Start an ISO 13485 Quality Management System Consultancy for Device Makers

1. 1

   Know exactly what ISO 13485 requires and why it is mandatory

   ISO 13485 is the internationally recognized quality management system standard for medical devices, and a compliant quality system is not optional: the FDA's Quality System Regulation requires it for US market devices, Europe and most global markets require ISO 13485 certification, and no manufacturer clears or keeps a device on the market without one. The standard covers document control, design controls, risk management, supplier controls, corrective and preventive action (CAPA), and more. Your expertise is turning that standard into a real, working, auditable system inside a specific company, which is craft, not box-ticking.

2. 2

   Ride the QMSR transition deliberately

   In 2026 the FDA replaces its longstanding Quality System Regulation with the Quality Management System Regulation (QMSR), which harmonizes US requirements with ISO 13485. That means thousands of US device makers must review and update their quality systems to the new expectations on a deadline, and most small ones have no idea where to start. A gap assessment and transition service timed to this change is a concrete, urgent, sellable offer, and being the consultant who explains the transition clearly is a business development event in itself.

3. 3

   Package the work as a staged build, not vague help

   Sell defined phases: a gap assessment against the standard, a quality manual and procedure build, design controls and risk management (ISO 14971) setup, CAPA and document control implementation, internal audits, and audit-readiness or notified-body preparation. Fixed-scope phases let a small manufacturer buy the piece they need now and come back for the next, and they make your pricing and your value legible.

4. 4

   Set up as a credible, insured firm

   LLC, professional liability insurance, engagement letters separating consulting from legal advice, and a portfolio of the standards and device types you know. If you hold auditor credentials or lead-auditor training, feature them; if you came up running quality inside a manufacturer, your operator experience is equally persuasive. You are not the certifying body (that is an independent registrar); you build the system that passes their audit, and being clear about that distinction builds trust.

5. 5

   Win the small manufacturers and startups first

   Large device companies have quality departments; your buyers are small manufacturers, startups approaching their first clearance, and contract manufacturers who need certification to win device-company clients. Reach them through medtech startup communities, regulatory consultant referral relationships (the pathway consultant and the quality consultant are natural partners), and content that demystifies the standard and the QMSR change.

6. 6

   Grow into retainers and audit support

   A quality system is not built once and forgotten; it needs maintenance, internal audits, CAPA support, and readiness for surveillance audits and FDA inspections. Convert the initial build into an ongoing quality-partner retainer, and as demand grows, subcontract specialist auditors rather than trying to personally cover every device area and every audit at once.

Do not take our word for the money. Put your own numbers in and see what this idea has to earn before it works. Free, instant, no account needed.

Best for: Quality engineers, regulatory and compliance professionals, and former device-company quality leaders

Not for: Not for anyone without genuine quality-systems experience, because auditors and the FDA test whether the system actually works. Not for people who want to hand over a binder and leave, since a paper system that nobody follows fails immediately. And not for those who confuse building a system with certifying it; certification belongs to an independent registrar, and blurring that line breaks trust.