🏥 ISO 13485
ISO 13485:2016 Medical Device Manufacturers in Provo, UT
A device that touches a patient carries a documentation burden the part itself never reveals, and that burden starts with your supplier's quality system. ISO 13485:2016 is the medical device QMS standard that lets a Provo contract manufacturer participate in regulated device supply chains, from injection-molded housings to machined surgical instruments to additively printed anatomical fixtures. Utah's device cluster has made the certificate common among local suppliers, but the depth behind it varies. This page walks a Provo medtech buyer through verification, records, and the traps specific to sourcing device components in Utah County.
ISO 13485ISO 9001ISO 14001
Provo's role in Utah's medical device supply chain
Utah carries one of the denser medical device clusters in the Mountain West, and Provo's contribution sits largely on the component and contract-manufacturing side: precision machining of instrument and implant-adjacent parts, injection molding of housings and disposables, and a growing additive-manufacturing footprint serving patient-specific and prototype device needs. The Silicon Slopes corridor's mix of engineering talent and capital has pulled device startups and their suppliers into the same geographic orbit.
For a buyer, that proximity means you can qualify and audit a Provo supplier with far less friction than a remote one, which matters in medical sourcing where supplier audits are not optional. ISO 13485:2016 is the standard that governs whether that supplier can be folded into your device's quality system at all.
The key distinction from ISO 9001: 13485 is purpose-built for regulated medical products. It removes 9001's emphasis on continual improvement in favor of maintaining a documented, validated, regulation-aligned system. It adds explicit requirements for risk management throughout the product realization process, design and development controls, cleanliness and contamination control, and the records that prove a specific device was built right, the device history record.
Verifying a Provo supplier's 13485 certificate and its scope
Confirm the certificate the same disciplined way you would any QMS credential: check the registrar, the accreditation mark, the certificate number, and the issue and expiry dates against the certification body's directory or IAF CertSearch rather than a forwarded PDF. ISO 13485 runs the same three-year cycle with annual surveillance audits, so ask when the last surveillance closed.
Then read the scope hard. A Provo molder might be certified for 'injection molding of medical device components' but not for any assembly, packaging, or sterilization support, so if you need those value-add steps the certificate may not cover them. For machined parts, confirm the scope names the materials and processes you're placing. Scope mismatch is the quiet way a supplier ends up doing regulated work outside what an auditor ever assessed.
A critical nuance: ISO 13485 certification is not the same as FDA registration or clearance. A Provo supplier can be 13485-certified and still need to be an FDA-registered establishment depending on its role in your device's supply chain. Clarify early whether your supplier needs to be registered with FDA, and whether your quality agreement obligates them to maintain it. Treat 13485 as the QMS baseline and FDA registration as a separate, parallel question.
Risk management, validation, and the records you'll need
ISO 13485 ties product realization to risk management aligned with ISO 14971, so a qualified Provo supplier should understand how their process risks feed your device risk file. For molded and machined parts, that shows up as validated processes: IQ, OQ, and PQ documentation proving the molding or machining process produces conforming parts repeatably, not just that a single sample passed.
The records package on a medical lot is heavier than on commercial work. Expect a device history record (DHR) or equivalent lot documentation tying the build to the device master record, material certs with full traceability by lot, certificates of conformance, and inspection data against the controlled drawing. For sterile-pathway components, cleanliness and bioburden controls should be documented. Any nonconformance should arrive with a documented disposition under the supplier's CAPA system, never a silent rework.
Design controls come into play if the Provo supplier contributes to design, common with contract manufacturers who help develop a molded housing or a printed fixture. In that case the supplier's design and development records, including design inputs, verification, and validation, become part of your regulatory file. Make sure your quality agreement spells out who owns the design history file and how changes are controlled.
Frequently Asked Questions
No, and conflating the two is a common and costly mistake. ISO 13485:2016 certifies that a supplier operates a medical-device quality management system audited by an accredited certification body. FDA establishment registration is a separate regulatory action, a manufacturer registers with FDA and lists the devices it handles, which is required for certain roles in a US device supply chain. A Provo contract manufacturer can be ISO 13485-certified yet not FDA-registered, or registered but with a quality system you still need to audit. Whether your supplier needs FDA registration depends on what they do for your device: a shop that machines a component to your spec may sit in a different regulatory position than one that manufactures or assembles a finished device. Clarify this early in qualification and capture it in your quality agreement, specifying whether the supplier must maintain FDA registration, comply with 21 CFR 820 (the Quality System Regulation, now harmonizing toward 13485 under QMSR), and how they'll support your regulatory submissions. Treat 13485 as the QMS foundation and FDA registration as a distinct, parallel requirement you verify separately.
