Quality manual, ISO 13485 and MDR, free template

By Guillaume Promé
Sep. 24, 2021 ISO 13485, Regulation (EU) 2017/745

The European regulation for medical devices requires manufacturers to write and maintain a quality manual that documents the quality management system implemented, as specified in Regulation (EU) 2017/745, Chapter I.2.2 and Annex XI.A.6.2 :

All the elements, requirements and provisions adopted by the manufacturer for its quality management system shall be documented in a systematic and orderly manner in the form of a quality manual and written policies and procedures such as quality programmes, quality plans and quality records.

In this article, you will find a quality manual template conforming to the requirements of Regulation 2017/745 and EN ISO 13485:2016 + A11:2021.

👉 This quality manual template can be set up according to your activities and products, using Qualitio online templates.

What is quality manual?

The quality manual is a document that presents the measures taken by an organization to meet the requirements applicable to its quality management system.

What is the purpose of quality manual?

The quality manual allows to understand the functioning of a company and its environment and to communicate its objectives. It is often presented to auditors and new employees.

What should be included in a quality manual?

A quality manual should document all the elements adopted by the organization for its QMS.

General information

Presentation of the company

Think of the recipient as a new employee, a new partner, or even an auditor.

More detailed information can be added to the quality manual, beware: it will need to be kept up to date.
Examples:

  • History of your company, this can be useful if the “regulatory” history is complex, with for example buy-outs/mergers, transfers of certificates, or changes in the scope of the QMS.
  • Description of the clinical and market context (difficult if you have varied products)
  • Identification of other organisations that may impact the conformity of your activities: critical subcontractors, distributors, certification body,…

Example:

(Name of your company) is a company created in XXXX. It creates, develops and markets innovative medical devices on the market of (your industry).

  • Organisation: See the document “Organisation chart of the company”.
  • Market: (by country and/or by zone: EU, US…)
  • Customers: the devices are sold to (your customers: hospitals, individuals, health professionals, other MD manufacturers, etc.)
  • Our mission: to provide (your users) with products that guarantee a high level of (e.g. quality, safety, performance), to enable them to (the purpose of use of the device, its clinical benefits).
  • Our capabilities: (describe your main activities e.g. design, market, maintain) a (the type of device you offer).
  • Address: (your postal address)

Regulatory role(s) of the company

Within the framework of the applicable regulatory requirements, the company assumes the role of :

Example:

Role of the company Regulatory Justification
Manufacturer Regulation (EU) 2017/745 Marketing of own-name MD in the EU.
Distributor Regulation (EU) 2017/745 Part of the supply chain of a MD from another manufacturer.
Manufacturer Regulation (EU) 207/2012 Marketing of own-name MD with provision of instructions for use only in electronic format.
Other regulations may be applicable, including those listed in 🗃️ List • Applicable Regulations.
Other possible roles: agent or importer.

Role of the manual and scope of the QMS

Role of the quality manual

This quality manual contains the activities undertaken by (your company name) to fulfil our commitments to our customers and the applicable regulations.

It has been written so that all parties involved (e.g. customers, staff, authorities, shareholders, suppliers) can easily understand our organisation.

Scope of the QMS

Take over the scope of your certification as defined with your Notified Body.

Example:
The QMS scope includes the activities of design, production, distribution, installation, maintenance, eliminationof (the reference or family of your devices).

