actually in place, who is responsible for them, and which documentation is generated anyway? On this basis, the requirements of ISO 13485, ISO 15189, MDR/IVDR, or MDSAP are integrated into a single structure, rather than being managed in parallel. This results in a QMS that remains practical for day-to-day operations while also being audit-ready. Metecon builds this structure in collaboration with manufacturers, laboratories, and regulated organizations.

How can interfaces to outsourced processes be defined in a way that is practical?

Outsourced processes—such as sterilization, manufacturing, testing, or sales activities—are a common focus of audits. The interfaces become practical when responsibilities, handoffs, approvals, and documentation are clearly defined and documented in the QMS, including supplier evaluation and monitoring. It is crucial that the interface functions not only contractually but also in practice. Metecon defines these transitions in a way that ensures they stand up to scrutiny during an audit. Learn more on the V&V Services page.

Before an audit, how can you tell whether processes are actually being followed or are merely described inSOPs?

An audit readiness check reveals the following: Do actual processes align with the standard operating procedures? Is the required documentation actually being generated—and can it be located? Do those responsible understand their processes? Are records maintained consistently? Where descriptions and actual practice diverge, discrepancies arise during the audit. Metecon conducts a structured review prior to the audit and closes any gaps before the Notified Body identifies them.

Which gaps in responsibilities, process hand-offs, and documentation most frequently lead to nonconformities during an audit?

Typical sources of nonconformities include: unclear responsibilities at process boundaries, missing or incomplete documentation of activities performed, inconsistent document control, changes that cannot be traced, and CAPA actions without proof of effectiveness. Often, the cause lies not in an individual document but in the interaction between processes. Metecon specifically addresses these interfaces to ensure that responsibilities, handoffs, and documentation mesh seamlessly.

When does an existing QMS become insufficient to meet new requirements, accommodate growth, or serve international markets?

Signs include: processes that do not scale with growth, recurring deviations, high manual maintenance effort, and difficulties integrating new markets (e.g., MDSAP, FDA) or new product lines. If the QMS is holding the company back rather than supporting it, a structural overhaul is advisable—not just isolated fixes. Metecon aligns QMS structures with organizational development, growth, and international strategic goals to ensure the system remains sustainable.

Why do audit nonconformities recur despite CAPA, and when is the cause rooted in the process itself?

If CAPA measures merely address symptoms—such as correcting a document—without addressing the root cause within the process, the same deviations will reoccur in a different form. The root cause lies within the system when multiple deviations stem from the same structural weakness: unclear responsibilities, a lack of process integration, or inconsistent documentation. Metecon thoroughly analyzes the root causes and implements measures that effectively address them at their source. Learn more on the PMS & Vigilance Services page.

Which QMS and audit standards does Metecon support for manufacturers, laboratories, and regulated organizations?

Among other things, Metecon supports ISO 13485 (QMS for medical devices and IVDs), ISO 15189 (medical laboratories), ISO 9001 (across all industries), the QMS requirements of the MDR and IVDR, and MDSAP for international markets. In addition, we conduct internal audits, supplier audits, and audit readiness checks. The approach is always the same: translating requirements into a practical, audit-ready structure that fits the organization.

Which factors influence the effort and costs associated with QMS implementation, QMS optimization, or audit support?

The effort involved depends on several factors: the maturity level and size of the organization, the number and complexity of the processes, the standards and markets to be covered (ISO 13485, ISO 15189, MDSAP, FDA), the extent of outsourced processes, the starting point (new implementation vs. optimization), and the desired level of support: ranging from ad hoc consulting to audit support to the complete implementation of a QMS. Following a free initial consultation, Metecon will provide a transparent quote.

Ready for a practical and audit-ready quality management system?

Start with a free initial consultation on your current QMS situation—for manufacturers, laboratories, and other regulated organizations, tailored to ISO 13485, ISO 15189, MDR/IVDR, QMSR, or MDSAP.

Your contact:

Milan Weiß
Sales Manager
T: +49 621 123469-040
milan.weiss@metecon.de

milan-weiss-ansprechpartner-sales-metecon