FDA QMSR & Biocompatibility: A Guide to the 2026 ISO 13485 Alignment

## FDA QMSR & Biocompatibility: A Guide to the 2026 ISO 13485 Alignment With the FDA’s final rule to align the Quality System Regulation (QSR) under 21 CFR 820 with the international standard ISO 13485, medical device manufacturers are preparing for the transition to the new Quality Management System Regulation (QMSR). This significant harmonization, effective February 2, 2026, signals a major shift towards a more globally integrated and risk-centric approach to quality management. A critical area impacted by this change is the evaluation of biocompatibility. While the QMSR does not fundamentally alter the scientific principles of biocompatibility outlined in FDA's guidance and the ISO 10993 series, it fundamentally changes *how* biocompatibility is managed within the quality system. The new regulation moves biocompatibility evaluation away from a late-stage, siloed testing activity and firmly embeds it within the entire product lifecycle. It requires manufacturers to demonstrate a proactive, risk-based, and thoroughly documented strategy that begins with design inputs and extends through post-market surveillance. This article provides a detailed guide on how manufacturers can adapt their biocompatibility approach to meet the expectations of the QMSR. ### Key Points * **Shift from Silo to System:** Under the QMSR, biocompatibility is no longer a simple "check-the-box" test performed before submission. It must be a fully integrated component of the quality management system, interwoven with design controls, risk management, supplier controls, and change management. * **Design Controls are Central:** Biocompatibility requirements must be defined as critical **design inputs**. The evaluation plan, testing, and final report must be meticulously documented as part of the design verification and validation process within the Design History File (DHF). * **Risk-Managed Approach is Mandatory:** The QMSR's alignment with ISO 13485 reinforces the link to the risk management standard ISO 14971. The Biological Evaluation Plan (BEP) and Report (BER) are no longer standalone documents but are key outputs of the overall risk management process. * **Lifecycle Perspective is Crucial:** Biological safety is not a one-time assessment. The QMSR mandates that any change to materials, suppliers, or manufacturing processes for a patient-contacting device must trigger a formal, documented evaluation of its impact on biocompatibility. * **Documentation as Objective Evidence:** The focus shifts from merely possessing a passing test report to maintaining a comprehensive and traceable record. Manufacturers must be able to prove through their QMS records that their biocompatibility strategy is logical, proactive, and managed throughout the device's lifecycle. * **Supplier Controls are Magnified:** With an emphasis on controlling inputs, the QMSR requires more rigorous qualification and monitoring of suppliers for critical materials that impact biological safety. ### Understanding the Shift: From QSR (21 CFR 820) to QMSR For decades, medical device manufacturers selling in the United States have operated under the Quality System Regulation (QSR) as defined in 21 CFR Part 820. While effective, the QSR had its own unique structure and terminology, creating a degree of regulatory overhead for companies also complying with ISO 13485 for other markets. The FDA's new Quality Management System Regulation (QMSR) aims to resolve this by incorporating ISO 13485:2016 by reference. The core philosophy of ISO 13485—and now the QMSR—is a profound emphasis on risk management as a foundational element of the entire quality system. This principle, closely tied to ISO 14971 ("Medical devices — Application of risk management to medical devices"), requires that decisions at every stage of the product lifecycle are informed by a structured risk analysis. For biocompatibility, this means the question is no longer just, "Did the device pass its tests?" Instead, auditors and regulators will ask: * How were biological risks identified and evaluated early in the design process? * How did this risk assessment inform the biological evaluation and testing plan? * How is the biocompatibility profile of the device maintained and monitored through production and post-market activities? * Where is the objective evidence within the QMS that demonstrates this integrated, risk-based process? ### Integrating Biocompatibility into Design Controls (as per 21 CFR 820.30) The QMSR's alignment with ISO 13485 reinforces the existing principles of Design Controls but demands more rigorous integration. Biocompatibility must be a visible thread woven throughout the entire design and development process. #### 1. Design and Development Planning Early in the planning phase, the project plan must explicitly include activities and resources for biological evaluation. This includes drafting the Biological Evaluation Plan (BEP), material characterization, and scheduling necessary testing. #### 2. Design Inputs This is where the QMSR-aligned process begins. Biocompatibility requirements cannot be an afterthought; they are fundamental design inputs. These inputs must be formally documented and should include: * **Intended Use:** The specific clinical application and target patient population. * **Nature of Body Contact:** Categorization according to ISO 10993-1 (e.g., surface device, implant device). * **Duration of Contact:** Categorization as limited, prolonged, or permanent. * **Materials of Construction:** A complete list of all patient-contacting materials, including colorants, additives, and processing aids. * **Manufacturing Processes:** Details of processes that could affect biocompatibility, such as sterilization methods (EtO, gamma), cleaning, polishing, or coating. * **Applicable Standards and Guidance:** Citing relevant FDA guidance documents and standards like the ISO 10993 series. The initial risk assessment of these inputs is used to create the **Biological Evaluation Plan (BEP)**, which serves as the master plan for the entire biocompatibility assessment. #### 3. Design Outputs Design outputs are the device specifications that result from the design process. To ensure biocompatibility, these outputs must include: * Final material specifications and sourcing requirements. * Validated parameters for sterilization and cleaning processes. * Drawings and specifications that define the final, patient-contacting device form. #### 4. Design Verification Verification activities confirm that design outputs meet the design inputs. For biocompatibility, this is where testing comes into play. Based on the risks identified in the BEP, a series of verification tests are conducted, which may include: * **In vitro cytotoxicity testing (ISO 10993-5).