ISO 13485:2016 requirements not applicable

The following table identifies the requirements of ISO 13485:2016 that are not applicable to our company and justifies these non-applicabilities :

Example:

§ Extract Justification
4.1.6 The org. shall document p… The company does not use software
6.3 As appropriate, the requi…. The company does not use ECM in its operations
6.4.1 The org. shall document the r… Environmental working conditions are not critical to the safety of employees, the outcome of their activities or products conformity
6.4.2 As appropriate, the org… Working conditions and devices do not present a contamination risk to personnel or devices
6.4.2 For sterile MDs, the org…. The device is not sterile
7.3.1 The org shall document p… Quality assurance does not cover design activities
7.3.2 The org. shall plan and c… Quality assurance does not cover design activities
7.3.3 Inputs relating to product … Quality assurance does not cover design activities
7.3.4 Design and development outputs shall… Quality assurance does not cover design activities
7.3.5 At suitable stages, systematic reviews … Quality assurance does not cover design activities
7.3.6 Design and development verification shall… Quality assurance does not cover design activities
7.3.7 Design and development validation shall… Quality assurance does not cover design activities
7.3.8 The org shall document p… Quality assurance does not cover design activities
7.3.9 The org shall document p… Quality assurance does not cover design activities
7.3.10 The org shall maintain a … Quality assurance does not cover design activities
7.5.2 The org shall document the r… Working conditions and devices do not present a contamination risk to personnel or devices
7.5.3 The org. shall document the r… The company does not offer installation activity
7.5.4 If servicing of the medical device … The company does not offer Servicing activities
7.5.5 The organization shall maintain r… The device is not sterile
7.5.6 The org. must document p… The company does not use computer software used in production, or the company does not provide services
7.5.6 Such software applications s… The company does not use computer software used in production, or the company does not provide services
7.5.6 The specific approach and… The company does not offer services
7.5.6 Records of the results and conclusion… The company does not provide services
7.5.7 The organization shall document … The device is not sterile
7.5.9.2 Particular requirements for implantable medical devices The device is not implantable
7.5.11 The org. shall protect prod… The working conditions and devices do not present a risk of contamination to personnel or devices
7.6 As necessary … The company does not use ECM in its operations
7.6 The org. shall document p… The company does not use software
8.2.6 As appropriate, records shall… The org. does not use ECM as part of its operations
8.2.6 Product release and service delivery… The company does not provide services
8.2.6 For implantable MDs, the… The device is not implantable

ISO 13485:2016 requirements excluded

Exclusions are very rare, they must be justified by the implementation of another standard.

Example :

§ Justification Standard used
7.6 Control of monitoring and measuring equipment ISO 9001 certification + legal metrology

Management commitment

Management commitments and references to evidence of implementation are summarised below :

Example :

Commitment Evidence
Ensure compliance with applicable regulatory and normative requirements Definition of the tasks of the person responsible for ensuring compliance with regulations.List of regulations followed by the company (see 📰 Watch • ISO standards) Management of Normative and Regulatory Requirements according to ▶️ Procedure • Management of Normative and Regulatory Requirements
Ensure that responsibilities and authorities are defined documented and communicated Process and activity planning (e.g. 📅 Plan • Usability Engineering)”Company organisation chart””Job cards” and “Staff cards” according to ▶️ Procedure • Human Resources Management
Ensuring the availability of resources Process and activity planning (e.g. 📅 Plan • Usability Engineering)Human resources management according to ▶️ Procedure • Human Resources ManagementInfrastructure and work environment management according to ▶️ Procedure • Infrastructure and Working Environment
Ensuring the qualification of staff with regard to responsibilities Management of human resources and training needs according to ▶️ Procedure • Human Resources Management
Maintain process adequacy and QMS effectiveness Measure and improve effectiveness: ▶️ Procedure • Measurement, Analysis and ImprovementManage non-conformities and CAPAs: ▶️ Procedure • Non-Conformities and Preventive and Corrective Actions (NC, CAPA)Management review: ▶️ Procedure • Management Reviews
Defining a policy to define and review risk acceptability criteria A general policy is given in ▶️ Procedure • Risk Management, it is adapted to each project and expressed in the planning document 📅 Plan • Risk Management ▶️ Procedure • Benefit / Risk evaluation
Ensure compliance with customer requirements Customer requirements are taken into account according to ▶️ Procedure • Customer Requirements Management.
Implement approved QMS Appropriateness of the system is demonstrated by maintaining certificates. See audit reports.

