A generic ISO 13485 checklist can confirm that procedures exist. It cannot tell you what happens when an auditor stands beside an injection molding machine, selects a part that is running today, and asks the team to prove that the process is still operating in its validated state.
The molding-specific audit trail connects the approved material, mold, machine, process window, operator, maintenance history, inspection result, and released lot. A part that measures correctly is one data point. The quality-system question is whether the organization can show that the process was qualified, remained controlled, and produced every released batch under the planned conditions.
Start With the Current Regulatory Context
ISO 13485:2016 remains the current edition after ISO confirmed it in 2025. The standard applies not only to finished-device manufacturers but also to suppliers and external parties that provide products or services to organizations involved in medical-device production.
For the United States, the context changed on February 2, 2026. FDA’s Quality Management System Regulation (QMSR) became effective and incorporated ISO 13485:2016 by reference into the medical-device CGMP framework in 21 CFR Part 820. FDA also replaced the former QSIT inspection approach with Compliance Program 7382.850. Under QMSR, FDA investigators may review management-review, internal-audit, and supplier-audit records that had been exempt from routine review under the former rule. An ISO 13485 certificate does not exempt a manufacturer from FDA inspection
FDA states that QMSR applies to finished-device manufacturers. A company that molds components may instead be controlled as a supplier to the finished-device manufacturer unless its own role or product makes it directly regulated. That distinction should be confirmed for the actual business relationship rather than inferred from the word “medical.”
An ISO 13485 audit, an MDSAP audit, and an FDA inspection are not interchangeable. They use overlapping quality-system evidence but have different legal bases and audit programs. The organization must identify which requirements apply to its role, product and markets.
Read the Certificate Scope Before the Audit
A certificate logo answers almost nothing by itself. Before visiting a molding supplier, review the certified legal entity, site address, standard edition, current status, certification body, accreditation, and scope statement. The scope must cover the location and activities relevant to the product being purchased. A genuine certificate for a different site or a narrow activity may not cover injection molding at all.
IAF CertSearch recommends checking whether a certificate is active, suspended, withdrawn or expired and reviewing the associated standard and scheme. If a public search does not return a record, ask for the certificate number and certification body rather than treating a missing search result as automatic proof of invalidity.
Certification is also not a substitute for supplier qualification. The MDSAP Audit Approach states that third-party certification may be considered during supplier evaluation but should not be the only basis for the initial evaluation.
1. Process Validation: Can the Molding Process Consistently Achieve the Planned Result?
ISO 13485 requires validation when a production process result cannot be fully verified by subsequent monitoring or measurement. The public MDSAP Audit Approach identifies injection molding as a common example and, in its United States country-specific guidance, states that process validation is required for injection molding under 21 CFR 820.75.
The practical audit starts with a real part. Ask for the validation package for a product currently in production, then compare the established conditions with what is running now. A credible package should show:
- Predetermined product and process specifications, with acceptance criteria written before the study.
- A sampling plan supported by a statistical rationale appropriate to the risk and characteristics being evaluated.
- Evidence that process tolerance limits or operating extremes were challenged, not only nominal settings.
- Data demonstrating that the process repeatedly met the predetermined requirements.
- Confirmation that production and measurement equipment was installed, adjusted, calibrated and maintained as applicable.
- Qualification of operators who perform the validated process.
- A documented review of changes made after validation and a revalidation decision where appropriate.
Organizations often organize this work as installation qualification, operational qualification and performance qualification. The labels are useful, but the evidence matters more than the acronym: the study must establish by objective data that the process can consistently achieve its planned result. IMDRF’s GHTF process-validation guidance provides a public framework for this lifecycle. [6]
Compare the Validated Window With the Current Process
An audit should not stop at a signed validation report. Select the current work instruction and production record, then compare approved limits with actual machine settings and recorded results. Check melt and mold temperature controls, injection and transfer conditions, packing, cooling, alarms, cavity strategy, and any project-specific critical parameters. The work instruction available to production personnel should be the current approved revision.
A common gap is a process that was validated at program launch, then moved to another press or modified after tooling work without a documented assessment. The failure is not that every change automatically requires full revalidation; it is that no controlled decision explains why the existing evidence still applies.
2. Traceability: Build the Depth From Risk
ISO 13485 traceability is not identical for every medical device. The MDSAP Audit Approach states that, for devices that are not implantable, life-supporting or life-sustaining, the organization can determine which raw materials and components require traceability based on the risk created if they do not meet requirements. For implantable and life-supporting or life-sustaining devices, the expected traceability is deeper and may include components, materials, relevant work-environment conditions, inspectors and distribution information.
For a molded component, a practical backward trace starts with a finished lot and follows the record to the approved resin and colorant lots, production date, mold identity, machine, operator or responsible personnel, process record, inspection status, and release authorization. A forward trace starts with a resin or component lot and identifies every affected molded lot and shipment.