** * **Sensitization and irritation testing (ISO 10993-10).** * **Chemical characterization / extractables & leachables testing (ISO 10993-18).** * **Systemic toxicity, implantation, or other tests as required by the risk assessment.** The final test reports from a qualified laboratory serve as objective evidence that the device, as produced by the final manufacturing processes, meets the biocompatibility requirements. #### 5. Design Validation Validation ensures the finished device meets user needs and its intended use. A successful biocompatibility evaluation is a cornerstone of demonstrating the device is safe for clinical use, thus forming a critical part of the overall design validation. #### 6. Design History File (DHF) The DHF is the ultimate record of the design process. Under the QMSR, it must contain a complete and logical story of the biocompatibility evaluation. This includes: * The documented **Design Inputs** related to biocompatibility. * The **Biological Evaluation Plan (BEP)**, including the risk analysis. * All test protocols and reports from **Design Verification**. * The final **Biological Evaluation Report (BER)**, which summarizes the entire evaluation and concludes on the biological safety of the device. ### Scenarios: The Old QSR vs. The New QMSR Approach #### Scenario 1: The "Old" QSR Approach (Check-the-Box) A company develops a new orthopedic implant with a novel surface technology. Late in the development cycle, the RA manager is tasked with "getting the biocompatibility done." A contract research organization (CRO) is hired to run a standard battery of tests based on the device category. The tests pass, and the report is added to the submission file. **Gaps under QMSR:** * Biocompatibility was not a formal design input. * The testing plan was not explicitly derived from a documented risk assessment in a BEP. * There is no documented link between the manufacturing process for the surface technology and the biological evaluation. * The change control procedure for the supplier of the surface coating material is not linked to the biocompatibility file. #### Scenario 2: The Integrated QMSR Approach For the same orthopedic implant, the process looks different: 1. **Design Input Stage:** A cross-functional team, including R&D, Quality, and RA, drafts design inputs. They explicitly state that the device must be biocompatible per ISO 10993-1 and relevant FDA guidance. 2. **Risk-Based BEP:** A risk analyst facilitates a biological risk assessment. The team creates a BEP that justifies the need for chemical characterization of the novel surface, followed by a targeted toxicological risk assessment and specific in vitro tests. 3. **Verification & DHF:** The planned tests are executed by a qualified lab. The BEP, test reports, and the final BER are all placed in the DHF, demonstrating a traceable, risk-based justification for the testing strategy. 4. **Lifecycle Management:** The quality system's change control procedure explicitly requires a biocompatibility impact assessment for any change to the coating process or material suppliers. This ensures the device's safety profile is maintained post-market. ### Strategic Considerations and the Role of Q-Submission This integrated approach requires significant upfront planning and resource allocation. For devices with novel materials, new manufacturing processes, or challenging intended uses, the risk of a flawed biocompatibility strategy can lead to significant delays and costs. This is where the FDA's Q-Submission program becomes an invaluable strategic tool. Manufacturers can submit their complete Biological Evaluation Plan (BEP)—including their risk assessment and proposed testing strategy—to the FDA for feedback *before* initiating expensive, long-term studies. Engaging the agency early can provide clarity on testing expectations, potentially saving months of time and significant expense. A Q-Submission is a powerful way to de-risk the biocompatibility portion of a regulatory submission and aligns perfectly with the proactive, risk-managed philosophy of the QMSR. ### Finding and Comparing Biocompatibility Testing Services Providers Choosing the right partner for biocompatibility testing is more critical than ever under the QMSR. A qualified provider is not just a test lab but a partner who understands the regulatory landscape and can support a risk-based approach. When evaluating providers, manufacturers should look for: * **Regulatory Compliance:** The facility should be GLP (Good Laboratory Practice) compliant for relevant studies and preferably ISO/IEC 17025 accredited. * **Integrated Expertise:** Look for partners who can do more than just run tests. The best providers have on-staff toxicologists and regulatory experts who can help develop a sound BEP, interpret chemical characterization data, and author a defensible BER. * **Experience with Similar Devices:** A provider with experience testing similar materials and device types will be better equipped to foresee challenges and recommend an efficient testing strategy. * **Clear Communication and Project Management:** The provider should offer clear timelines, regular updates, and a dedicated project manager to ensure the project stays on track. Comparing providers should not be based on cost alone. Consider their technical capabilities, depth of expertise, and ability to support your overall regulatory strategy. > To find qualified vetted providers [click here](https://cruxi.ai/regulatory-directories/biocompatibility_testing) and request quotes for free. ### Key FDA References When navigating biocompatibility requirements, sponsors should refer to the latest official documents on the FDA's website. Key references include: * FDA Guidance: "Use of International Standard ISO 10993-1, 'Biological evaluation of medical devices - Part 1: Evaluation and testing within a risk management process'" * 21 CFR Part 820 – Quality System Regulation (the regulation being updated by the QMSR) * The FDA's final rule on the Quality Management System Regulation (QMSR) * FDA's Q-Submission Program guidance *** This article is for general educational purposes only and is not legal, medical, or regulatory advice. For device-specific questions, sponsors should consult qualified experts and consider engaging FDA via the Q-Submission program. --- *This answer was AI-assisted and reviewed for accuracy by Lo H. Khamis.*