Engineering Answers  /  Compliance & Documents

What an ISO 13485 supplier must be able to show

A certificate proves an audit happened to a scope. It does not prove the scope covers your part, that the cleanroom is the class claimed, or that you will hear about a compound change before your validation breaks.

By Yude Technology Engineering Team Published 5 November 2026 8 min read
Applies to LSR, HCR and compression molding
Short answer

An ISO 13485 supplier should be able to show a certificate whose scope names silicone molding and the devices it covers, process validation records for the specific process (IQ, OQ, PQ), cleanroom classification and monitoring data, bioburden and environmental results, lot traceability from compound lot to shipped part, a documented change-notification clause, and CAPA records. The certificate alone says a system exists; those seven items say the system is applied to your part.

The certificate is the beginning of the conversation

Every medical silicone supplier has an ISO 13485 certificate. It is the entry ticket, not the evidence.

What the certificate tells you is that an accredited body audited a quality management system against the standard, on a particular scope, on a particular date. What it does not tell you is whether that system has been applied to your part, whether the cleanroom is the class claimed, or whether you will be told when something changes.

The seven items worth asking for

Item What it proves Red flag
Certificate with scope statement The system covers silicone molding for medical devices Scope says "trading" or excludes molding
Process validation: IQ, OQ, PQ The process is proven across its window, in routine production Only IQ, or validation on a different tool
Cleanroom classification and monitoring The environment is the class claimed, and it is measured A certificate for the room with no particle data
Bioburden and environmental results Microbial state is controlled and trending A single result, no trend, no sampling plan
Lot traceability, compound to shipment A defective lot can be contained Traceability starts at the press, not the compound
Change notification clause You hear about changes before they reach your product "We will inform customers as appropriate"
CAPA records Problems are investigated and closed No CAPA history, or "no complaints ever"
ISO 13485:2016The current standard revision
IQ / OQ / PQThe three stages of process validation
ISO Class 7Cleanroom class we run medical molding in
Lot traceabilityCompound lot to shipped carton

Scope: read the sentence

Certificates are issued against a scope written by the supplier and agreed with the certification body. That sentence is the part that matters, and it is the part buyers skim.

Look for the activity (manufacture, not distribute), the product category (medical devices, or components for medical devices) and any exclusions. A scope that says "manufacture of silicone rubber components" without the medical qualifier is a different claim from one that names medical devices explicitly, even where both certificates carry the same standard number.

Also check the certification body: an accredited body with an IAF member mark is verifiable. A certificate issued by an unaccredited body is a document, not a certification. The body's number and the certificate's validity should be checkable on the body's own register, and that check takes two minutes.

Validation: the part that gets skipped

Process validation is where a moulder's medical capability actually lives, and where the documents are most often thin.

  • IQ confirms the press, the tool and the auxiliary equipment are installed as specified, with the calibration and the utilities the process needs.
  • OQ proves the process makes conforming parts across the intended window — not at nominal, but at the corners. Cure temperature at its low limit with the cycle at its short limit is the condition that reveals an undercured part.
  • PQ proves it holds in routine production, over consecutive lots, with the operators and procedures that will run it.

A supplier with a single validation report at nominal conditions has demonstrated that the process can work. They have not demonstrated that it will keep working when a thermocouple drifts.

Traceability and containment

Ask one question: if a compound lot turns out to be wrong, which shipped cartons do you recall?

A good answer walks backward from the compound lot through the press record, the lot number, the inspection record and the shipment. A weak answer starts at the press, which means the moulder knows which parts they made but not which material went into them.

For a medical device customer this is not a documentation preference. It is the difference between a containment that takes a day and one that takes a recall.

The clause we put in every medical supply agreement

Change notification, mutual, with a defined notice period before implementation. Compound grade, cure system, pigment, tool, process window and site all trigger it. The reason is not administrative: a customer's biocompatibility file and process validation are tied to a specific material and process. Changing either quietly does not create a better part, it creates a validation gap that surfaces at the worst possible moment — usually during a notified body audit of the customer, not of us.

What a customer should do with all this

  1. Read the scope, and check the certificate against the body's register.
  2. Ask for the validation report for a similar part, not a template. Read the OQ window.
  3. Ask for the last four quarters of cleanroom and bioburden data, and look for a trend rather than a pass.
  4. Trace one lot end to end, in front of you, from a shipped carton back to a compound lot.
  5. Read the change notification clause, and negotiate the notice period before the first order.

Five questions, most of an afternoon. They separate a supplier who holds a certificate from one who runs a medical process — and the difference only becomes visible when something goes wrong, which is precisely when it is too late to check.

Frequently asked questions

Does an ISO 13485 certificate cover any silicone part a supplier makes?

No. A certificate has a scope, and the scope has to name the activities and the product categories covered. A supplier certified for "manufacture of silicone components for medical devices" is covered for that; a supplier certified for industrial silicone with medical listed as a future activity is not. Ask for the certificate and read the scope sentence aloud, then check whether it matches what you are buying.

What is the difference between IQ, OQ and PQ?

Installation qualification confirms the equipment and tooling are what they should be, and installed correctly. Operational qualification proves the process produces conforming parts across the intended window — the upper and lower limits of temperature, pressure and cure. Performance qualification proves it does so in routine production, over multiple lots, with the people and the procedures that will actually run it. A supplier who only has IQ is at the start of validation, not the end.

Why is change notification the clause buyers most regret ignoring?

Because a compound change is invisible in the part and invalidates the customer's own validation. If the moulder switches compound lot, cure system or a pigment without telling you, your biocompatibility data and your process validation were performed on a material that no longer exists in the supply chain. The clause should say what triggers notification and how many days' notice you get — and it should be mutual, because your design changes have the same effect in the other direction.

Ask for the supplier qualification pack

Certificate with scope, validation approach, cleanroom data and a sample device history record. We send the pack before an audit is requested.

Request Supplier Documents