SIALCRAFT
Back to Journal
August 14, 2026Issa Mughal

ISO 13485 vs CE MDR vs FDA: A Distributor's Compliance Guide

What ISO 13485, CE marking under EU MDR, and FDA registration each actually cover - and how distributors verify a surgical instrument supplier's compliance claims.

SIALCRAFT

ISO 13485 certifies a manufacturer's quality management system, not any individual device. CE marking under EU MDR 2017/745 concerns a device's conformity for the European market. FDA registration and listing concern a manufacturer's obligations for the US market, and are separate from 510(k) clearance - which many Class I hand-held instruments are exempt from. The three are not interchangeable, and a supplier holding one does not hold the others.

Distributors carry real legal obligations of their own under these frameworks. Understanding what each credential covers is not academic - it determines what you can lawfully place on your market, and what you are liable for when something goes wrong.

This article explains the structure of these frameworks, not legal advice. Regulations are amended, transition periods shift, and national requirements vary. Confirm current requirements with the relevant authority or a qualified regulatory professional before acting.

ISO 13485: what it certifies, and what it does not

ISO 13485:2016 is a standard for a quality management system for medical devices. Certification means an accredited body has audited the manufacturer's processes and found them documented, controlled and consistently applied - covering design control where applicable, purchasing, production, traceability, complaint handling and corrective action.

What it does not mean:

  • It does not certify any individual device as safe or fit for a market.
  • It does not grant market access to the EU, US or anywhere else.
  • It does not transfer to a supplier's partners or subcontractors.

Three details to check on any certificate:

  • Legal entity name - it must be the entity invoicing you, not an affiliated "partner factory".
  • Scope - it must cover the device types you are buying. A scope limited to dental instruments does not cover orthopaedic ones.
  • Validity and surveillance - certificates expire and depend on passing surveillance audits.

Note also that ISO 9001 is not a substitute. It is a general quality standard without the medical-device-specific requirements around risk management, traceability and regulatory reporting. Suppliers occasionally present one as though it were the other.

CE marking under EU MDR 2017/745

The EU Medical Device Regulation governs placing devices on the European market. Devices are risk-classified, and the classification determines the conformity assessment route.

Most simple hand-held surgical instruments fall into Class I, the lowest risk class, which the manufacturer may generally self-declare. But Class I has sub-categories, and this is where suppliers most often misstate their position:

ClassMeaningNotified body involvement
Class ILow risk, non-sterile, non-measuring, not reusable surgicalNone - self-declaration
Class IrReusable surgical instrumentsRequired, limited to reprocessing aspects
Class IsSupplied sterileRequired, limited to sterility aspects
Class ImWith a measuring functionRequired, limited to metrological aspects

Class Ir is the category that matters most for surgical instruments, and it is a genuine change MDR introduced over the old Medical Devices Directive. Reusable surgical instruments now require a notified body to assess the aspects relating to reprocessing - cleaning, disinfection, sterilisation, maintenance and functional testing.

A supplier describing reusable forceps or scissors as plainly self-declared Class I, with no notified body involvement at all, is describing the pre-MDR position. That is worth probing carefully.

Other MDR obligations to confirm

  • EU Authorised Representative - manufacturers outside the EU must appoint one, named on the documentation.
  • Declaration of Conformity - a specific document naming the device, the manufacturer and the legislation applied. Ask for it by name.
  • UDI - unique device identification requirements apply, with device registration in EUDAMED.
  • Technical documentation - the manufacturer must hold it and make it available to authorities on request.
  • PRRC - manufacturers must have a person responsible for regulatory compliance.

FDA: registration, listing and the 510(k) question

US requirements are structured differently, and the terminology is where most errors occur.

Establishment registration and device listing are obligations on the manufacturer: foreign establishments exporting to the US must register, list their devices, and designate a US agent. This is an administrative obligation, renewed annually.

510(k) premarket notification is a separate matter and applies by device. Many simple, well-established Class I hand-held instruments are 510(k)-exempt, meaning no premarket submission is required - though general controls, including registration and listing, still apply.

Three phrases that are not interchangeable:

PhraseWhat it actually means
"FDA registered"The establishment is listed in FDA's database. It is an administrative filing, not an endorsement or a quality assessment.
"FDA cleared"A 510(k) submission was reviewed and found substantially equivalent to a predicate device.
"FDA approved"Reserved for premarket approval, generally the highest-risk Class III devices. Almost never correct for a hemostat.

