iso-13485-certification — quality + safety report

---
name: iso-13485-certification
description: Comprehensive toolkit for preparing ISO 13485 certification documentation for medical device Quality Management Systems. Use when users need help with ISO 13485 QMS documentation, including (1) conducting gap analysis of existing documentation, (2) creating Quality Manuals, (3) developing required procedures and work instructions, (4) preparing Medical Device Files, (5) understanding ISO 13485 requirements, or (6) identifying missing documentation for medical device certification. Also use when users mention medical device regulations, QMS certification, FDA QMSR, EU MDR, or need help with quality system documentation.
license: MIT license
metadata:
  version: "1.0"
  skill-author: K-Dense Inc.
---

# ISO 13485 Certification Documentation Assistant

## Overview

This skill helps medical device manufacturers prepare comprehensive documentation for ISO 13485:2016 certification. It provides tools, templates, references, and guidance to create, review, and gap-analyze all required Quality Management System (QMS) documentation.

**What this skill provides:**
- Gap analysis of existing documentation
- Templates for all mandatory documents
- Comprehensive requirements guidance
- Step-by-step documentation creation
- Identification of missing documentation
- Compliance checklists

**When to use this skill:**
- Starting ISO 13485 certification process
- Conducting gap analysis against ISO 13485
- Creating or updating QMS documentation
- Preparing for certification audit
- Transitioning from FDA QSR to QMSR
- Harmonizing with EU MDR requirements

## Core Workflow

### 1. Assess Current State (Gap Analysis)

**When to start here:** User has existing documentation and needs to identify gaps

**Process:**

1. **Collect existing documentation:**
   - Ask user to provide directory of current QMS documents
   - Documents can be in any format (.txt, .md, .doc, .docx, .pdf)
   - Include any procedures, manuals, work instructions, forms

2. **Run gap analysis script:**
   ```bash
   python scripts/gap_analyzer.py --docs-dir <path_to_docs> --output gap-report.json
   ```

3. **Review results:**
   - Identify which of the 31 required procedures are present
   - Identify missing key documents (Quality Manual, MDF, etc.)
   - Calculate compliance percentage
   - Prioritize missing documentation

4. **Present findings to user:**
   - Summarize what exists
   - Clearly list what's missing
   - Provide prioritized action plan
   - Estimate effort required

**Output:** Comprehensive gap analysis report with prioritized action items

### 2. Understand Requirements (Reference Consultation)

**When to use:** User needs to understand specific ISO 13485 requirements

**Available references:**
- `references/iso-13485-requirements.md` - Complete clause-by-clause breakdown
- `references/mandatory-documents.md` - All 31 required procedures explained
- `references/gap-analysis-checklist.md` - Detailed compliance checklist
- `references/quality-manual-guide.md` - How to create Quality Manual

**How to use:**

1. **For specific clause questions:**
   - Read relevant section from `iso-13485-requirements.md`
   - Explain requirements in plain language
   - Provide practical examples

2. **For document requirements:**
   - Consult `mandatory-documents.md`
   - Explain what must be documented
   - Clarify when documents are applicable vs. excludable

3. **For implementation guidance:**
   - Use `quality-manual-guide.md` for policy-level documents
   - Provide step-by-step creation process
   - Show examples of good vs. poor implementation

**Key reference sections to know:**

- **Clause 4:** QMS requirements, documentation, risk management, software validation
- **Clause 5:** Management responsibility, quality policy, objectives, management review
- **Clause 6:** Resources, competence, training, infrastructure
- **Clause 7:** Product realization, design, purchasing, production, traceability
- **Clause 8:** Measurement, audits, CAPA, complaints, data analysis

### 3. Create Documentation (Template-Based Generation)

**When to use:** User needs to create specific QMS documents

**Available templates:**
- Quality Manual: `assets/templates/quality-manual-template.md`
- CAPA Procedure: `assets/templates/procedures/CAPA-procedure-template.md`
- Document Control: `assets/templates/procedures/document-control-procedure-template.md`

**Process for document creation:**

1. **Identify what needs to be created:**
   - Based on gap analysis or user request
   - Prioritize critical documents first (Quality Manual, CAPA, Complaints, Audits)

2. **Select appropriate template:**
   - Use Quality Manual template for QM
   - Use procedure templates as examples for SOPs
   - Adapt structure to organization's needs

3. **Customize template with user-specific information:**
   - Replace all placeholder text: [COMPANY NAME], [DATE], [NAME], etc.
   - Tailor scope to user's actual operations
   - Add or remove sections based on applicability
   - Ensure consistency with organization's processes

4. **Key customization areas:**
   - Company information and addresses
   - Product types and classifications
   - Applicable regulatory requirements
   - Organization structure and responsibilities
   - Actual processes and procedures
   - Document numbering schemes
   - Exclusions and justifications

5. **Validate completeness:**
   - All required sections present
   - All placeholders replaced
   - Cross-references correct
   - Approval sections complete

**Document creation priority order:**

**Phase 1 - Foundation (Critical):**
1. Quality Manual
2. Quality Policy and Objectives
3. Document Control procedure
4. Record Control procedure

**Phase 2 - Core Processes (High Priority):**
5. Corrective and Preventive Action (CAPA)
6. Complaint Handling
7. Internal Audit
8. Management Review
9. Risk Management

**Phase 3 - Product Realization (High Priority):**
10. Design and Development (if applicable)
11. Purchasing
12. Production and Service Provision
13. Control of Nonconforming Product