Quality policy

The quality policy must express the company’s goals, the quality objectives will be derived from this policy.

The quality policy includes :

  • Compliance with regulatory requirements,
  • Maintaining the effectiveness of the QMS, and
  • The improvement of products and activities through monitoring activities.

The quality objectives are derived from this policy.

Example :

Our Quality Management System has been defined to comply with the applicable regulatory requirements for medical devices:

  • Regulation (EU) 2017/745;
  • National regulations “XXXXXX”.

Our policy is to serve the patient, to propose innovative devices using the latest advances in (your technical branch) to be able to (summary of intended use) and thus bring (summary of patient benefits) to the patient.

The implementation of this policy is based on the quality system put in place founded on:

  • Customer satisfaction,
  • Compliance with regulatory and legal requirements,
  • Staff involvement and
  • The sustainability of the company.

Quality objectives

The objectives are derived from the policy, they are allocated to the relevant functions of the organisation and must be measurable. Your QMS must be organised to achieve these objectives.

The quality objectives are broken down by process and are associated with indicators described in the document “Table of quality objectives”.

These objectives are reviewed at each management review.See examples of indicators in ▶️ Procedure • Measurement, Analysis and Improvement.

Risk-based approach

The company applies a risk-based approach to the control of its activities. The resources implemented are proportionate to the level of risk assessed according to appropriate criteria.

This risk-based approach is detailed in the ▶️ Procedure • Risk-based approach.

Process approach

The processes are described in the “Process sheets”.

Interactions/Process mapping

Make a simple diagram of the interactions in your company, as an input: the customer’s requirements, regulations, standards… as an output: the product, related services and the regulatory file.Note that an exhaustive diagram would be very complex (not to say unreadable) as there are so many interactions between the processes.

Example:

quality manual : processmapping

Process management

The methods used to ensure the effective operation and monitoring of processes use indicators described in the “Quality Objectives Table” document and are based on, but not limited to:

Example:

  • Meetings;
  • Internal audits;
  • Management reviews; and
  • Any other useful means.

Resources

Management makes every effort to ensure the availability of resources.

These resources include :

  • Human resources, the management of which is described in ▶️ Procedure • Human Resources Management.
  • Infrastructure and working environments, the management of which is described in ▶️ Procedure • Infrastructure and Working Environment.
  • Purchases, the management of which is described in ▶️ Procedure • Purchasing Management.
  • The information necessary for the operation and monitoring of the processes is available through the documents and records managed in accordance with the ▶️ Procedure • Document Management procedure.

Outsourced processes

The outsourced processes having an impact on product conformity are monitored and controlled according to the ▶️ Procedure • Measurement, Analysis and Improvement and ▶️ Procedure • Purchasing Management.

Where applicable: arrangements are contracted with the subcontractor.

Include critical processes, i.e. related to the design of the device, manufacturing, controls and tests carried out, maintenance…

List of QMS documents

The list of QMS documents is recorded in document XXX which contains the following fields:

Example :

  • Type (procedure; review; operating mode; report; form; indicator; guide; list…);
  • Reference;
  • Title;
  • Current version;
  • Date of application;
  • Location of the original;
  • Location of copies;
  • Retention period of outdated versions;
  • Retention period of associated records;
  • Method of destruction.
You can choose to list your documents directly in the QMS, but this requires laborious updates.

Document structure

The document system is organised as follows :

  • The Quality Manual describes the Quality Management System;
  • The Procedures describe the breakdown of the process and guarantee its quality;
  • The Work Instructions and Operating Procedures describe the tasks of the process;
  • The Forms and Documents are the media used to record data;
  • The Records are used to provide evidence of conformity to requirements and effective operation of the quality management system.

quality manual : document structure

The identification of records is described in the ▶️ Procedure • Document Management.

Management review

Management reviews the QMS according to ▶️ Procedure • Management Reviews to ensure that it is still appropriate, adequate and effective.