HANA SOLUTION LLC – INSIGHTS
ISO 13485 Scope Verification for Medical Device Sourcing from Turkey
ISO 13485 is held at the organisation level. Scope is defined at the product level. A certificate held by a medical glove manufacturer does not cover surgical instruments — scope mismatch is the most common compliance failure in medical device sourcing from Turkey.
ISO 13485 Scope Verification for Medical Device Sourcing from Turkey
ISO 13485 certification is held at the organisation level. Scope is defined at the product level. A Turkish manufacturer certified for medical gloves does not hold a certificate that covers surgical instruments, diagnostic equipment, or laboratory consumables — even if they produce all of these products. Scope verification before commercial engagement is the critical step that most buyers skip.
How ISO 13485 Scope Works
ISO 13485 is the international standard for quality management systems in medical device manufacturing. Certification confirms that the organisation's quality management system meets the standard's requirements — but the certificate's scope statement defines exactly which products, processes, and sites are covered.
A manufacturer can hold ISO 13485 certification with a scope that covers a specific product category — single-use gloves, for example — while other product categories they produce are outside the certified scope. The certificate number, the organisation name, and the ISO 13485 designation are identical whether the scope covers one product category or twenty. Scope is only visible in the scope statement on the certificate itself.
ISO 13485 certification does not mean all products from a certified manufacturer are covered. It means the organisation's quality management system is certified for the products and processes defined in the scope statement. Scope must be read and validated — not assumed.
Common Scope Mismatch Scenarios in Turkey-Origin Medical Sourcing
In supplier verification engagements covering Turkish medical device manufacturers, the following scope mismatch scenarios were the most frequently identified compliance failures.
ISO 13485 and EU MDR — The Relationship Buyers Must Understand
ISO 13485 certification and EU MDR (Medical Device Regulation 2017/745) compliance are related but not equivalent. ISO 13485 is a quality management system standard. EU MDR is a market access regulation. A Turkish manufacturer can hold ISO 13485 certification without having completed the EU MDR conformity assessment required for CE marking under the new regulation.
For EU buyers sourcing medical devices from Turkey, both must be confirmed: ISO 13485 certification with the correct scope, and CE marking under EU MDR 2017/745 (or EU IVDR 2017/746 for in vitro diagnostic devices). ISO 13485 alone does not confirm EU market access compliance.
| Requirement | What it confirms | Who issues it |
|---|---|---|
| ISO 13485 | Quality management system meets standard — for defined scope | Accredited certification body |
| CE marking (MDR) | Product meets EU safety and performance requirements | Notified Body + manufacturer DoC |
| EUDAMED registration | Device registered in EU medical device database | Manufacturer via EU authorised representative |
| EU Authorised Representative | Legal representative in EU for non-EU manufacturers | Appointed by manufacturer |
How to Verify ISO 13485 Scope Before Commercial Engagement
Step 1 — Request the Full Certificate
Request the complete ISO 13485 certificate — not a summary or a quality declaration. The full certificate includes the scope statement, the certification body name, the certificate number, the validity date, and the specific sites covered. Scope statements are often found on the second page of multi-page certificates and are frequently omitted from summary versions.
Step 2 — Validate with the Certification Body
ISO 13485 certificates can be verified through the issuing certification body's public registry or by direct contact. Major certification bodies — BSI, TÜV, SGS, Bureau Veritas — maintain searchable online registries. Certificate number, scope, and validity should be confirmed independently before the supplier is advanced to the RFQ stage.
Step 3 — Cross-Reference Scope Against Product
The scope statement must be read against the specific product being sourced. The product category, device classification, and production site must all fall within the certificate scope. If any of these three elements falls outside the scope, the certificate does not cover the sourced product.
In medical device sourcing engagements where ISO 13485 scope was validated before RFQ issuance, scope mismatches were identified in a significant proportion of initial supplier submissions. All were resolved before commercial engagement began. None would have been visible in a price-only comparison.
Frequently Asked Questions
ISO 13485 scope defines exactly which products, processes, and sites are covered by a manufacturer's quality management system certification. It matters because a certificate held by a manufacturer does not automatically cover all products they produce. A buyer sourcing a product that falls outside the certificate scope has no quality management system assurance for that product — regardless of the certificate's existence.
Read the scope statement on the full certificate — not a summary document. The scope statement specifies the product categories, device classifications, and production sites covered. Cross-reference this against the specific product you are sourcing. If the product category, classification, or production site is not explicitly covered in the scope statement, the certificate does not apply to your sourced product.
No. ISO 13485 confirms that the manufacturer's quality management system meets the standard's requirements. EU MDR compliance requires a separate conformity assessment conducted by an EU Notified Body, resulting in CE marking under Regulation 2017/745. ISO 13485 certification is often part of the evidence package for MDR conformity assessment, but it does not substitute for it. For EU market access, both ISO 13485 scope coverage and MDR CE marking must be confirmed.
The supplier does not have a certified quality management system for that product. Production, quality control, and documentation processes for that product are outside the certified scope — meaning there is no independent assurance that they meet ISO 13485 requirements. For regulated market entry, this creates a compliance gap that cannot be resolved by contract terms alone. The supplier would need to extend their certification scope to cover the product before they can be advanced to the RFQ stage.
Yes. ISO 13485 scope verification — including full certificate review, certification body validation, and scope cross-referencing against the sourced product — is conducted as part of the Supplier Verification & Risk Screening service for medical sector engagements. Scope verification is completed before any supplier is advanced to the RFQ stage.
Submit a project brief. We validate ISO 13485 scope, confirm MDR compliance status, and verify supplier certification before your RFQ is issued.