🏥 ISO 13485

ISO 13485:2016 Medical Device Manufacturers in San Jose, CA

A medical-device company in San Jose can prototype a part anywhere, but the moment that part touches a regulated device, the supplier's quality system becomes part of your own compliance footprint. ISO 13485:2016 is the standard that lets a South Bay device team flow machining, molding, or assembly to an outside shop without inheriting an FDA finding, and sourcing it well takes more scrutiny than a commercial buy.

ISO 13485ISO 9001

The South Bay Device Ecosystem and Why 13485 Is Non-Negotiable

The corridor running through San Jose, Sunnyvale, and Santa Clara hosts an extraordinary concentration of medical-device companies: cardiovascular and structural-heart firms, surgical-robotics players, minimally invasive and endoscopy groups, and a wave of diagnostics and wearable startups. These companies design locally and need a supply base that can machine implant-grade titanium, mold biocompatible polymers, and assemble to device-grade cleanliness without becoming a regulatory liability. ISO 13485:2016 is what bridges that gap. Unlike ISO 9001, it is purpose-built for the medical-device life cycle, with hard requirements around design and development controls, risk management aligned to ISO 14971, validation of processes whose output can't be fully verified, and the maintenance of device master records and device history records. For an FDA-regulated finished-device manufacturer, a supplier's 13485 certification is a key input to supplier qualification under 21 CFR 820 (now harmonizing toward QMSR). The practical consequence in San Jose is that a buyer can't treat a medical part like a semiconductor bracket. The same shop might do both, but the medical work runs under a stricter regime, and the buyer is responsible for confirming the supplier's QMS actually covers it.

Qualifying a Supplier: Scope, Validation, and the Quality Agreement

Start with the certificate, but don't stop there. Confirm the registrar is accredited and the certificate is current within its three-year cycle with surveillance audits completed. Read the scope so it explicitly covers your process for medical devices, whether that's precision machining, injection molding, or cleanroom assembly. A scope that says 'machining of components' without medical-device language is weaker than one naming medical-device manufacturing directly. The step commercial buyers skip and medical buyers can't is process validation. For processes whose results you can't fully inspect, like injection molding, welding, bonding, sterilization-affecting steps, or cleaning, ISO 13485 requires validation (IQ/OQ/PQ). Ask the supplier to show their validation approach and a sample protocol. A molder who can't talk fluently about OQ windows and PQ runs is not a medical molder yet. Finally, a quality agreement is mandatory practice, not optional. It defines who owns design controls, how changes are controlled and communicated (no quiet process or material substitutions), how nonconformances and complaints are handled, and what records the supplier retains and for how long. In a regulated supply chain, the quality agreement is as important as the PO.

Records That Protect You in an FDA Audit

When an FDA investigator examines your device, the trail has to be continuous through your suppliers. From a 13485 supplier, expect a certificate of conformance tied to your PO and revision, full material traceability with mill certs or resin lot certs, and inspection records covering your specified characteristics. For molded parts, that includes documentation of process parameters and any validated settings. Lot and date-code traceability is essential because medical recalls turn on the ability to identify exactly which units contain a suspect lot. The supplier should be able to trace a finished lot back through every raw material and sub-process. Where sterilization or biocompatible materials are involved, certificates of analysis and supplier-of-record documentation matter for your regulatory submissions. Change control is the records area that bites unprepared buyers. Under your quality agreement, the supplier cannot change material grade, tooling, sub-tier processors, or process parameters on a validated process without notifying you and, where required, supporting revalidation. Confirm during qualification that the supplier has a change-notification process and a recent example you can review.

Local Proximity Versus Cost on Regulated Programs

Bay Area medical suppliers carry premium pricing, and on a regulated program that premium compounds because validation, documentation, and quality-agreement maintenance all add cost beyond raw machine time. For a device company weighing local versus out-of-state or offshore sourcing, the math is different than for commercial work because qualification and revalidation costs are high enough that supplier switching is genuinely expensive once a part is locked. That reality argues for getting the supplier choice right early and valuing proximity during development. South Bay device teams iterate constantly through design controls, and a supplier 30 minutes away who can sit in a design review, support a first-article disposition, or join a CAPA investigation in person reduces the friction of regulated NPI substantially. Once a design and its validations are frozen, transferring to a lower-cost qualified 13485 supplier for volume is feasible, but the transfer itself triggers revalidation and process requalification, so it is rarely casual. The pragmatic pattern is to keep early-stage and clinical-build work local and 13485-certified, then make any production-transfer decision deliberately, with the revalidation cost fully accounted for in the business case.

