Resource
FDA QMSR transition: from 21 CFR Part 820 to ISO 13485
The FDA's Quality Management System Regulation (QMSR) aligns the United States with ISO 13485:2016 by incorporating the standard by reference and retaining a small set of FDA-specific requirements. For most manufacturers the work is not a new QMS — it is re-baselining an existing one so every record traces to the standard.
What changes
The five shifts that drive most of the work
ISO 13485:2016 incorporated by reference
The QMSR replaces most of the Quality System Regulation's own requirements by incorporating ISO 13485:2016 by reference, with additional FDA-specific requirements layered on top. The standard becomes the primary text your QMS is written against.
Risk management moves to the centre
ISO 13485 applies risk-based thinking across the whole QMS, not only to design. Expect to show how risk drives supplier controls, process validation, complaint evaluation and change control — not just your ISO 14971 file.
Terminology alignment
Familiar Part 820 language changes. The Device Master Record and Device History Record concepts are expressed through the medical device file and records of production, and 'management with executive responsibility' becomes 'top management'.
Retained FDA-specific requirements
FDA keeps its own requirements for labelling and packaging controls, complaint handling that may involve reporting, and record availability for inspection. Alignment is not a wholesale substitution.
Inspections change shape
The QSIT subsystem approach gives way to an inspection method built around the incorporated standard. Your evidence needs to be traceable to clauses, not only to Part 820 subparts.
How to prepare
A transition sequence that survives an audit
Do the mapping before the rewriting. Most failed transitions are rewrites without traceability.
- 1Map every procedure, form and record type to the ISO 13485:2016 clause it now satisfies, and flag the gaps.
- 2Rewrite the quality manual and top-level procedures against the standard's structure, keeping the retained FDA-specific requirements explicit.
- 3Re-baseline your risk management so QMS processes reference risk outputs, not only design risk files.
- 4Update terminology consistently across documents, records, training material and templates — partial renaming creates audit findings.
- 5Re-train affected personnel and capture the training records against the revised documents.
- 6Run an internal audit and management review against the new baseline before an external assessment.
Where Qevatrix fits
Built on the ISO 13485 spine already
QualityOS models document control, CAPA, nonconformance, complaints, supplier management, training and internal audit against ISO 13485:2016, with 21 CFR Part 11 electronic signatures and an append-only audit trail on every regulated record. RegulatoryOS carries the same spine into submission and registration evidence, so the same controlled records support an FDA inspection, an EU MDR technical file and an MDSAP audit.
Because the data model is clause-aware rather than subpart-aware, a QMSR re-baseline is a mapping and documentation exercise inside the system — not a migration.
This guide is an orientation for quality and regulatory teams and is not regulatory advice. Confirm requirements and applicable dates against the FDA's published rule and the current edition of ISO 13485 before acting.