🏥 ISO 13485
ISO 13485:2016 Medical Device Manufacturers Near Oshkosh, WI
Medical device sourcing in the Oshkosh area asks a different question than the city's heavy-equipment reputation suggests: can a shop built on severe-duty vehicle tolerances run a design-and-process-controlled quality system under ISO 13485? Wisconsin's medtech footprint pulls device work into the Fox Valley, and the precision machining and clean-assembly skills here translate well when the documentation discipline is in place. This page walks through what the standard demands and how a buyer separates a real device supplier from a general machine shop with a certificate.
ISO 13485ISO 9001
From Severe-Duty Tolerances to Device-Grade Quality Systems
The competencies that make Oshkosh suppliers good at building vehicle components, tight tolerance machining, repeatable welding, and disciplined assembly, are the same competencies a medical device contract manufacturer needs. What changes under ISO 13485 is the surrounding quality system. The standard is structured around regulatory compliance, risk management throughout the product lifecycle, and documentation that supports a device's regulatory file rather than just a buyer's incoming inspection.
That distinction is everything. A precision shop migrating into device work must add design controls where applicable, formal risk management aligned with ISO 14971, validated processes, controlled environments where the product demands them, and complaint-handling and corrective-action systems that feed back into the regulatory record. Buyers in this region benefit when a local shop already runs mature 9001 traceability, because the cleanest path to credible 13485 work is a vendor who treats documentation as a deliverable, not an afterthought.
Process Validation and Why It Governs Device Sourcing
In device manufacturing, you cannot simply inspect quality into a part. Where a process output cannot be fully verified by subsequent inspection, ISO 13485 requires validation, typically the IQ, OQ, PQ sequence: installation qualification, operational qualification, and performance qualification. This applies to machining processes that affect critical characteristics, to sterilization and cleaning, to welding and bonding, and to packaging that maintains a sterile barrier.
For a buyer, this is where you probe a prospective supplier hardest. Ask how they handle process validation, whether they maintain validation protocols and reports, and how they manage revalidation after a change. A device supplier that talks fluently about IQ/OQ/PQ, design transfer, and change control is operating a real 13485 system. One that conflates validation with a one-time first-article inspection is not ready for device work, regardless of how good its machining is. The validation discipline, more than the machine list, is what qualifies a shop for your device program.
Documentation, Device Master Records, and Traceability
ISO 13485 demands records that tie every unit back through its complete history. A capable supplier maintains the documentation that supports a device master record and produces device history records demonstrating each lot was built to specification. Expect material certifications traceable to lot and supplier, validated-process records, in-process and final inspection data, and full lot traceability that allows a recall to be bounded precisely if one is ever needed.
This traceability is not optional paperwork; it is the backbone of regulatory defensibility. When you source locally, confirm the supplier controls supplier-provided materials and components with the same rigor, because a device's traceability is only as strong as its weakest sub-tier. Request a sample lot record from a comparable job and check whether it reconstructs the full build history cleanly. If the records are complete and revision-accurate, the system will hold up under an FDA inspection or a notified-body audit. If they are patchy, the gap becomes your regulatory liability.
Frequently Asked Questions
Yes, when the shop has built the quality system to match its machining capability. The Fox Valley's precision machining and clean-assembly base, sharpened by severe-duty vehicle tolerances, gives local shops the manufacturing competence device work requires. The differentiator is the quality system. ISO 13485 demands regulatory-focused documentation, risk management aligned with ISO 14971, process validation through IQ/OQ/PQ, design and change controls, and complaint and corrective-action handling that feeds a device's regulatory record. A general machine shop can make the parts but may not run these systems. When sourcing, look for a supplier that already holds a current ISO 13485 certificate from an accredited registrar and can demonstrate validated processes and lot traceability, not just good tolerances. Shops that grew out of mature ISO 9001 operations often make the cleanest transition because they already treat documentation as a deliverable. The practical test is whether they can speak fluently to design transfer, process validation, and device history records, not merely show you their CNC capacity.
ISO 9001 is a general quality management standard focused on customer satisfaction and continual improvement, while ISO 13485 is a medical-device-specific standard focused on regulatory compliance and consistent production of safe, effective devices. Several differences matter to a buyer. ISO 13485 emphasizes maintaining the effectiveness of the system over continual improvement, requires risk management throughout the product lifecycle, mandates process validation where output cannot be verified by inspection, and imposes stricter documentation and record-retention requirements tied to regulatory expectations. It also adds specific controls around design, sterilization, cleanliness, traceability, and complaint handling that 9001 does not require. A supplier holding only 9001 has a functioning quality system but is not equipped to support a device's regulatory file. When you need device work, 13485 is not optional. That said, a shop with strong 9001 discipline is often the best candidate to add 13485, because the documentation habits transfer; the new work is in the regulatory and validation layers built on top of the existing foundation.
Expect a documentation package that supports regulatory traceability, not just a packing slip. At minimum this includes certificates of conformance referencing the exact specification and revision, material certifications traceable to the supplier and lot, in-process and final inspection records, and validated-process records demonstrating the process ran within qualified parameters. For lots where it applies, you should receive device history record evidence showing the lot was built per the device master record. Full lot traceability is essential so that any nonconformance or field issue can be bounded to a specific population for containment or recall. If the parts pass through sterilization, cleaning, or sterile-barrier packaging, those validation and lot records come too. Before awarding, ask for a sample lot record from a comparable job and confirm it reconstructs the complete build history without gaps. The strength of this documentation is what makes the supplier defensible under an FDA inspection or notified-body audit, and any gaps in their records ultimately become your regulatory exposure as the device owner.
Because in medical device manufacturing you frequently cannot inspect quality into the finished product. When a process output cannot be fully verified by subsequent measurement, ISO 13485 requires the process itself to be validated, proven to consistently produce conforming results. The standard sequence is installation qualification, operational qualification, and performance qualification, IQ/OQ/PQ, which establishes that equipment is installed correctly, operates within specified parameters, and performs reliably over time under production conditions. This applies to critical machining characteristics, welding and bonding, cleaning, sterilization, and sterile-barrier packaging. The reason it dominates device sourcing decisions is that validation, not inspection, is the primary evidence of quality for these processes. A supplier that maintains validation protocols and reports and manages revalidation after changes is operating a genuine device quality system. One that treats a single first-article inspection as equivalent to validation is not ready for device work. When evaluating a local supplier, their fluency with validation is a stronger qualifier than their equipment list.
Last updated: July 2026
Find ISO 13485-Certified Manufacturers in Oshkosh, WI
Search verified Oshkosh shops that hold ISO 13485.
No logins. No email gates. Just results.