What EN ISO 13485:2016+A11:2021 means
EN ISO 13485:2016+A11:2021 is not a new global edition of ISO 13485. The term EN ISO 13485 2016 A11 2021 refers to the European adoption of ISO 13485:2016, together with the European amendment A11:2021. That amendment adds regulatory mapping for the EU Medical Device Regulation and the EU In Vitro Diagnostic Medical Device Regulation.
In practical terms, ISO 13485:2016 remains the core quality management system standard for medical device organizations. A11 explains how selected clauses relate to EU MDR 2017/745 and IVDR 2017/746 requirements. It gives manufacturers, notified bodies, and regulatory teams a more structured basis for gap review, but it does not make ISO 13485 a complete substitute for MDR or IVDR compliance.
For medical device companies, the distinction is important: ISO 13485:2016 provides the QMS framework, while EN ISO 13485:2016+A11:2021 adds Europe-specific context. Companies placing devices on the EU market should understand both parts, because the A11 annexes help show where the standard supports regulatory conformity and where additional EU-specific evidence is still needed.
For more updates on medical device compliance topics, visit our Regulatory section.
What changed with the A11:2021 amendment
The A11:2021 amendment mainly changes the European material around the standard. It does not rewrite the technical QMS clauses of ISO 13485:2016. According to standards information from BSI and European regulatory summaries, the amendment adds or revises European annexes that show the relationship between ISO 13485 clauses and requirements in the MDR and IVDR.
The key addition is the Annex Z structure. Annex ZA addresses the relationship with Regulation (EU) 2017/745 for medical devices. Annex ZB addresses the relationship with Regulation (EU) 2017/746 for in vitro diagnostic medical devices. These annexes are informative, but they are useful in day-to-day regulatory work because they indicate whether selected ISO 13485 clauses correspond to specific regulatory requirements.
| Element | What it does | Practical meaning |
|---|---|---|
| ISO 13485:2016 | Sets QMS requirements for medical device organizations | Forms the core process framework for design, production, installation, servicing, supplier control, records, corrective action, and related QMS activities |
| EN adoption | Adopts ISO 13485 for use as a European standard | Creates the European standard version used in the EU harmonised standards system |
| A11:2021 | Adds Europe-specific annexes for MDR and IVDR mapping | Helps identify where the QMS standard supports EU regulatory requirements and where further regulatory controls are needed |
| OJEU listing | Publishes references to harmonised standards in the Official Journal of the European Union | Can provide a presumption of conformity only for the requirements and parts covered by the listed standard |
This distinction matters because A11:2021 is sometimes mistaken for a complete checklist of MDR and IVDR obligations. It is not. The amendment improves traceability between the standard and the regulations, but the manufacturer remains responsible for meeting all applicable legal requirements.
How A11 connects ISO 13485 to MDR and IVDR
The European Commission explains that harmonised standards under the medical device regulations are developed by CEN and CENELEC on the basis of a Commission standardisation request. Once references to those standards are published in the Official Journal of the European Union, voluntary use of the standards can confer a presumption of conformity with the regulatory requirements they aim to cover.
For EN ISO 13485:2016+A11:2021, the annexes focus on the relationship between the QMS standard and selected MDR and IVDR requirements. Broadly, the mapping is organized around manufacturer obligations and conformity assessment routes. Annex ZA links the standard to MDR provisions, while Annex ZB links it to IVDR provisions.
- Article 10 manufacturer obligations: The annexes map selected QMS clauses to general obligations of manufacturers under the MDR and IVDR.
- Annex IX conformity assessment: The mapping addresses QMS-based conformity assessment and assessment of technical documentation.
- Annex XI conformity assessment: The mapping also addresses quality-system-related conformity assessment routes covered by Annex XI.
The value of this structure is that it gives regulatory teams a starting point for evidence mapping. A design and development procedure, for example, may support several regulatory expectations. Even so, the procedure still has to be assessed against the full MDR or IVDR text, applicable guidance, device classification, the chosen conformity assessment route, and notified body expectations.
Why harmonisation does not mean full regulatory compliance
A common misunderstanding is that certification to ISO 13485 automatically proves compliance with the EU MDR or IVDR. That conclusion is too broad. ISO 13485 is a QMS standard. The MDR and IVDR are legal regulations covering many issues beyond the QMS framework, including classification, clinical or performance evidence, post-market surveillance, vigilance, unique device identification, economic operator obligations, technical documentation, and conformity assessment.
Harmonised standard status is still valuable. It may support a presumption of conformity, but only for the regulatory requirements that the standard aims to cover, and only within the limits of the standard’s scope and the relevant OJEU reference. A manufacturer cannot rely on the standard to cover requirements that sit outside the mapped relationship.
In practice, an ISO 13485 certificate can be strong supporting evidence, but it is not the same as a complete MDR or IVDR compliance file. A notified body will still expect device-specific technical documentation, risk management evidence, clinical evaluation or performance evaluation, post-market surveillance plans, post-market clinical follow-up or performance follow-up where applicable, labeling controls, UDI processes, and evidence that the QMS is implemented rather than only documented.
