Direct comparison
ISO 9001 vs ISO 13485
ISO 9001 is a general quality-management standard; ISO 13485 is a medical-device-specific QMS standard with a strong regulatory focus. They share roots but differ in emphasis.
The step most authors miss
Doing CRediT right? Don’t stop at the statement.
A CRediT statement credits you inside one paper. The recognition CRediT was built for happens when those roles are tied to you, persistently. Sign in with your ORCID — free — and claim your CRediT contributions on casrai.org, the home of the standard. They become a verified, portable part of your identity, not a line that disappears into one PDF.
Free: claim your contributions, then export a journal-ready CRediT statement, schema.org structured data, JATS XML, CSV or BibTeX — and preview your public profile. A membership publishes that profile publicly and verifies the journals you serve.
Side-by-side comparison
| Dimension | ISO 9001 | ISO 13485 |
|---|---|---|
| Scope | A general quality management system for any organisation, sector or size. | A quality management system specific to the medical-device lifecycle. |
| Primary aim | Consistent quality and enhanced customer satisfaction. | Safe, compliant medical devices that meet regulatory requirements. |
| Current version | ISO 9001:2015. | ISO 13485:2016. |
| Structure | Uses the High-Level Structure (Annex SL) shared across ISO management standards. | Deliberately does not adopt the High-Level Structure, retaining the earlier clause layout. |
| Improvement emphasis | Strong emphasis on continual improvement of the system. | Emphasis on maintaining QMS effectiveness and regulatory compliance over continual improvement. |
| Risk approach | Risk-based thinking applied across the management system. | Detailed, mandated risk management applied throughout product realisation. |
| Documentation | Flexible — documented information as needed for the processes. | More prescriptive — extensive records, device files and retention requirements. |
| Regulatory linkage | Generic; not tied to specific regulations. | Closely aligned with frameworks such as EU MDR and FDA quality system requirements. |
| Typical adopters | Manufacturers, service providers, public bodies and non-profits. | Medical-device manufacturers, suppliers, distributors and servicers. |
Same family, different priorities
ISO 13485 grew out of ISO 9001 and still shares its core management-system thinking, but the two have evolved to serve different priorities. ISO 9001 is generic and improvement-driven, designed to suit any organisation that wants consistent quality and satisfied customers. ISO 13485 keeps the QMS foundations but reorients them around patient safety and regulatory compliance, adding prescriptive requirements for risk management, design controls, traceability and documentation. A key practical difference is structural: ISO 13485:2016 did not move to the High-Level Structure adopted by ISO 9001:2015, because the medical-device community prioritised regulatory stability over harmonisation with other standards.
Common questions
FAQ
Is ISO 13485 just ISO 9001 with extra medical requirements?+
It is more than an add-on. ISO 13485 shares QMS foundations with ISO 9001 but reorients them around regulatory compliance and patient safety, replaces the emphasis on continual improvement with maintaining effectiveness, and adds prescriptive requirements for risk, design controls and traceability. It also uses a different clause structure, so it is a distinct standard rather than ISO 9001 plus extras.
Can an organisation hold both ISO 9001 and ISO 13485?+
Yes. Medical-device organisations sometimes hold ISO 13485 for their device activities and ISO 9001 for other parts of the business, or to signal a broader quality commitment. Because the standards share foundations, an integrated quality management system can address both, though ISO 13485’s additional medical-device requirements must be met in full.
Why does ISO 13485 not follow the same structure as ISO 9001:2015?+
When ISO 9001 moved to the common High-Level Structure (Annex SL) in 2015, the medical-device community chose not to follow for ISO 13485:2016. Regulatory stability and alignment with existing device regulations were valued more highly than harmonising the clause layout, so ISO 13485 kept its established structure.
Going deeper
