Skip to main content
ISO 13485:2016 · Manufacturer QMS

ISO 13485 — build the system every market will ask you for.

The manufacturer-grade quality management system behind MDA conformity assessment, MDSAP, CE marking and FDA QMSR. We design it around your production floor, implement it with your team, and stand beside you at the certification audit — so you build it once and reuse it in every market.

01 MDA Registration02 GDPMD + Licensing03 ISO 13485 QMS04 MDSAP05 CE / FDA Export
What ISO 13485 is

One QMS, every market

ISO 13485:2016 is the international quality management standard written specifically for medical devices. For a Malaysian manufacturer it does three jobs at once: it provides the QMS evidence a registered CAB looks for during the conformity assessment behind MDA product registration under Act 737; it is the audit basis for MDSAP — one audit accepted in five export markets; and it is the system CE notified bodies and the US FDA expect to see behind your technical documentation.

It is distinct from GDPMD, which is the distribution-side quality system importers and distributors hold for the establishment license. If you both make and trade devices you may need both — our ISO 13485 vs GDPMD page maps exactly which applies. That is why we treat ISO 13485 as stage three of the export ladder rather than a certificate for the lobby wall: built properly, it is the single most reusable regulatory asset your company owns.

What we implement

  • Quality manual and process architecture matched to your actual production flow
  • Document and record control, CAPA and change control
  • Design & development controls (where you design, not just assemble)
  • Risk management integrated with ISO 14971
  • Supplier controls, purchasing, traceability and production records
  • Complaint handling, vigilance and recall / field-safety procedures
  • Internal audit and management review that produce real decisions
  • QMSR (US FDA) and MDSAP alignment built in from the start, for exporters

Engagement path

  1. Gap analysis — against ISO 13485:2016; you receive a findings report and a fixed quote before any build begins.
  2. QMS design & documentation — the quality manual, SOPs, forms and records written with your team, not emailed to them.
  3. Implementation & training — the system runs long enough to generate the real records a certification body needs to see.
  4. Internal audit — we audit the system the way the certification body will, and close the gaps before they cost you.
  5. Certification-body audit management — we manage stage 1 and stage 2, sit in the room (or on the call), close findings, and align the system to MDSAP / FDA QMSR where you plan to export.

What it costs

The figure on each card is our fee. The certification body's audit and the MDA manufacturer licence are paid by you, direct to them — they are listed under our fee and are not included in it.

PROJECT

ISO 13485 + MDA manufacturer licence

RM7,500 our fee, year 1
  • Gap analysis & findings report
  • Full QMS build, implementation & team training
  • Internal audit + certification-body audit management
  • MDA manufacturer licence application
  • Paid direct to the certification body: certification audit RM7,500
  • Paid direct to MDA: manufacturer licence RM4,250 (RM250 application + RM4,000 licence)
  • Payment plans from RM1,500/month
Scope my ISO 13485 project
RECURRING

Surveillance years 2 and 3

RM4,000/year, our fee
  • Surveillance-audit preparation
  • Paid direct to the certification body: surveillance audit RM5,000/year
  • Renewal calendar management
Keep my certificate alive

Bundling ISO 13485 with MDSAP readiness and technical-file work is the most cost-efficient route for exporters — the same QMS core carries into every submission. See the full pricing schedule for renewals and export programs.

Jawapan ringkas · Bahasa Malaysia

Apakah ISO 13485 dan siapa yang memerlukannya?

ISO 13485:2016 ialah standard sistem pengurusan kualiti antarabangsa khusus untuk peranti perubatan. Ia diperlukan oleh pengeluar (manufacturer) peranti perubatan — ia asas kepada penilaian pematuhan MDA, MDSAP, penandaan CE dan QMSR FDA. Pengimport dan pengedar pula menggunakan GDPMD, bukan ISO 13485. Yuran kami RM7,500 untuk tahun pertama; audit badan pensijilan (RM7,500) dan lesen pengilang MDA (RM4,250) dibayar terus oleh anda. Tahun pengawasan 2 dan 3: yuran kami RM4,000 setahun, audit badan pensijilan RM5,000 setahun dibayar terus. Pelan bayaran dari RM1,500 sebulan.

