eQMS Requirements Checklist for Medical Devices 2025

147-Point Assessment for Medical Device Quality Management Systems
Covers: FDA 21 CFR 820 | ISO 13485:2016 | EU MDR | MDSAP

What This eQMS Requirements Checklist Helps You Achieve

Building a fully compliant electronic Quality Management System (eQMS) is one of the most important steps for any medical device manufacturer entering regulated markets. This checklist has been created to help startups, scale-ups and established companies understand exactly what regulators expect under EU MDR/IVDR, FDA 21 CFR 820, and ISO 13485:2016.
Whether you are preparing for CE marking, planning a QMS upgrade, or transitioning from a paper-based system, this page provides a clear, actionable overview of the core eQMS requirements:
  • Document control and electronic record management
  • Design and development procedures
  • Risk management and traceability
  • Supplier and production controls
  • Post-market surveillance (PMS) and vigilance
  • Audit readiness and continuous improvement
  • Data integrity and system validation for software-based QMS tools
Each requirement is mapped to its regulatory source, allowing you to understand exactly which obligations apply and how they align across MDR, FDA, and ISO standards. This makes it easier to identify gaps and build an eQMS that meets global expectations — without wasting time on unnecessary paperwork.
This checklist is especially useful for medical device startups, digital health developers, and manufacturers beginning their compliance journey. By tracking your progress directly on this page, you can move efficiently toward a fully compliant, audit-ready eQMS that supports safe, effective, and reliable medical device development.

Why a Strong eQMS Matters for Medical Device Companies

A well-structured eQMS does more than satisfy regulators. It reduces development risk, improves product quality, speeds up certification timelines, and helps organizations scale responsibly. Companies with a robust eQMS experience:
  • Faster Notified Body and FDA engagement
  • Fewer non-conformities in audits
  • Stronger documentation for technical files and regulatory submissions
  • Better traceability and risk-benefit evidence
  • Increased investor confidence and operational predictability
If you are building a new quality management system or improving an existing one, this checklist provides a practical foundation for achieving global medical device compliance with clarity and confidence.
Total Items
147
Completed
0
Progress
0%

1. Management Responsibility

Quality Policy & Objectives 8 items
  • Documented quality policy signed by top management
    ALL
  • Quality objectives with measurable targets
    ISOMDR
  • Management representative appointed with defined authority
    FDAISO
  • Person Responsible for Regulatory Compliance (PRRC) designated
    MDR Art.15
  • Organizational structure and responsibilities documented
    ALL
  • Resource allocation for QMS maintenance
    ISO
  • Management review procedure established
    ALL
  • Management review conducted at planned intervals (min. annually)
    ALL

2. Document Control

Document Management System 12 items
  • Document control procedure (SOP-001 or equivalent)
    ALL
  • Master document list maintained
    ALL
  • Document approval process before issue
    ALL
  • Document review and update process
    ALL
  • Version control system implemented
    ALL
  • Obsolete document control
    ALL
  • External document control (standards, regulations)
    ISO
  • Document retention periods defined
    ALL
  • Electronic document control validation (if applicable)
    FDA
  • Document distribution control
    ALL
  • Document change control process
    ALL
  • Quality manual maintained and current
    ISOMDR

3. Design Controls

Design and Development 20 items
  • Design control procedure covering all phases
    FDA 820.30ISO 13485
  • Design and development planning
    ALL
  • Design input requirements documented
    ALL
  • Design output documentation
    ALL
  • Design review at appropriate stages
    ALL
  • Design verification protocols and reports
    ALL
  • Design validation protocols and reports
    ALL
  • Design transfer procedures
    FDA
  • Design change control process
    ALL
  • Design history file (DHF) maintained
    FDA
  • Risk management integrated into design
    ALL
  • Usability engineering file
    FDAMDR
  • Software development lifecycle (if applicable)
    ALL
  • Clinical evaluation planning
    MDR
  • Biocompatibility assessment
    ALL
  • Packaging validation
    ALL
  • Sterilization validation (if applicable)
    ALL
  • Shelf life determination
    ALL
  • Transportation validation
    ISO
  • Design review board established
    FDA

