ISO 13485 for silicone molders — a buyer's reading guide
An ISO 13485 certificate on the wall is a starting point, not a guarantee. The standard is generic across medical devices; what matters is the **scope statement**, which names the device categories and processes the QMS actually covers. A supplier with ISO 13485 covering "plastic injection molding of Class I devices" is not the same as one covering "silicone molding of Class II implantable components". This page explains how to read the certificate and what to ask if you cannot.
What ISO 13485 certifies
ISO 13485 is a stand-alone QMS standard, derived from ISO 9001 but with much heavier emphasis on:
Document control. Every drawing revision, every process change, every compound substitution has a paper trail that survives staff turnover. The auditor will pull five random change-control records and trace them through design, production, inspection and release.
Risk management. The standard requires the supplier to apply ISO 14971 risk management to the products they ship. A silicone molder producing Class II devices needs to maintain a risk-management file per product family, not a generic risk register.
Design and development. If the supplier does design work (DFM feedback, tooling design), the QMS must cover design controls — design inputs, design outputs, design reviews, design verification, design validation, design transfer.
Process validation. Any process whose output cannot be fully verified by subsequent inspection must be validated. For silicone molding, this usually means a PPAP-style initial process validation (IQ / OQ / PQ) on each new tool, then ongoing statistical process control.
Corrective and preventive action (CAPA). Customer complaints, internal non-conformances and audit findings must feed into a CAPA system that prevents recurrence. The auditor will sample three to five closed CAPAs and verify the actions actually happened.
What the scope statement should say
A useful scope statement reads something like:
"The design and manufacture of liquid silicone rubber (LSR) and high-consistency rubber (HCR) molded components for Class I and Class II medical devices, including respiratory interfaces, infusion system sub-components, sealing gaskets and catheter balloons. Production covered: LSR injection molding, HCR transfer molding, in-line deflashing, post-cure, and final packaging in ISO Class 8 cleanroom."
Notice three things it names:
The processes (LSR injection, HCR transfer, deflashing, post-cure, cleanroom packaging). A scope that says only "manufacture of molded components" is too vague — you cannot tell whether the audit actually covered the process that makes your part.
The device classes (Class I, Class II). If your part is Class II, the scope must explicitly include Class II.
The product types (respiratory interfaces, infusion components, gaskets, balloons). These are the device families the certifying body sampled during the audit. A supplier whose scope says "medical devices" without naming device categories has not been audited on the specific part family you are buying.
If you cannot get a scope statement, ask which notified body issued the certificate (TÜV SÜD, BSI, DNV, DEKRA) and look up the certificate number directly. Most notified bodies publish a searchable register.
What an FDA / EU MDR auditor looks for
| Auditor action | What it tells you | Red flag if missing |
|---|---|---|
| Pulls your part's lot number | Traceability must go back to raw compound batch | Supplier cannot name the compound batch in <24h |
| Asks for the DMR (Device Master Record) | Design output is documented and controlled | DFM memo is informal, no revision control |
| Pulls a process validation record | Critical processes are statistically controlled | No PPAP or IQ / OQ / PQ on file for this part |
| Asks for the last CAPA | Closed-loop improvement, not just complaint logging | Open CAPAs >90 days with no action |
| Asks for the change-control log | Material, tool and process changes are reviewed | Compound changed without customer notification |
| Pulls the calibration records | Measurement equipment is traceable | Last calibration >12 months ago on a critical gauge |
| Asks for the cleanroom monitoring data | ISO 14644-1 class is maintained, not just declared | No particle count logs for the production week |
How to verify a certificate before signing a supply agreement
Before you commit the drawing, do four things:
1. Ask for the full certificate, not a summary. A one-page summary does not show the scope statement, the issue date, the expiry date, the certifying body and the certificate number. The full certificate is a PDF you can verify.
2. Look up the certificate number on the certifying body's website. TÜV SÜD, BSI, DNV and DEKRA all maintain public registers. If the number does not resolve, the certificate is fake or expired.
3. Ask for the most recent audit report (or at least the executive summary). An ISO 13485 audit happens annually. Major non-conformances (those that would have suspended the certificate) must be closed before the certificate reissues. Minor non-conformances are tracked; ask what is open.
4. Visit the facility before signing. A one-day audit by your own QA team is cheaper than a recall. Check the cleanroom monitoring logs, the calibration records, the change-control log and the CAPA backlog with your own eyes.
A supplier that refuses any of these four is one whose certificate is not worth the paper it is printed on.
FAQ — ISO 13485 for silicone molders
Is ISO 13485 the same as ISO 9001?
No. ISO 13485 is derived from ISO 9001 but is its own standard, with much heavier requirements on document control, design controls, process validation, risk management and CAPA. ISO 9001 is general; ISO 13485 is specific to medical devices.
Does the supplier need ISO 13485 even for a Class I device?
For the EU MDR market, yes — Class I devices still require ISO 13485 certification of the manufacturer. For the U.S. FDA market, ISO 13485 is not strictly required for Class I, but most large OEMs require it as a contractual matter.
How long is an ISO 13485 certificate valid?
Three years for the certification cycle, with annual surveillance audits in years 2 and 3. A certificate with no surveillance audit in the past 12 months has effectively lapsed.
Does ISO 13485 cover the raw material supplier?
Indirectly. The molder must qualify and re-qualify the raw compound under their own QMS, and must audit critical raw-material suppliers on a risk basis. The raw-material supplier themselves do not need ISO 13485, but their quality system must meet the molder's supplier qualification requirements.