Adjacent Capabilities Device Buyers Usually Need Together

Medical buyers in San Jose rarely need just one capability. A typical device subassembly pulls together precision CNC machining, micro-molding or injection molding of polymers, laser welding or bonding, passivation of stainless components, and cleanroom packaging. Finding a 13485 supplier who covers several of these in-house reduces the number of quality agreements and traceability handoffs you have to manage. Watch the sub-tier chain closely. Even an excellent 13485 machine shop will outsource passivation, electropolishing, anodize, or sterilization, and each of those sub-tiers becomes part of your traceability and validation scope. Confirm how your prime supplier qualifies and controls those sub-tiers, because an FDA finding doesn't distinguish between your direct supplier and theirs. For diagnostics and wearable startups, the adjacent need is often consumables molding plus assembly at volume, where validated molding and automated assembly come together. Mapping your full capability stack before you source lets you favor suppliers who consolidate the most of it under one verified 13485 system.

Frequently Asked Questions

ISO 9001:2015 is a general quality-management standard focused on customer satisfaction and continual improvement, while ISO 13485:2016 is purpose-built for the medical-device life cycle and is the standard FDA-regulated device companies rely on for supplier qualification. ISO 13485 adds hard requirements that ISO 9001 does not emphasize: design and development controls, risk management aligned to ISO 14971, validation of processes whose output cannot be fully verified through inspection, maintenance of device master records and device history records, and stringent traceability and record-retention rules. It is also more prescriptive and less focused on continual improvement, reflecting the regulatory environment it serves. For a San Jose device company, the distinction is practical: a supplier with only ISO 9001 can make a non-regulated component, but putting that supplier on a regulated device exposes you to compliance risk because their QMS isn't built to the requirements your own 21 CFR 820 or QMSR program depends on. Always screen for ISO 13485 specifically when the part touches a regulated device, and confirm the certificate scope covers your exact process.
Process validation matters whenever a manufacturing step produces results you cannot fully verify by inspecting the finished part, which is common in injection molding, welding, bonding, cleaning, and sterilization-affecting operations. ISO 13485 requires these processes to be validated, typically through installation qualification, operational qualification, and performance qualification, often abbreviated IQ/OQ/PQ. Operational qualification establishes the process window by deliberately running parameters across their ranges to find the edges of acceptable output, and performance qualification confirms the process produces conforming product consistently under normal operating conditions over multiple runs. When you qualify a San Jose medical supplier, ask them to walk you through their validation approach and show a sample protocol. A molder who can discuss OQ windows, PQ run requirements, and how they handle process drift is operating as a medical supplier; one who treats validation as paperwork is a risk. Validation is also why switching suppliers on a regulated program is expensive, because a new supplier or a changed material or tool generally triggers revalidation before you can ship product from the new source.
In a regulated medical supply chain, the quality agreement is the document that defines the compliance relationship between you and your supplier, and it carries weight equal to or greater than the purchase order. It establishes who owns design controls, exactly how engineering and process changes must be controlled and communicated so that no material grade, tooling, sub-tier processor, or validated parameter changes without your knowledge and any required revalidation, how nonconformances and complaints are handled, what records the supplier maintains and for how long, and how audits and supplier oversight work. Without it, you have no contractual basis to prevent the kind of quiet substitution that can invalidate a device's validation or create an undocumented change that an FDA investigator will flag. For a San Jose device buyer, putting a robust quality agreement in place during qualification, and confirming the supplier has a real change-notification process with examples you can review, is one of the highest-leverage steps you can take to protect your own regulatory standing. The PO governs the transaction; the quality agreement governs the compliance, and in medical manufacturing the compliance is the harder problem.
There is a strong case for keeping early-stage and clinical-build medical work with local ISO 13485 suppliers, even at Bay Area premium pricing, because the cost structure of regulated programs changes the calculus. Validation, documentation, and quality-agreement maintenance add real cost beyond machine time, and switching suppliers later triggers revalidation and requalification that is expensive enough to make supplier selection effectively sticky once a design is frozen. During development, South Bay device teams iterate heavily through design controls, and a supplier 30 minutes away who can attend a design review, support a first-article disposition in person, or participate in a CAPA investigation reduces regulated-NPI friction significantly. The pragmatic pattern is to keep development and early production local, then make any production-transfer decision to a lower-cost qualified supplier deliberately, with the full revalidation cost built into the business case rather than chasing unit-price savings that the transfer cost can erase. The right answer depends on volume and program maturity, but proximity is worth more on regulated medical work than on commercial machining.

Last updated: July 2026

Find ISO 13485-Certified Manufacturers in San Jose, CA

Search verified San Jose shops that hold ISO 13485.

No logins. No email gates. Just results.