🏥 ISO 13485

ISO 13485:2016 and Medical Additive Manufacturing: Sourcing Printed Devices and Implants

Patient-matched implants and surgical guides made the case for additive in medicine, but a printed device that touches tissue or bone lives under a regulatory regime that does not care how elegant the lattice is. ISO 13485:2016 is the quality system standard that medical device regulators around the world recognize, and for a 3D printed device it governs everything from the powder lot to the sterilization validation. Here is how the standard actually lands on an additive medical supplier and what you must hold them to.

ISO 13485ISO 9001ISO 14001

How ISO 13485:2016 Governs a Printed Medical Device

ISO 13485:2016 shares structure with ISO 9001 but is built for regulated medical manufacturing, and several of its clauses are decisive for additive. Clause 7.3 (design and development) imposes design controls with documented inputs, outputs, verification, validation, and a design history file, which for patient-matched additive devices is where the per-patient design workflow must be controlled, including the software that converts imaging data into a build file. Clause 7.5.6 (validation of processes for production) mandates validation of any process whose output cannot be verified by later inspection, and a powder bed build is the textbook case: porosity and incomplete fusion are not visible on a finished implant. Clause 7.5.7 adds a specific requirement to validate sterilization and sterile barrier processes, which matters because additive lattice structures and internal channels are hard to clean and sterilize, and residual powder trapped in a porous structure is a real contamination risk. The shop must validate cleaning and depowdering as a controlled process, not an afterthought. Clause 7.5.9 (traceability) is stricter than ISO 9001, requiring records that allow a device to be traced back through its components and processing, and for implantable devices the traceability requirements are heightened so a specific implant can be tied to its powder lot, build, and post-processing. Risk management runs through the whole standard via the link to ISO 14971, so the additive process risks, including powder reuse effects on material properties, build orientation effects on strength, and trapped powder, must be analyzed and controlled within the device risk file rather than treated as shop-floor lore.

The Regulatory Web Behind the Certificate

ISO 13485 is rarely the only thing in play. In the United States, an additive medical manufacturer typically operates under FDA 21 CFR Part 820, the Quality System Regulation, and ISO 13485 is closely harmonized with it, especially as FDA transitions toward the Quality Management System Regulation that aligns with 13485. The FDA has issued additive-specific guidance (the technical considerations for additive manufactured medical devices) covering design, process validation, material controls, and testing, and a serious additive medical shop will reference it. For the European market, ISO 13485 underpins conformity under the EU MDR, and the notified body will expect the additive process to be validated and the device technical documentation to reflect it. For implants, biocompatibility under ISO 10993 governs the materials and any residuals from printing and post-processing, which is why trapped powder and cleaning validation are not paperwork exercises. The common medical additive materials, titanium Ti-6Al-4V ELI (extra low interstitial, Grade 23) for orthopedic and dental implants, cobalt-chrome for certain implants and dental frameworks, and biocompatible polymers like PEEK and certain photopolymers for surgical guides, are chosen as much for their biocompatibility data as their mechanical behavior. The certificate confirms a system; the regulatory pathway confirms the device is allowed to exist.

Verifying the Cert and the Records You Must Receive

ISO 13485 certificates are issued by accredited certification bodies, so confirm the body is accredited (ANAB, BSI, TUV, DEKRA and similar) and verify the certificate in the body's registry or via the IAF database, checking that the scope names medical device manufacturing and, ideally, additive or the relevant process and product class. A scope limited to 'distribution' or 'machining of components' does not cover printing finished devices. Confirm currency against the three-year cycle with annual surveillance, and for EU market access check whether the supplier also holds the notified-body certification relevant to your device class. The records that should arrive with a medical additive job go beyond a generic CofC. Expect the device master record references, material certification tracing the powder or resin lot to its biocompatibility and chemistry, the build and post-processing records, cleaning and depowdering validation evidence applicable to the lot, sterilization validation or the sterilization indicator records if the shop sterilizes, and dimensional and any mechanical or density inspection you specified. For implantable devices, the heightened traceability means you should be able to tie a serial-controlled device to its full processing history. If the supplier cannot produce design control and validation evidence, the certificate is not being applied to your product the way the standard requires.

