Build the QMS around device risk and regulatory responsibility
ISO 13485 is not a general quality template with medical terminology added. Its value comes from applying documented controls to the device lifecycle: product requirements, design and development where applicable, purchasing, production, cleanliness or contamination control, traceability, release, complaint handling and corrective action.
For manufacturers, contract manufacturers, component suppliers and other medical-device organisations in Italy, the first implementation question is scope. The QMS needs to reflect the organisation's actual role, the devices or services covered and the regulatory responsibilities that follow from those activities.
Supplier control deserves particular attention because a device may depend on critical materials, software, sterilisation, calibration, testing or outsourced manufacturing. Approval criteria, quality agreements, change notification and performance monitoring should therefore be aligned with the risk created by the supplied product or service.
Qualitcert helps teams translate those responsibilities into controlled processes, usable records and an audit trail that connects requirements, risk, verification, release and post-market feedback.