Article

ISO 13485 QMS after QMSR: what MDSAP changes for European MedTechs

Illustration: ISO 13485 QMS, QMSR alignment and MDSAP audits.

For European MedTechs that also target the United States, the QMS is no longer an “ISO on one side, Part 820 on the other” story. With FDA's Quality Management System Regulation (QMSR), ISO 13485 becomes the explicitly foregrounded backbone, completed by US-specific requirements. MDSAP follows that multi-jurisdiction audit logic.

This article helps quality and regulatory teams prioritise procedure updates without rebuilding a parallel QMS. Key sources: FDA's QMSR final rule (Federal Register, 2 February 2024) and the MDSAP program.

What QMSR changes

FDA amended the device quality-system regulation to align more closely with ISO 13485:2016, while retaining requirements specific to the US framework. For a European manufacturer, the operational task is not to learn a second quality language, but to identify residual gaps (registration, reporting, US-specific provisions) and trace them inside the existing QMS.

Always confirm applicability dates and transition materials on FDA.gov / the Federal Register before freezing your update plan. Implementation details continue through guidance and agency communications.

MDSAP: what audits look at now

MDSAP lets one audit feed multiple participating authorities. For an EU manufacturer, the value is showing one coherent QMS for MDR plus MDSAP markets, instead of disconnected “US-only” procedures. Audits scrutinise process control (design, production, monitoring, corrective action) and the ability to produce current records.

Software, AI and change control

On SaMD / AI, auditors look more closely at change management, software validation and post-market coherence. If you are preparing an FDA PCCP, it must sit in the same change-control SOPs you present in MDSAP.

Concrete priorities for a European QMS

  • Map ISO 13485 ↔ complementary QMSR requirements (residual gaps).
  • Update the quality manual and SOPs without creating a US pillar outside process.
  • Strengthen design control, software validation and critical-supplier control.
  • Prepare MDSAP records: quality objectives, management review, CAPA, PMS.
  • Industrialise continuous evidence via eQMS deployment and Qapsule.

A targeted internal audit for QMSR/MDSAP is often the fastest way to find gaps before the auditing organisation arrives.

FAQ

Does QMSR replace ISO 13485?

No. QMSR aligns to ISO 13485:2016 while keeping FDA-specific requirements. ISO 13485 remains the international QMS backbone for most MedTech manufacturers.

Does MDSAP replace the MDR notified body?

No. MDSAP is a QMS audit program for multiple authorities. CE marking under MDR/IVDR remains a distinct path with a notified body when required.

Do we need two quality manuals (EU and US)?

Usually not. One ISO 13485-based QMS, with annexes/controls for complementary US requirements, is more robust and more audit-friendly.

How does this relate to AI software and PCCPs?

QMS change control and software validation must carry the PCCP and monitoring. Otherwise the FDA change plan is not defensible in an MDSAP audit.

How does QARA PULSE help?

QMSR/MDSAP gap analysis, SOP updates, internal audit, eQMS deployment and continuous traceability with Qapsule. Contact us to prioritise the plan.

QARA PULSE article (April 2026), based on the QMSR Federal Register rule, the MDSAP program and ISO 13485. Confirm FDA applicability dates before freezing your plan.

Related: eQMS deployment · Internal audit · Qapsule · PCCP · Contact

← All resources