Timeline of key regulatory context
The search term EN ISO 13485:2016+A11:2021 is often linked with MDR and IVDR transition work. The timeline below shows why.
| Date | Event | Why it matters |
|---|---|---|
| March 2016 | ISO 13485:2016 was published as the third edition of the medical device QMS standard | It became the main international QMS reference for medical device organizations |
| 5 April 2017 | The EU adopted Regulation (EU) 2017/745 and Regulation (EU) 2017/746 | The MDR and IVDR replaced the older directive-based framework and introduced more detailed regulatory expectations |
| 14 April 2021 | The European Commission issued standardisation request M/575 to CEN and CENELEC | This supported the development and citation of harmonised standards under the medical device regulations |
| September 2021 | The A11:2021 amendment to EN ISO 13485:2016 was published by European standards bodies | The amendment introduced the MDR and IVDR relationship annexes used for gap analysis |
| 2022 onward | EU harmonised standards lists under MDR and IVDR included references to EN ISO 13485:2016 with related corrigendum and A11 amendment | Manufacturers could use the listed standard as part of a presumption-of-conformity strategy for covered requirements |
| 2 February 2026 | The US FDA Quality Management System Regulation became effective, incorporating ISO 13485:2016 by reference | This reinforced the global relevance of ISO 13485:2016, while the A11 amendment remains specific to the European regulatory context |
Practical implications for manufacturers
Manufacturers should treat EN ISO 13485:2016+A11:2021 as a bridge between a QMS audit model and EU legal requirements. A useful first step is to maintain a clause-by-clause QMS matrix that shows ISO 13485 processes, MDR or IVDR obligations, responsible process owners, records, and objective evidence. The A11 annexes can inform this matrix, but the manufacturer should add device-specific requirements that are not fully covered by the standard. See also: Implants.
Risk management also needs close attention. ISO 13485 requires a risk-based approach in defined areas, while the EU regulations include their own risk reduction expectations and general safety and performance requirements. A manufacturer should confirm that risk management procedures, benefit-risk evaluation, residual risk communication, production controls, post-market surveillance, and corrective action processes align with the applicable EU regulation, not only with ISO 13485 wording.
The QMS must also connect to technical documentation. A well-written procedure is not enough if the technical file, design history, usability evidence, verification and validation records, supplier controls, labeling records, and post-market plans do not show implementation. This is especially important during notified body reviews, where auditors and technical reviewers may examine whether QMS outputs support the device-specific conformity claim.
Economic operators should avoid over-claiming. Importers, distributors, authorized representatives, contract manufacturers, and critical suppliers may use ISO 13485-aligned processes, but their legal roles under MDR or IVDR differ. A supplier certificate can support supplier qualification, yet it does not transfer the manufacturer’s regulatory responsibility.
Checklist for using EN ISO 13485:2016+A11:2021 in a gap review
A practical gap review should go beyond checking whether a company has a current ISO 13485 certificate. It should test how the standard, the European annexes, and the legal requirements work together.
- Confirm whether the organization is using the correct standard reference, including EN ISO 13485:2016, applicable corrigenda, and A11:2021 where EU MDR or IVDR relevance is claimed.
- Map Annex ZA requirements if the product is a medical device under Regulation (EU) 2017/745.
- Map Annex ZB requirements if the product is an in vitro diagnostic medical device under Regulation (EU) 2017/746.
- Identify every mapped requirement that is only partially covered by the standard and assign the additional evidence needed under the regulation.
- Check that QMS procedures link to technical documentation, clinical or performance evaluation, PMS, vigilance, UDI, labeling, supplier management, and regulatory change control.
- Review whether management review inputs include regulatory changes, post-market data, audit results, complaint trends, supplier performance, and quality objectives.
- Verify that internal audits test implementation and regulatory effectiveness, not just document availability.
- Document limitations clearly so an ISO 13485 certificate is not presented as complete MDR or IVDR conformity evidence.
How it relates to FDA QMSR and global quality systems
The European A11 amendment should not be confused with the US FDA Quality Management System Regulation. The FDA’s QMSR, effective 2 February 2026, incorporates ISO 13485:2016 by reference and aligns US device quality requirements more closely with the international QMS standard. However, the FDA framework includes US-specific additions and enforcement expectations, and it does not rely on the European A11 annexes.
For global manufacturers, the practical approach is to build one robust ISO 13485-based QMS, then add jurisdiction-specific regulatory matrices. The EU matrix should address MDR or IVDR requirements and the EN A11 annexes. The US matrix should address QMSR and other FDA requirements. Other markets may have their own recognition, certification, registration, or audit expectations. This reduces duplication while avoiding the common mistake of assuming that one certificate satisfies every regulator in the same way.
Frequently asked questions
Is EN ISO 13485:2016+A11:2021 mandatory in the EU?
Use of harmonised standards is generally voluntary. However, using a harmonised standard listed in the Official Journal can provide a presumption of conformity for the requirements it aims to cover. Many manufacturers therefore use EN ISO 13485:2016+A11:2021 as a practical route to support MDR or IVDR QMS evidence.
Is A11:2021 the same as a new edition of ISO 13485?
No. ISO 13485:2016 remains the core international standard. A11:2021 is a European amendment that adds MDR and IVDR relationship annexes. It should be read as Europe-specific regulatory context, not as a replacement for ISO 13485:2016.
Does an ISO 13485 certificate prove MDR or IVDR compliance?
No. Certification to ISO 13485 can support a compliance strategy, but it does not by itself prove full MDR or IVDR conformity. The manufacturer still needs complete device-specific evidence, including technical documentation, clinical or performance evaluation, risk management, PMS, vigilance, labeling, and conformity assessment records.
Does EN ISO 13485:2016+A11:2021 apply to IVD manufacturers?
Yes. The A11 amendment includes Annex ZB for the EU IVDR. IVD manufacturers should review the IVDR mapping separately because IVD regulatory evidence, classification, performance evaluation, and conformity assessment expectations differ from those for non-IVD medical devices.
What should a manufacturer do first?
The first step is to create or update a QMS-to-regulation matrix. Map ISO 13485 clauses, A11 annex references, MDR or IVDR requirements, internal procedures, records, and evidence owners. Then identify partial coverage and gaps that require additional regulatory documentation or process controls.