A device history record (DHR) is the documentation that demonstrates a specific device or lot was manufactured in accordance with its device master record, the controlled specification for how the device is built. For a Provo supplier producing components or finished devices under ISO 13485, the DHR or equivalent lot record should tie the physical product back to the approved drawing and revision, the materials used (with lot traceability), the process parameters and validations applied, the inspection results, and the identity of who performed and approved each step. Whether you receive a full DHR or a component-level lot record depends on the supplier's role, a shop molding a housing to your print provides lot documentation and certs of conformance, while a contract manufacturer assembling a finished device maintains the complete DHR. Either way, the records must be retrievable and traceable, because in a recall or adverse-event investigation that traceability is what lets you isolate affected product. When qualifying a Provo supplier, confirm in your quality agreement exactly what lot documentation accompanies each shipment and how long records are retained, since medical retention requirements often extend well beyond commercial norms.
The strongest reason is audit and qualification friction. Medical device sourcing requires supplier audits, both initial qualification and periodic re-audits, and those are far easier to execute when the supplier sits a short drive away in Utah County rather than across the country. You can walk a Provo molder's floor, witness a process validation run, review their CAPA records in person, and build the supplier relationship that regulated supply chains depend on, all without the cost and scheduling burden of national travel. Provo's position in Utah's medical device cluster also means local shops are fluent in 13485 expectations, contamination control, and lot traceability, so you spend less time educating a supplier on medical requirements. Proximity shortens the prototype-to-production loop for device startups iterating on a molded or printed component, and keeps freight fast and cheap inside the Wasatch Front. The tradeoff is specialized capacity: some sterile processing, certain implant-grade materials, or high-volume molding lines may be deeper in national markets. The common answer is to source machining, molding, and additive work locally while confirming which downstream steps like sterilization route out, and auditing that flow-down.
Both are quality management system standards and ISO 13485 shares much of 9001's structure, but 13485 is purpose-built for regulated medical devices and the differences are practical, not cosmetic. ISO 13485 strips out 9001's emphasis on continual improvement and customer satisfaction metrics in favor of establishing and maintaining a documented, validated quality system aligned with medical device regulations. It adds explicit, mandatory requirements that 9001 leaves general: risk management woven throughout product realization (aligned with ISO 14971), design and development controls, process validation with documented IQ/OQ/PQ, cleanliness and contamination control, traceability requirements suited to recall scenarios, and the device-specific records like the device master record and device history record. For a Provo supplier, this means a 13485-certified shop has built its molding, machining, or additive processes around demonstrable validation and traceability rather than general conformance. A 9001-certified Provo shop has a solid quality foundation but has not been audited against medical-specific requirements, so for any component going into a regulated device, you want 13485, with the certificate scope covering your exact process and material.
For a molded medical component, the documentation package should prove both that the part conforms and that the process producing it is validated and controlled. Expect a certificate of conformance tying the lot to your purchase order and the controlled drawing revision; material certifications traceable by resin lot, with the specific medical-grade resin and any additives identified; and dimensional inspection data against the critical characteristics on the print. Because molding is a process whose output depends heavily on parameters, a qualified Provo molder should be able to show process validation documentation, IQ, OQ, and PQ records demonstrating the molding process repeatably produces conforming parts within the validated parameter window, not just that one shot passed inspection. For components on a sterile pathway, cleanliness and bioburden controls should be documented. Any nonconforming material should be dispositioned through the supplier's CAPA system with traceable paperwork. If the part feeds a higher-risk device, you may also need the lot-level device history record content and confirmation that mold or process changes are controlled under the supplier's change-control procedure, since an uncontrolled tooling change can invalidate a validation.
Last updated: July 2026
Find ISO 13485-Certified Manufacturers in Provo, UT
Search verified Provo shops that hold ISO 13485.
No logins. No email gates. Just results.