15 Things for Medical Device Startup to Address

As a medical device startup, there are many things you are doing all day, every day to advance your technology and product closer and closer to that next critical milestone.

And while doing so, you should implement a bit of infrastructure based on FDA / ISO regulations and requirements. Doing so ensures that your efforts result in the necessary documentation and records to support regulatory submissions and eventual commercialization of your medical device.


To help you, I’m giving you a list of 15 items to address for your medical device startup.


#1 – Establish Design Controls / Design & Development Procedure(s)

Refer to FDA 21 CFR 820.30. Create a procedure that describes your company’s design and development process.

#2 – Define and document product User Needs

Define and document Intended Use / Indications for Use. User needs describe how the product is going to be used. User needs help establish the framework for your products design. Intended use describes the clinical issue your product addresses. Indications for Use pertain to clinical applications use, environment, and end user.

#3 – Establish Regulatory Strategy

Identify applicable regulatory product codes and product classification (based on intended use / indications for use) for all desired markets. This will help determine the type of regulatory submissions which will eventually be required.



It is important to identify desired markets and determine the regulatory classification for your product in each of these markets. Here are some links to a few of the more common regulatory markets to help you determine this:

#4 – Define and document Design & Development Plan

Identify major milestones and define responsibilities. Establish and maintain plans that describe or reference the design and development activities and define responsibility for implementation. The plans shall identify and describe the interfaces with different groups or activities that provide, or result in, input to the design and development process.

#5 – Define and document Design Inputs

A design Input describes physical, functional, performance, and all other product requirements. Design Inputs are expressed in a way that is measureable and objective.

#6 – Establish Design History File (DHF)

DHF contains all Design Controls, including User Needs, Design & Development Plan, and Design Inputs (and all the rest).

DHF should be up to date and organized.

#7 – Establish Risk Management Procedure(s)

Refer to ISO 14971:2007 (or EN 14971:2012 for Europe). Establish Risk Management Procedure(s) with ISO 14971 as the basis.

ISO 14971 defines medical device risk management expectations

ISO 14971 defines medical device risk management expectations

#8 – Define and document Risk Management Plan

The Risk management plan describes timing and type of risk management activities throughout design and development.

#9 – Identify and document product Hazards.

Refer to ISO 14971. Hazards are a potential source of harm. Knowing the hazards and hazardous situations pertaining to the medical device you are developing will ensure a safer product.

#10 – Begin documenting Risk Assessment.

Risk assessment involves identifying potential harm, severity of that harm, and the likelihood of occurrence.

#11 – Establish Risk Management File

The Risk Management File contains all Risk Management documentation. The Risk Management File is “living” — meaning it gets updated throughout the entire product lifecycle.

#12 – Establish Supplier Controls Procedure

Refer to FDA 21 CFR 820.50. Formalizing supplier selection and defining evaluation and monitoring criteria will help you choose suppliers wisely.

#13 – Create an Approved Supplier List

Determine suppliers and products / services those suppliers are to provide. Capture your list of supplier on an Approved Supplier List (ASL).

#14 – Maintain Supplier Files

Send supplier surveys / evaluations to suppliers to complete and return. Maintain supplier files. Your company relies on third party suppliers which need to be identified, qualified, evaluated, and monitored.

#15 – Establish Document Control / Record Management Procedures

Refer to FDA 21 CFR 820.40 and 180, 820.186. Throughout design and development you need to generate documentation and records and establish a system for organizing and maintain these items.

Additional Information

Quality System

FDA requires that medical device companies establish a Quality System (QS) compliant with 21 CFR part 820 regulations. A complete QS is required before going to market. However, for a startup medical device company still in development, Creo Quality advises that you “bootstrap” your QS—or build it as you need it.

As you progress through product development and approach preclinical use, clinical use, and any regulatory filings, additional QS procedures will need to be developed.

And if you have interest in going outside the U.S. build the QS with FDA and ISO 13485 in mind.


Product Development

There are two major aspects of medical device product development which FDA and regulatory agencies are concerned: Design Controls and Risk Management.

FDA Design Controls waterfall

FDA Design Controls waterfall

As mentioned in the Quality System section, Design Controls are covered in FDA 21 CFR 820.30 and Risk Management addressed in ISO 14971. FDA also has a Design Controls guidance document, which is worth reviewing. You should also get a copy of ISO 14971:2007. (NOTE: In EU, ISO 14971:2012 is accepted. The only difference in the versions pertains to a couple of the annexes.)

The most important documentation during medical device product development includes Design Controls and Risk Management. Design Controls documentation is to be maintained in a Design History File (DHF). Risk Management documentation is to be maintained in a Risk Management File.



Jon Speer has been in the medical device industry for over 16 years. In 2007, Jon started Creo Quality to help medical device companies with project management, quality systems, and regulatory submissions. As a result of his experience in the medical device industry, Jon had an idea to develop a software solution to improve how companies handle Design Controls. Because of this greenlight.guru was born. You can find him on Google+Twitter, and LinkedIn.  

Related Posts

No Comments Yet.

add new comment