**Phase 4 - Supporting Processes (Medium Priority):**
14. Training and Competence
15. Calibration/Control of M&M Equipment
16. Process Validation
17. Product Identification and Traceability

**Phase 5 - Additional Requirements (Medium Priority):**
18. Feedback and Post-Market Surveillance
19. Regulatory Reporting
20. Customer Communication
21. Data Analysis

**Phase 6 - Specialized (If Applicable):**
22. Installation (if applicable)
23. Servicing (if applicable)
24. Sterilization (if applicable)
25. Contamination Control (if applicable)

### 4. Develop Specific Documents

#### Creating a Quality Manual

**Process:**

1. **Read the comprehensive guide:**
   - Read `references/quality-manual-guide.md` in full
   - Understand structure and required content
   - Review examples provided

2. **Gather organization information:**
   - Legal company name and addresses
   - Product types and classifications
   - Organizational structure
   - Applicable regulations
   - Scope of operations
   - Any exclusions needed

3. **Use template:**
   - Start with `assets/templates/quality-manual-template.md`
   - Follow structure exactly (required by ISO 13485)
   - Replace all placeholders

4. **Complete required sections:**
   - **Section 0:** Document control, approvals
   - **Section 1:** Introduction, company overview
   - **Section 2:** Scope and exclusions (critical - must justify exclusions)
   - **Section 3:** Quality Policy (must be signed by top management)
   - **Sections 4-8:** Address each ISO 13485 clause at policy level
   - **Appendices:** Procedure list, org chart, process map, definitions

5. **Key requirements:**
   - Must reference all 31 documented procedures (Appendix A)
   - Must describe process interactions (Appendix C - create process map)
   - Must define documentation structure (Section 4.2)
   - Must justify any exclusions (Section 2.4)

6. **Validation checklist:**
   - [ ] All required content per ISO 13485 Clause 4.2.2
   - [ ] Quality Policy signed by top management
   - [ ] All exclusions justified
   - [ ] All procedures listed in Appendix A
   - [ ] Process map included
   - [ ] Organization chart included

#### Creating Procedures (SOPs)

**General approach for all procedures:**

1. **Understand the requirement:**
   - Read relevant clause in `references/iso-13485-requirements.md`
   - Understand WHAT must be documented
   - Identify WHO, WHEN, WHERE for your organization

2. **Use template structure:**
   - Follow CAPA or Document Control templates as examples
   - Standard sections: Purpose, Scope, Definitions, Responsibilities, Procedure, Records, References
   - Keep procedures clear and actionable

3. **Define responsibilities clearly:**
   - Identify specific roles (not names)
   - Define responsibilities for each role
   - Ensure coverage of all required activities

4. **Document the "what" not excessive "how":**
   - Procedures should define WHAT must be done
   - Detailed HOW-TO goes in Work Instructions (Tier 3)
   - Strike balance between guidance and flexibility

5. **Include required elements:**
   - All elements specified in ISO 13485 clause
   - Records that must be maintained
   - Responsibilities for each activity
   - References to related documents

**Example: Creating CAPA Procedure**

1. Read ISO 13485 Clauses 8.5.2 and 8.5.3 from references
2. Use `assets/templates/procedures/CAPA-procedure-template.md`
3. Customize:
   - CAPA prioritization criteria for your organization
   - Root cause analysis methods you'll use
   - Approval authorities and responsibilities
   - Timeframes based on your operations
   - Integration with complaint handling, audits, etc.
4. Add forms as attachments:
   - CAPA Request Form
   - Root Cause Analysis Worksheet
   - Action Plan Template
   - Effectiveness Verification Checklist

#### Creating Medical Device Files (MDF)

**What is an MDF:**
- File for each medical device type or family
- Replaces separate DHF, DMR, DHR (per FDA QMSR harmonization)
- Contains all documentation about the device

**Required contents per ISO 13485 Clause 4.2.3:**

1. General description and intended use
2. Label and instructions for use specifications
3. Product specifications
4. Manufacturing specifications
5. Procedures for purchasing, manufacturing, servicing
6. Procedures for measuring and monitoring
7. Installation requirements (if applicable)
8. Risk management file(s)
9. Verification and validation information
10. Design and development file(s) (when applicable)

**Process:**

1. Identify each device type or family
2. Create MDF structure (folder or binder)
3. Collect or create each required element
4. Ensure traceability between documents
5. Maintain as living document (update with changes)

### 5. Conduct Comprehensive Gap Analysis

**When to use:** User wants detailed assessment of all requirements

**Process:**

1. **Use comprehensive checklist:**
   - Open `references/gap-analysis-checklist.md`
   - Work through clause by clause
   - Mark status for each requirement: Compliant, Partial, Non-compliant, N/A

2. **For each clause:**
   - Read requirement description
   - Identify existing evidence
   - Note gaps or deficiencies
   - Define action required
   - Assign responsibility and target date

3. **Summarize by clause:**
   - Calculate compliance percentage per clause
   - Identify highest-risk gaps
   - Prioritize actions

4. **Create action plan:**
   - List all gaps
   - Prioritize: Critical > High > Medium > Low
   - Assign owners and dates
   - Estimate resources needed

5. **Output:**
   - Completed gap analysis checklist
   - Summary report with compliance percentages
   - Prioritized action plan
   - Timeline and milestones

## Common Scenarios

### Scenario 1: Starting from Scratch

**User request:** "We're a medical device startup and need to implement ISO 13485. Where do we start?"

**Approach:**

1. **Explain the journey:**
   - ISO 13485 req

… (truncated)