ISO 13485 specifies quality management system requirements for organizations involved in the design, production, storage, distribution, installation or servicing of medical devices.
Detailed Definition
ISO 13485, currently the 2016 edition, sets quality management system requirements for medical device organizations, with emphasis on risk management, documented procedures, traceability and regulatory compliance. It is related to ISO 9001 but is a standalone standard with device-specific requirements. In the US, FDA's Quality Management System Regulation in 21 CFR Part 820 incorporates ISO 13485:2016 by reference. Pallet and packaging suppliers usually fall under a device maker's purchasing controls rather than needing certification themselves.
How device makers control pallet suppliers
ISO 13485 requires a manufacturer to evaluate and select suppliers based on their ability to meet requirements, with controls proportionate to the risk the purchased item poses to the device. For pallets, that often means a written specification, a supplier approval file and some form of incoming inspection. Pallets carrying finished, packaged devices are usually low risk compared with components, but they still matter for cleanliness, pests, splinters and load stability in storage and transport.
Supplier evaluation and monitoring are documented, so a device maker may contact a pallet supplier periodically to update its file. Changes that seem minor to a supplier, such as a new lumber source or a different fastener, may still need to be reported if the quality agreement says so.
What a pallet supplier may be asked to provide
- A quality agreement or signed specification covering material, dimensions and condition.
- Notice before changes to materials, design or production site.
- Delivery traceability, such as dated paperwork or marking.
- Evidence of ISPM 15 treatment where products are exported.
- Access for supplier audits, or answers to questionnaires.
ISO 9001 certification can support a supplier's case, but ISO 13485 itself does not require suppliers to hold any certificate.
Related Glossary Terms
Frequently Asked Questions
Does a pallet supplier need ISO 13485 certification to sell to a medical device company?
Usually not. ISO 13485 places requirements on the device organization, which must control its suppliers in proportion to risk. A pallet is generally a low-risk purchased item, so most device makers rely on a specification, supplier evaluation and incoming checks rather than requiring certification. Some customers do ask for ISO 9001 or a quality agreement. Read the customer's supplier requirements to see what they expect.
What is the difference between ISO 13485 and ISO 9001?
ISO 9001 is a general quality management standard for any organization and focuses on meeting customer requirements and continual improvement. ISO 13485 is specific to medical devices and emphasizes regulatory requirements, documented risk management, product safety, traceability and validated processes. An organization can hold both certifications, but holding one does not mean it meets the other, because each has requirements the other lacks.