A supplier advertising "FDA approved surgical forceps" is either careless with terminology or hoping you will not know the difference. Neither is reassuring. Note also that FDA registration listings are public and searchable - which makes this claim easy to verify.

The three frameworks side by side

ISO 13485CE / EU MDRFDA
Applies toThe quality systemThe deviceEstablishment and device
Grants market accessNoYes, for the EUYes, for the US
Issued byAccredited certification bodyManufacturer, with notified body where requiredManufacturer files with FDA
Verifiable howCertification body databaseDeclaration of Conformity, notified body certificatePublic FDA registration and listing databases
ExpiresYes, with surveillance auditsCertificates have validity periodsRegistration renewed annually

A seven-step supplier verification protocol

  • 1. Request specifics - certificate number, issuing body, and the exact legal entity name on each credential.
  • 2. Verify at source - check the certification body's database and the FDA's public databases directly. Never accept a certificate image as proof; images are trivially forged.
  • 3. Check the scope - confirm it covers your device category, not merely the supplier's broader activity.
  • 4. Check dates - confirm current validity and surveillance status.
  • 5. Request the Declaration of Conformity by name, for the specific devices you are buying.
  • 6. Confirm the entity matches - the name on the certificate must be the name on your invoice.
  • 7. Clarify Class Ir status for reusable instruments, and ask which notified body was involved.

Your own obligations as a distributor

This is the part distributors most often overlook. Under EU MDR, distributors and importers are "economic operators" with defined duties - including verifying that devices they handle carry the CE marking and required documentation, maintaining traceability records, cooperating with authorities, and acting on devices they believe to be non-conforming.

Critically, if you place a device on the market under your own name or brand, you may assume the legal obligations of a manufacturer. Private labelling is not merely a commercial decision - it can shift regulatory responsibility onto you. Understand that before you commission branded instruments. Our procurement and regulatory consulting service exists largely to work through this question with distributors.

Common misrepresentations to watch for

  • ISO 9001 presented as equivalent to ISO 13485.
  • A certificate in a partner factory's name, not the supplier's.
  • Certificate scope that excludes the devices you are buying.
  • Expired certificates, or ones with lapsed surveillance.
  • "FDA approved" applied to Class I exempt instruments.
  • Reusable surgical instruments described as self-declared Class I with no notified body.
  • CE marking asserted with no Declaration of Conformity available.

Browse our wholesale catalog or request documentation for any instrument in the range.

Frequently asked questions

Does ISO 13485 certification mean a device is CE marked?+

No. ISO 13485 certifies a manufacturer's quality management system, while CE marking concerns a specific device's conformity with EU legislation. A manufacturer can hold ISO 13485 certification without any of its devices being CE marked, and the two are assessed separately.

What is Class Ir under EU MDR?+

Class Ir covers reusable surgical instruments under EU MDR 2017/745. Unlike plain Class I devices, which the manufacturer may self-declare, Class Ir requires notified body involvement limited to the aspects relating to reprocessing - cleaning, disinfection, sterilisation, maintenance and functional testing.

Is 'FDA approved' correct for surgical forceps?+

Almost never. FDA approval generally applies to high-risk Class III devices via premarket approval. Many simple hand-held surgical instruments are Class I and 510(k)-exempt, requiring establishment registration and device listing rather than approval or clearance. The correct term is usually 'FDA registered' or 'listed'.

How do I verify a supplier's ISO 13485 certificate is genuine?+

Request the certificate number and issuing certification body, then verify it directly in that body's public database rather than relying on a supplied image. Confirm the legal entity name matches the company invoicing you, the scope covers your device category, and the certificate is currently valid with surveillance audits up to date.

What documents should accompany CE marked surgical instruments?+

Expect a Declaration of Conformity naming the specific devices and the legislation applied, the manufacturer's details including an EU Authorised Representative where the manufacturer is outside the EU, and where notified body involvement applies, the relevant certificate. Traceability information and UDI details should also be available.

Do distributors have regulatory obligations of their own?+

Yes. Under EU MDR, distributors and importers are economic operators with defined duties including verifying CE marking and documentation, maintaining traceability records, and cooperating with authorities. If you place devices on the market under your own brand, you may assume the legal obligations of a manufacturer.


Ready to procure precision?

Explore our B2B wholesale catalog.

View Catalog
Quick Inquiry (WhatsApp)