Who you’ll work with

Named people who hold the systems they build.

We run device businesses ourselves under AA Alive Sdn Bhd — we hold our own MDA establishment license and run the same quality systems we implement for clients.

AA Alive’s medical-device regulatory team
AA Alive’s device regulatory team, on client visits across Malaysia.
Founder & Managing Director · Regulatory authority

Evin Lim

Advises from the operator’s chair — the group registers, imports and supplies devices itself — and speaks on the Malaysian pharmaceutical and device industry on BERNAMA TV and RTM.

LinkedIn profile
Commercial Lead · Your first contact

Lim Yen Thong

Your first point of contact for scope, timelines and quotations. Lim Yen Thong runs the commercial side of the device practice and coordinates every engagement from first enquiry to signed proposal.

LinkedIn profile
FAQ

Frequently asked questions

Is ISO 13485 mandatory in Malaysia?
For manufacturers, an ISO 13485-based quality management system is the accepted way to demonstrate the QMS requirements behind conformity assessment and establishment licensing. Importers and distributors implement GDPMD instead — see our ISO 13485 vs GDPMD comparison if you are unsure which one applies to you.
What is the difference between ISO 13485 and GDPMD?
ISO 13485 is the manufacturer-grade quality management system for organisations that design and/or make devices; GDPMD (Good Distribution Practice for Medical Devices) is the distribution-side quality system that importers, distributors and authorized representatives must hold for the MDA establishment license. Many businesses do both. Our ISO 13485 vs GDPMD page maps which you need.
We already have ISO 9001 — is that enough?
No. ISO 9001 is a general quality standard; ISO 13485 adds the device-specific requirements regulators audit: design and development controls, risk management to ISO 14971, sterile and clean-handling controls where relevant, traceability, and complaint/vigilance handling. An existing ISO 9001 base does make implementation faster because the document-control and management-review scaffolding already exists.
How long does ISO 13485 certification take?
Typically several months for an SME manufacturer: system design, implementation run long enough to generate real records, an internal audit, then the certification body’s stage 1 and stage 2 audits. Existing documentation — device technical files, production controls, an ISO 9001 base — shortens the path considerably. We set a realistic date at the gap-analysis stage, not an aspirational one.
Does ISO 13485 cover FDA (QMSR) and MDSAP requirements too?
Substantially, yes. The US FDA’s Quality Management System Regulation (QMSR) is aligned with ISO 13485:2016, and ISO 13485 is the foundation of an MDSAP audit accepted in the USA, Canada, Brazil, Australia and Japan. Building the system once, properly, is the cheapest route into multiple markets — we design it with those destinations in mind so the CE and 510(k) work reuses the same core.
What does ISO 13485 implementation cost — and what about renewals?
Our fee is RM7,500 for year 1, covering the QMS work and the MDA manufacturer licence application. Two fees are paid direct by you, not to us: the certification body’s audit (RM7,500) and the MDA manufacturer licence (RM4,250 — RM250 application + RM4,000 licence). In surveillance years 2 and 3 our fee is RM4,000 a year, plus the certification body’s surveillance audit (RM5,000 a year, paid direct). Certificate expiry and recertification follow the certification-body schedule. Programs can be spread on a payment plan from RM1,500/month.
Does an ISO 13485 QMS support my MDA registration and technical file?
Yes — that is the point of building it well. The design-control, risk-management and document-control outputs of an ISO 13485 system feed directly into the CSDT technical documentation used for MDA product registration, and the same core is reused for EU MDR technical files and FDA 510(k) content. One quality system, every submission.

Manufacturing devices — or planning to?

Tell us what you make and where you want to sell it. We will tell you what your QMS needs to cover, what it can safely leave out, and give you a fixed quote after a gap analysis.

WhatsApp