Skip to main content
AA Alive Sdn Bhd · SSM 1204108-DMDA-licensed practiceSuperbrands Malaysia 2025100+ devices registered
Medical Device Consultant.MY
EN中文
ISO 13485:2016 · Manufacturer QMS

ISO 13485 — build the system every market will ask you for.

The manufacturer-grade quality management system behind MDA conformity assessment, MDSAP, CE marking and FDA QMSR. We design it around your production floor, implement it with your team, and stand beside you at the certification audit — so you build it once and reuse it in every market.

ISO 13485 vs GDPMD
01 MDA Registration02 GDPMD + Licensing03 ISO 13485 QMS04 MDSAP05 CE / FDA Export
What ISO 13485 is

One QMS, every market

ISO 13485:2016 is the international quality management standard written specifically for medical devices. For a Malaysian manufacturer it does three jobs at once: it provides the QMS evidence a registered CAB looks for during the conformity assessment behind MDA product registration under Act 737; it is the audit basis for MDSAP — one audit accepted in five export markets; and it is the system CE notified bodies and the US FDA expect to see behind your technical documentation.

It is distinct from GDPMD, which is the distribution-side quality system importers and distributors hold for the establishment license. If you both make and trade devices you may need both — our ISO 13485 vs GDPMD page maps exactly which applies. That is why we treat ISO 13485 as stage three of the export ladder rather than a certificate for the lobby wall: built properly, it is the single most reusable regulatory asset your company owns.

The team at a GDPMD certification milestone
A certification milestone with a client’s team.
Consultants reviewing medical-device submission documents at a meeting table
Design and document controls feed straight into the technical file.

What we implement

  • Quality manual and process architecture matched to your actual production flow
  • Document and record control, CAPA and change control
  • Design & development controls (where you design, not just assemble)
  • Risk management integrated with ISO 14971
  • Supplier controls, purchasing, traceability and production records
  • Complaint handling, vigilance and recall / field-safety procedures
  • Internal audit and management review that produce real decisions
  • QMSR (US FDA) and MDSAP alignment built in from the start, for exporters

Engagement path

  1. Gap analysis — against ISO 13485:2016; you receive a findings report and a fixed quote before any build begins.
  2. QMS design & documentation — the quality manual, SOPs, forms and records written with your team, not emailed to them.
  3. Implementation & training — the system runs long enough to generate the real records a certification body needs to see.
  4. Internal audit — we audit the system the way the certification body will, and close the gaps before they cost you.
  5. Certification-body audit management — we manage stage 1 and stage 2, sit in the room (or on the call), close findings, and align the system to MDSAP / FDA QMSR where you plan to export.

What it costs

ISO 13485 implementation is quoted fixed-fee after gap analysis — manufacturing complexity, number of sites and how much documentation you already hold vary far too much for an honest one-size price. What is published is the recurring cost once you are certified.

PROJECT

ISO 13485 implementation

By quotation
  • Gap analysis & findings report
  • Full QMS build, implementation & team training
  • Internal audit + certification-body audit management
  • Payment plans from RM1,500/month
Scope my ISO 13485 project
RECURRING

Certificate annual renewal

RM2,500/year
  • Document preparation — CAB fees included
  • Surveillance-audit preparation
  • Renewal calendar management
Keep my certificate alive

Bundling ISO 13485 with MDSAP readiness and technical-file work is the most cost-efficient route for exporters — the same QMS core carries into every submission. See the full pricing schedule for renewals and export programs.

Jawapan ringkas · Bahasa Malaysia

Apakah ISO 13485 dan siapa yang memerlukannya?

ISO 13485:2016 ialah standard sistem pengurusan kualiti antarabangsa khusus untuk peranti perubatan. Ia diperlukan oleh pengeluar (manufacturer) peranti perubatan — ia asas kepada penilaian pematuhan MDA, MDSAP, penandaan CE dan QMSR FDA. Pengimport dan pengedar pula menggunakan GDPMD, bukan ISO 13485. Kos pelaksanaan disebut harga selepas analisis jurang; pembaharuan sijil tahunan RM2,500 setahun. Pelan bayaran dari RM1,500 sebulan.

Who you’ll work with

Named people who hold the systems they build.

We run device businesses ourselves under AA Alive Sdn Bhd — we hold our own MDA establishment license and run the same quality systems we implement for clients.

AA Alive’s medical-device regulatory team
AA Alive’s device regulatory team, on client visits across Malaysia.
Founder & Managing Director · Regulatory authority

Evin Lim

Advises from the operator’s chair — the group registers, imports and supplies devices itself — and speaks on the Malaysian pharmaceutical and device industry on BERNAMA TV and RTM.

LinkedIn profile
Commercial Lead · Your first contact

Lim Yen Thong

Your first point of contact for scope, timelines and quotations. Lim Yen Thong runs the commercial side of the device practice and coordinates every engagement from first enquiry to signed proposal.

LinkedIn profile
FAQ

Frequently asked questions

Is ISO 13485 mandatory in Malaysia?
For manufacturers, an ISO 13485-based quality management system is the accepted way to demonstrate the QMS requirements behind conformity assessment and establishment licensing. Importers and distributors implement GDPMD instead — see our ISO 13485 vs GDPMD comparison if you are unsure which one applies to you.
What is the difference between ISO 13485 and GDPMD?
ISO 13485 is the manufacturer-grade quality management system for organisations that design and/or make devices; GDPMD (Good Distribution Practice for Medical Devices) is the distribution-side quality system that importers, distributors and authorized representatives must hold for the MDA establishment license. Many businesses do both. Our ISO 13485 vs GDPMD page maps which you need.
We already have ISO 9001 — is that enough?
No. ISO 9001 is a general quality standard; ISO 13485 adds the device-specific requirements regulators audit: design and development controls, risk management to ISO 14971, sterile and clean-handling controls where relevant, traceability, and complaint/vigilance handling. An existing ISO 9001 base does make implementation faster because the document-control and management-review scaffolding already exists.
How long does ISO 13485 certification take?
Typically several months for an SME manufacturer: system design, implementation run long enough to generate real records, an internal audit, then the certification body’s stage 1 and stage 2 audits. Existing documentation — device technical files, production controls, an ISO 9001 base — shortens the path considerably. We set a realistic date at the gap-analysis stage, not an aspirational one.
Does ISO 13485 cover FDA (QMSR) and MDSAP requirements too?
Substantially, yes. The US FDA’s Quality Management System Regulation (QMSR) is aligned with ISO 13485:2016, and ISO 13485 is the foundation of an MDSAP audit accepted in the USA, Canada, Brazil, Australia and Japan. Building the system once, properly, is the cheapest route into multiple markets — we design it with those destinations in mind so the CE and 510(k) work reuses the same core.
What does ISO 13485 implementation cost — and what about renewals?
Implementation is quoted after a gap analysis, because manufacturing complexity, number of sites and existing documentation vary too much for an honest one-size price — ask for a scoping call and we will give you a realistic fixed fee. The certificate then renews annually at RM2,500/yr all-inclusive (document preparation and CAB fees). Programs can be spread on a payment plan from RM1,500/month.
Does an ISO 13485 QMS support my MDA registration and technical file?
Yes — that is the point of building it well. The design-control, risk-management and document-control outputs of an ISO 13485 system feed directly into the CSDT technical documentation used for MDA product registration, and the same core is reused for EU MDR technical files and FDA 510(k) content. One quality system, every submission.

Manufacturing devices — or planning to?

Tell us what you make and where you want to sell it. We will tell you what your QMS needs to cover, what it can safely leave out, and give you a fixed quote after a gap analysis.

WhatsApp