Frequently Asked Questions

ISO 13485 is a quality system certification, not a market authorization. It demonstrates the manufacturer has a compliant quality system, but it does not by itself permit you to sell a device. In the United States you still need the appropriate FDA pathway for the device class, which for most additive devices means 510(k) clearance, De Novo, or PMA depending on risk, and the manufacturer must comply with 21 CFR Part 820. The FDA's additive manufacturing guidance further shapes how you validate the process and characterize the material. In the EU you need conformity under the EU MDR with notified-body involvement for higher-risk classes, and ISO 13485 is the quality system foundation that conformity assessment relies on. So ISO 13485 is necessary infrastructure but not the green light. When you source a printed device, confirm both that the contract manufacturer holds ISO 13485 with a scope covering your process and product, and that the regulatory clearance for the finished device exists or is being pursued through the correct pathway.
Because powder bed and many polymer additive processes build parts surrounded by loose feedstock, and complex medical geometries like porous lattices, internal channels, and roughened bone-ingrowth surfaces are exactly the features that trap residual powder. Under ISO 13485 Clause 7.5.6 and the biocompatibility requirements of ISO 10993, any residual material that could contact tissue is a contamination and toxicity risk that must be controlled and validated, not assumed away. A trapped-powder failure on an implant can cause an immune response or particulate release, which is why the cleaning and depowdering process must be validated as a special process with defined parameters, verified effectiveness, and records per lot. This is genuinely hard on lattice implants, and it is where a strong additive medical shop separates itself: they have validated cleaning protocols, often including ultrasonic and chemical steps, and they verify cleanliness with defined acceptance criteria. When vetting a supplier, ask specifically how they validate depowdering and cleaning for your geometry and how they document it per lot, because a generic 'we clean the parts' answer is a red flag for a regulated device.
The split tracks biocompatibility and load. For implantable, load-bearing devices the metals dominate: titanium Ti-6Al-4V ELI, the extra-low-interstitial Grade 23, is the workhorse for orthopedic and spinal implants because its low oxygen content gives better ductility and fracture resistance, and cobalt-chrome alloys appear in certain implants and dental frameworks. These are chosen for their long biocompatibility track record under ISO 10993 as much as their strength, and the additive process must preserve those properties through controlled powder reuse, build orientation, and post-processing including HIP and heat treatment. For non-implantable, short-contact devices like patient-matched surgical guides and anatomical models, biocompatible polymers are typical: PEEK for durable instrument-class parts, and medical-grade photopolymers or nylons cleared for limited tissue contact and steam or other sterilization. The material choice drives the validation burden, so when you source, confirm the shop has the specific medical-grade feedstock with biocompatibility documentation for your contact category and duration, not just a generic version of the same polymer or alloy.
They share a common structure but diverge on the requirements that protect patients. ISO 13485 mandates formal design controls with a design history file under Clause 7.3, which for patient-matched additive devices governs the per-patient design and the software that converts imaging into build files; ISO 9001 has no equivalent. ISO 13485 requires validation of sterilization and sterile barrier processes (7.5.7) and heightened traceability for implantable devices (7.5.9), neither of which ISO 9001 demands. It is tightly linked to risk management via ISO 14971 and to regulatory requirements, so the standard expects the quality system to satisfy applicable medical device regulation. Practically, ISO 13485 is also less about continual improvement language and more about maintaining effectiveness and meeting regulatory obligations. For a printed surgical guide, jig, or implant, ISO 13485 is the relevant credential; ISO 9001 alone is inadequate because it does not require the design controls, sterilization validation, and traceability that a medical device needs. A shop printing industrial parts can live on ISO 9001, but a medical device contract manufacturer must hold ISO 13485 with a scope that covers the additive process.
Start with the scope statement on the certificate, which must name medical device manufacturing and ideally the additive process and the product type or device class you need; a scope reading 'distribution of medical devices' or 'machining of metallic components' does not authorize a contract manufacturer to build your printed device. Confirm the certification body is accredited, such as BSI, TUV, DEKRA, or an ANAB-accredited body, and verify the certificate in the body's registry or through the IAF database rather than trusting the PDF, checking that it is active within the three-year cycle and annual surveillance. For EU market access, separately confirm any notified-body certification appropriate to your device class, because ISO 13485 alone does not cover MDR conformity. Then go past the certificate: ask for evidence the additive process is validated, the cleaning and depowdering is validated for your geometry, and the material carries biocompatibility documentation. ManufacturingBase lets you filter ISO 13485 additive suppliers by capability and location, but for a regulated device always pull the live registry record and review the supplier's process validation and design control evidence before committing.

Last updated: July 2026

Find ISO 13485-Certified 3D Printing / Additive Manufacturing Suppliers

Search verified 3d printing / additive manufacturing shops that hold ISO 13485.

No logins. No email gates. Just results.