[9001:26]News & Analysis
Analysis

ISO 13485 vs ISO 9001:2026: Key Differences and Which Standard You Need

ISO 13485 vs ISO 9001:2026: key differences between the medical device and general quality standards. Who needs each and how they relate.

Konstantin Dolgan, Ph.D.
Konstantin Dolgan, Ph.D.

Quality Systems Engineer & Product Development Expert · Ph.D. Materials & Infrastructure Systems Engineering

August 10, 2026 8 min read

ISO 13485 vs ISO 9001: Understanding the Relationship

ISO 13485 vs ISO 9001 is one of the most common questions in medical device quality management. The two standards are related but serve different purposes. ISO 13485 ISO 9001 comparison: ISO 13485 is the quality management standard specifically designed for medical device manufacturers and their supply chains. ISO 9001 is the general quality management standard for any industry.

ISO 13485 vs ISO 9001 key difference: while ISO 9001 is built around customer satisfaction and continual improvement, ISO 13485 is built around regulatory compliance and product safety. ISO 9001 medical devices: many medical device organizations hold both certifications, but ISO 13485 is typically the primary requirement for regulatory purposes.

Key Insight

Key Fact:: ISO 13485 is not directly based on ISO 9001:2026. ISO 13485:2016 was developed in parallel with ISO 9001:2015 and shares the same process approach, but it is a standalone standard with its own requirements. A future ISO 13485 revision may align more closely with ISO 9001:2026.

ISO 13485 vs ISO 9001: Key Differences

FeatureISO 9001:2026ISO 13485:2016
ScopeAll industriesMedical devices and supply chain
Primary focusCustomer satisfactionRegulatory compliance, product safety
Continual improvementRequiredNot required (only maintaining effectiveness)
Risk managementRisk-based thinkingDetailed risk management (ISO 14971)
Regulatory requirementsNot addressedCentral requirement
Sterile productsNot addressedSpecific requirements
Complaint handlingGeneralDetailed, regulatory-linked
Post-market surveillanceNot addressedRequired
Design controlsOptional (Clause 8.3)Mandatory
TraceabilityGeneralDetailed, lot/batch level
ValidationNot addressedRequired for processes

Who Needs ISO 13485 vs ISO 9001?

Stay Current

ISO 9001:2026 publishes September 16, 2026. Get weekly briefings.

ISO 9001:2026 is appropriate for:

  • Medical device organizations supplying to customers who require ISO 9001 (not ISO 13485)
  • Service organizations in the healthcare sector (not manufacturing medical devices)
  • Organizations that want a general QMS foundation before pursuing ISO 13485

ISO 13485 is required for:

  • Medical device manufacturers selling in the EU (MDR/IVDR compliance pathway)
  • Medical device manufacturers selling in Canada (Health Canada requirement)
  • Organizations in the medical device supply chain whose customers require ISO 13485
  • Organizations seeking FDA 510(k) or PMA approval (ISO 13485 is recognized by FDA)

Both certifications may be needed when:

  • An organization manufactures medical devices AND other products
  • Customers in different markets require different certifications
  • The organization wants to demonstrate both regulatory compliance (ISO 13485) and general quality commitment (ISO 9001)

How ISO 9001:2026 Affects ISO 13485 Organizations

ISO 13485:2016 was developed in parallel with ISO 9001:2015, not ISO 9001:2026. The three new requirements in ISO 9001:2026 — quality culture, opportunities management, and change effectiveness monitoring — are not in ISO 13485:2016.

What this means for ISO 13485 certified organizations:

  1. No immediate action required. ISO 13485:2016 remains the current and valid medical device quality standard. ISO 9001:2026 does not affect ISO 13485 certification.
  1. ISO 13485 revision is coming. ISO/TC 210 (the committee responsible for ISO 13485) will eventually develop a new edition of ISO 13485 that aligns with ISO 9001:2026. This process typically takes several years.
  1. Quality culture is already implicit in ISO 13485. The ISO 9001:2026 quality culture requirement aligns with the patient safety culture that ISO 13485 organizations already maintain.

The ISO 13485 vs ISO 9001 Certification Process

ISO 9001:2026 certification process:

  1. Implement QMS requirements
  2. Conduct internal audit
  3. Management review
  4. Stage 1 audit (document review) with certification body
  5. Stage 2 audit (implementation review)
  6. Certificate issued (valid 3 years, annual surveillance audits)

ISO 13485 certification process:

  1. Implement QMS requirements including regulatory requirements
  2. Validate processes where required
  3. Internal audit
  4. Management review
  5. Stage 1 audit with accredited certification body
  6. Stage 2 audit
  7. Certificate issued (valid 3 years, annual surveillance audits)

The ISO 13485 certification process is generally more rigorous and time-consuming than ISO 9001 due to the regulatory requirements and validation activities.

Frequently Asked Questions: ISO 13485 vs ISO 9001

Can ISO 9001 replace ISO 13485?

No. ISO 9001 vs ISO 13485: ISO 9001 cannot replace ISO 13485 for medical device regulatory purposes. Regulatory bodies (EU MDR, Health Canada, FDA) specifically require ISO 13485, not ISO 9001.

Is ISO 13485 harder to get than ISO 9001?

Generally yes. ISO 13485 has more detailed requirements, particularly for design controls, validation, and regulatory compliance. The certification process is also more rigorous.

Do I need both ISO 9001 and ISO 13485?

It depends on your customers and markets. If all your customers require ISO 13485, you do not need ISO 9001 separately — ISO 13485 includes equivalent requirements. If you have customers in different sectors, you may need both.

Will ISO 13485 be updated for ISO 9001:2026?

Eventually, yes. ISO/TC 210 will develop a new edition of ISO 13485 that aligns with ISO 9001:2026. No official timeline has been announced.

What is the cost difference between ISO 13485 and ISO 9001 certification?

ISO 13485 certification typically costs 30–50% more than ISO 9001 certification due to the additional requirements and the specialized medical device auditor expertise required.

ISO 13485 vs ISO 9001ISO 13485 ISO 9001 comparisonmedical device quality managementISO 13485 2016ISO 9001 medical devices

Share this article

Was this article helpful?

Konstantin Dolgan, Ph.D.
Konstantin Dolgan, Ph.D.Quality Systems Engineer & Product Development Expert
Ph.D. Materials & Infrastructure Systems EngineeringCertified New Product Development Professional (NPDP)Forbes The Next 1000 (2021)7 Granted US Patents

Konstantin Dolgan, Ph.D., is a product development engineer and quality systems architect who first encountered ISO 9001 from the inside — as an R&D engineer designing API 610 centrifugal pumps inside a certified manufacturer. He has since led the development of over 1,000 physical products and holds a Ph.D. in Materials and Infrastructure Systems Engineering from Louisiana Tech University.

Expertise:Quality data architecture and traceabilityNew product development under ISO 9001 clause 8.3Design control and documented informationRoot cause analysis and risk-based thinkingISO 9001 for manufacturing and engineeringAI applied to quality managementERP integration and records management