4. Risk Management

ISO 14971 Requirements 15 items
  • Risk management plan for each device
    ALL
  • Risk management procedure aligned with ISO 14971
    ALL
  • Risk analysis conducted (FMEA, FTA, etc.)
    ALL
  • Risk evaluation criteria defined
    ALL
  • Risk control measures implemented
    ALL
  • Residual risk evaluation
    ALL
  • Risk/benefit analysis documented
    ALL
  • Risk management report completed
    ALL
  • Production and post-production information feedback
    ISO 14971
  • Software risk analysis (if applicable)
    ALL
  • Cybersecurity risk assessment (if applicable)
    FDAMDR
  • Use error risk analysis
    ALL
  • Risk management file maintained
    ALL
  • Risk review at defined intervals
    ALL
  • Risk communication to users (IFU, labeling)
    ALL

5. Production and Process Controls

Manufacturing Controls 18 items
  • Production planning and control procedures
    ALL
  • Process validation for special processes
    ALL
  • Work instructions for production
    ALL
  • Equipment qualification (IQ/OQ/PQ)
    ALL
  • Calibration of medical equipment program
    ALL
  • Preventive maintenance program
    ALL
  • Environmental control and monitoring
    ALL
  • Contamination control procedures
    ALL
  • Personnel hygiene requirements
    ALL
  • Material identification and traceability
    ALL
  • In-process inspection procedures
    ALL
  • Final inspection and testing
    ALL
  • Batch/lot release procedures
    ALL
  • Device history record (DHR) requirements
    FDA
  • Unique device identification (UDI) implementation
    FDAMDR
  • Statistical techniques defined (sampling plans)
    ALL
  • Rework procedures documented
    ALL
  • Software validation (manufacturing software)
    FDA

6. Non-Conformance and CAPA

Deviation Management & Corrective Actions 16 items
  • Non conformance report procedure established
    ALL
  • Non-conforming product identification
    ALL
  • Segregation of non-conforming product
    ALL
  • Investigation procedures
    ALL
  • Disposition authority defined
    ALL
  • CAPA (Corrective and Preventive Action) system
    ALL
  • Root cause analysis methods defined
    ALL
  • Effectiveness verification of CAPAs
    ALL
  • Deviation management process documented
    ALL
  • Trend analysis of non-conformances
    ISOFDA
  • Management review of CAPA system
    ALL
  • Rework validation requirements
    ALL
  • Scrap procedures and records
    ALL
  • Customer notification procedures (if required)
    ALL
  • Regulatory reporting for field actions
    ALL
  • CAPA tracking and metrics
    ALL

7. Purchasing and Supplier Controls

Supply Chain Management 12 items
  • Supplier evaluation and selection criteria
    ALL
  • Approved supplier list maintained
    ALL
  • Purchasing data requirements defined
    ALL
  • Incoming inspection procedures
    ALL
  • Supplier agreements/quality agreements
    ALL
  • Supplier audit program
    ALL
  • Supplier performance monitoring
    ALL
  • Critical component controls
    ALL
  • Change notification requirements
    ALL
  • Supplier non-conformance handling
    ALL
  • Verification of purchased product
    ALL
  • Supplier risk assessment
    ISOMDR

8. Training and Competence

Personnel Requirements 10 items
  • Training procedure established
    ALL
  • Job descriptions with qualification requirements
    ALL
  • Training needs assessment
    ALL
  • Training records maintained
    ALL
  • Effectiveness evaluation of training
    ISO
  • GMP training for production personnel
    ALL
  • Regulatory training program
    ALL
  • Competency assessments
    ISO
  • Consultant qualification (if used)
    FDA
  • Training matrix maintained
    ALL

9. Post-Market Surveillance

Market Surveillance & Vigilance 14 items
  • Post-market surveillance plan
    MDRFDA
  • Complaint handling procedure
    ALL
  • Complaint investigation process
    ALL
  • Vigilance reporting procedures (MDR, adverse events)
    ALL
  • Periodic safety update reports (PSUR)
    MDR
  • Post-market clinical follow-up (PMCF) plan
    MDR
  • Field safety corrective action (FSCA) procedures
    ALL
  • Recall procedures
    ALL
  • Trending of post-market data
    ALL
  • Customer feedback system
    ALL
  • Literature monitoring process
    MDR
  • Registry participation (if applicable)
    MDRFDA
  • Summary of safety and performance (SSCP)
    MDR
  • Post-market surveillance report
    MDR

10. Internal Audit and Improvement

Quality Assurance 8 items
  • Internal audit procedure
    ALL
  • Annual audit schedule
    ALL
  • Qualified internal auditors
    ALL
  • Audit reports and follow-up
    ALL
  • Management review inputs/outputs
    ALL
  • Quality metrics and KPIs
    ISO
  • Continuous improvement process
    ISO
  • Customer satisfaction monitoring
    ISO
0%

eQMS Implementation Complete

Keep going! You're making great progress on your quality system.