Developing a Software as a Medical Device (SaMD) application to support an in vitro diagnostic (IVD) medical device requires far more than software development alone. A compliant quality management system, documented risk management, software lifecycle controls, validation evidence and ongoing audit readiness are all essential components for demonstrating conformity with regulatory and quality management requirements.

This Queensland-based IVD medical device start-up developed software designed to review patient medical results generated from its IVD testing kit. As commercial development progressed, the organisation required assistance to strengthen its quality management system before seeking ISO 13485 certification and to establish a sustainable compliance framework capable of supporting future growth.

Quality Systems Now provided targeted support to identify compliance gaps, strengthen documentation, improve validation activities, prepare personnel through structured training and conduct independent mock inspections before external certification audits. Following successful implementation, the engagement transitioned into an ongoing annual audit readiness program designed to maintain continual compliance and organisational preparedness.

Project Background

The organisation had invested significant effort into product development and had established a quality management system containing numerous documented procedures. Subject matter experts had prepared many of these documents while technical teams simultaneously advanced software development and product validation activities.

Although considerable progress had been achieved, management recognised that certification success would depend upon demonstrating not only documented procedures but also consistent implementation, objective evidence, effective risk management and traceability throughout the quality management system.

The software component formed an important element of the overall IVD medical device by reviewing patient medical results produced by the diagnostic kit. As a result, software lifecycle processes, validation activities and documented risk management required alignment with recognised international standards alongside the overarching ISO 13485 quality management system.

The organisation therefore sought specialist assistance to objectively assess its readiness before engaging with a notified body and to establish a practical framework supporting long-term compliance.

Objectives

The primary objectives of the engagement included identifying quality management system deficiencies, reviewing newly developed documentation, strengthening validation activities, improving workforce understanding of applicable standards and conducting comprehensive mock inspections before external certification activities.

The project also sought to establish a repeatable process for ongoing audit readiness rather than focusing solely on initial certification. This approach supports continual improvement and enables organisations to respond efficiently to surveillance and recertification audits throughout the lifecycle of the quality management system.

Scope of Support

Quality Systems Now delivered a structured program tailored to the maturity of the organisation and the complexity of its software-enabled IVD medical device.

Services included an ISO 13485 gap assessment of the existing quality management system together with documented recommendations and identified compliance risks. Existing procedures and quality records were examined to determine alignment with applicable requirements while identifying opportunities for improvement.

New quality management system procedures developed internally by subject matter experts were independently reviewed for technical consistency, completeness, document control and compatibility with existing processes. Feedback focused on maintaining practical implementation while ensuring alignment with applicable quality management requirements.

The organisation's validation program was also reviewed to assess planning, execution, documentation and objective evidence supporting validation activities. Recommendations were provided to strengthen validation records and improve traceability between requirements, testing and documented outcomes.

Targeted training sessions were delivered covering ISO 13485, ISO 14971, IEC 62304 and Good Documentation Practice. Training was designed to improve understanding across technical and quality personnel while reinforcing consistent application of documented procedures throughout daily operations.

Comprehensive mock ISO 13485 inspections were conducted before notified body inspections. These simulated external audits evaluated documentation, implementation, personnel knowledge and objective evidence using an independent assessment approach intended to identify remaining weaknesses before certification activities commenced.

Following certification preparation, annual mock inspections continued as part of an ongoing audit readiness program supporting continual compliance and organisational confidence before subsequent notified body inspections.

Standards Supporting the Project

ISO 13485 provided the framework for the organisation's quality management system, establishing requirements for documented processes, management responsibility, resource management, product realisation and continual improvement.

ISO 14971 supported systematic identification, evaluation, control and monitoring of risks associated with the medical device throughout its lifecycle. Risk management activities were reviewed to ensure appropriate linkage between identified hazards, implemented controls and supporting evidence.

IEC 62304 guided software lifecycle activities relevant to the medical device software, including software development planning, verification, maintenance and associated documentation.

ISO/TR 80002-2 provided additional guidance regarding the application of ISO 14971 principles within medical device software development, supporting integration between software engineering activities and risk management processes.

Good Documentation Practice training reinforced expectations regarding document integrity, traceability, consistency and controlled records throughout the quality management system.

Outcomes

The structured review process enabled the organisation to address identified deficiencies before external certification activities. Recommendations generated during the gap assessment provided clear priorities for remediation while supporting more effective allocation of internal resources.

Independent review of quality management system procedures improved consistency across documentation and strengthened alignment between documented processes and operational practice.

Review of validation activities enhanced confidence that planned testing, documented evidence and validation records adequately supported intended use and demonstrated appropriate traceability.

Training improved organisational understanding of quality management principles, software lifecycle expectations, risk management methodologies and documentation practices. Increased staff awareness supported more consistent implementation of procedures throughout routine operations.

Mock inspections provided valuable experience for personnel by replicating the structure and expectations of external certification audits. Potential nonconformities and documentation weaknesses were identified before formal assessment, allowing corrective actions to be implemented proactively rather than reactively.

The ongoing annual mock inspection program established a sustainable audit readiness framework that continued supporting compliance beyond initial certification activities.

Conclusion

Successful implementation of an ISO 13485 quality management system extends beyond document creation. Effective compliance requires integration of quality management, risk management, software lifecycle controls, validation, staff competence and continual audit preparedness into routine organisational practice.

For this Queensland IVD medical device start-up, Quality Systems Now delivered practical regulatory and quality management support across each of these critical areas. Gap assessments, documentation reviews, validation support, standards-based training and independent mock inspections strengthened organisational capability before certification while establishing processes that continue supporting long-term compliance and ongoing audit readiness.