Your quality system doesn’t prove clinical safety
I see manufacturers who believe that because they passed their ISO 13485 audit, their clinical evaluation is somehow validated. They point to their certified quality system as evidence that their clinical data is adequate. But ISO 13485 certification and clinical evidence are not the same thing. And confusing the two creates regulatory gaps that only appear during technical documentation review.
In This Article
Let me be direct about something I observe in almost every pre-submission review.
Manufacturers invest heavily in their quality management system. They prepare for audits. They maintain procedures. They track nonconformities. They get certified to ISO 13485. And then they assume this effort translates directly into clinical compliance under MDR.
It does not.
What ISO 13485 Actually Covers
ISO 13485 defines requirements for a quality management system specific to medical devices. It addresses design controls, risk management processes, post-market surveillance structures, and documentation practices.
These are foundational. No argument there.
But ISO 13485 does not evaluate the quality of your clinical data. It does not assess whether your literature search was comprehensive. It does not judge whether your equivalence claim is scientifically valid. It does not verify that your clinical evaluation actually demonstrates safety and performance for your intended use.
The standard ensures you have processes in place. It does not validate the outputs of those processes.
Manufacturers reference their ISO 13485 certificate in Section 1 of their clinical evaluation report as if it establishes clinical compliance. Reviewers see this as a misunderstanding of what the standard actually covers.
Where the Gap Appears
MDR Annex II Section 4 requires a clinical evaluation that demonstrates conformity with relevant safety and performance requirements. This is a content requirement, not a process requirement.
Your quality system may have a procedure titled
Frequently Asked Questions
What is a Clinical Evaluation Report (CER)?
A CER is a mandatory document under MDR 2017/745 that demonstrates the safety and performance of a medical device through systematic analysis of clinical data. It must be updated throughout the device lifecycle based on PMCF findings.
How often should the CER be updated?
The CER should be updated whenever significant new clinical data becomes available, after PMCF activities, when there are changes to the device or intended purpose, and at minimum during annual reviews as part of post-market surveillance.
What causes CER rejection by Notified Bodies?
Common reasons include inadequate equivalence demonstration, insufficient clinical data for claims, poorly structured SOTA analysis, missing gap analysis, and lack of clear benefit-risk determination. Structure and logical flow are as important as the data itself.
Which MDCG guidance documents are most relevant for clinical evaluation?
Key documents include MDCG 2020-5 (Equivalence), MDCG 2020-6 (Sufficient Clinical Evidence), MDCG 2020-13 (CEAR Template), MDCG 2020-7 (PMCF Plan), and MDCG 2020-8 (PMCF Evaluation Report). ISO 13485, MDR Annex II
Need Expert Help with Your Clinical Evaluation?
Get personalized guidance on MDR compliance, CER writing, and Notified Body preparation.
✌
Peace, Hatem
Your Clinical Evaluation Partner
Follow me for more insights and practical advice.
The Gap Between Quality System Compliance and Clinical Evidence
ISO 13485 certification demonstrates that a manufacturer has implemented a quality management system (QMS) for designing, manufacturing, and servicing medical devices. However, QMS compliance alone does not generate the clinical evidence required by MDR Article 61. A quality system proves process control; clinical evaluation proves that the device is safe and achieves its intended clinical benefits in the target patient population.
This distinction is critical because many manufacturers incorrectly assume that passing ISO 13485 audits satisfies their clinical evaluation obligations. The MDR explicitly separates these requirements. Annex II mandates a Clinical Evaluation Report as part of the technical documentation, independent of the QMS certificate.
What Clinical Evidence Must Demonstrate Beyond QMS
While your quality system ensures consistent manufacturing and design control, clinical evaluation must independently address:
- The acceptability of the benefit-risk ratio for each intended use and target population
- That the device achieves its claimed clinical performance under real-world conditions
- That known and foreseeable risks have been reduced as far as possible through design and risk management
- That residual risks are acceptable when weighed against the clinical benefits
- Ongoing safety and performance monitoring through PMCF activities
Notified Bodies frequently issue deficiency letters when manufacturers rely on design verification and validation (V&V) data as their primary clinical evidence. While V&V data contributes to the overall evidence base, it cannot replace systematic clinical evaluation. The clinical evaluation must include a literature review, analysis of clinical experience data, and where necessary, data from clinical investigations.
Deepen Your Knowledge
Read Complete Guide to Clinical Evaluation under EU MDR for a comprehensive overview of clinical evaluation under EU MDR 2017/745.