Mold and cavity identification are not universally mandated for every component, but they are powerful risk controls. If a dimensional defect occurs in one cavity of a multi-cavity mold, lot-level traceability without cavity information may identify too much product to isolate the failure. The need for cavity-level marking or recording should be determined during risk and quality planning.
| Evidence chain | What the auditor is testing | Typical molding record |
|---|---|---|
| Material to released lot | Approved material and affected-product identification | Resin/colorant lot, receiving status, production batch and shipment link |
| Process to product | Production occurred under current, approved controls | Machine, mold, work instruction, parameter record and in-process checks |
| Inspection to release | Only accepted product was released | Measurement result, product status, nonconformance disposition and release approval |
| Change to validated state | Changes were assessed and evidence remains applicable | Repair/change record, risk assessment, inspection or revalidation decision |
3. Change Control: Treat Tooling and Shop-Floor Changes as Quality-System Events
A design-change procedure may be strong while shop-floor changes remain informal. Injection molding creates a long list of changes that can affect product or validated state: welding a cavity, replacing an ejector pin, repolishing a shutoff, changing a vent, moving the mold to another press or plant, approving an alternate resin, changing colorant, or altering a regrind limit.
The correct response is not an automatic full revalidation for every event. Each change should enter a documented assessment that asks:
- Could the change affect an essential product requirement, risk control, critical dimension, surface, cleanliness or material condition?
- Does it move the process outside the equipment, material or parameter range covered by existing validation evidence?
- What inspection, qualification or process challenge is needed to demonstrate continued conformity?
- Does the customer, regulatory file, quality agreement or market authorization require notification or approval?
MDSAP instructs auditors to verify that process changes resulting from corrective or preventive action are assessed for new risk and that processes are revalidated where appropriate. For a change to a validated process performed by a supplier, the finished-device organization remains responsible for evaluating whether revalidation is required.
4. The Rest of the Molding Evidence
Equipment and Mold Maintenance
Auditors verify that infrastructure and process equipment affecting product quality have documented maintenance requirements and maintained records. For molding, that means more than the injection press. The plan may include the mold, temperature-control equipment, dryers where applicable, material-handling systems, automation and other equipment whose deterioration could affect the product.
Calibration and Measurement Control
The organization should identify measurement equipment needed to demonstrate conformity, define suitable accuracy and precision, and maintain calibration and control records. If a gauge is found out of tolerance, the organization must assess the validity of earlier measurements and the impact on in-process, released or distributed product. The audit should include shop-floor gauges as well as laboratory equipment.
Personnel Competence
Training records should connect personnel to the work they perform. MDSAP specifically notes that personnel who perform validated processes must be qualified. When a process nonconformity is linked to an operator or setup activity, auditors may review the related training and competence records.
Nonconforming Product and Corrective Action
Identification, segregation, evaluation, disposition and release controls should prevent nonconforming molded product from mixing with accepted lots. A closed corrective action should show not only the correction, but also the cause analysis, implemented action and effectiveness check. Recurrence in complaints, scrap or cavity-specific data can indicate that the action did not address the system cause.
Supplier and Subcontractor Controls
A molder’s own suppliers and outsourced processes remain part of the evidence chain. Material suppliers, calibration services, external laboratories, mold-repair providers and outsourced secondary operations should be controlled in proportion to their effect on the finished device. MDSAP expects defined selection, monitoring and re-evaluation criteria, change-notification arrangements where appropriate, and evidence that supplied product continues to meet requirements.
Contamination Control and the Work Environment
A controlled environment is not automatically a cleanroom, and ISO 13485 certification does not by itself prove that one is available or required. The organization should first identify the work-environment and contamination risks that can affect the specific product, then define proportionate controls and records. MDSAP directs auditors to examine work-environment requirements, personnel practices, and contamination controls where they can affect product quality.
For a molding audit, follow the product through the applicable controls: material and personnel flow, zoning or segregation, gowning or protective clothing, cleaning methods and frequency, particulate or microbiological limits when specified, environmental monitoring, pest or foreign-material control, maintenance entry, line clearance, handling after molding, packaging, excursions, and product disposition. If the supplier claims a cleanroom or another classified environment, verify the named room, classification basis, monitoring locations and frequencies, alert/action limits, qualification and maintenance records, and whether the audited product actually passes through that state. If no controlled environment is required, the risk assessment and product specification should make that rationale visible.
Five Requests That Reveal More Than a Generic Questionnaire
When a full on-site audit is not yet practical, the following evidence requests provide a focused first screen:
- Show the validation report and current production record for a molded part that is running now.
- Trace one released molded lot backward to the approved raw-material lot and production evidence, then trace that material lot forward to affected product.
- Show the last three mold or process changes and the documented validation-impact decision for each.
- Show a closed molding-related corrective action, including its effectiveness verification.
- Show when the selected mold and critical production or measuring equipment were last maintained or calibrated, and how overdue or out-of-tolerance conditions are handled.
These requests are not a substitute for an audit and do not define universal ISO 13485 acceptance criteria. They are practical ways to test whether the documented system reaches the molding floor and can produce evidence on a real product without depending on one person’s memory.
For the backward-and-forward trace, agree on an observation period before the exercise and record the elapsed time, systems searched, manual reconstruction, missing links, and help required. Retrieval time is diagnostic of record usability and recall readiness; it is not an ISO 13485 pass/fail limit unless the organization or customer has established one.
Plan Validation and Records Before Production Release
Validation time belongs in the program schedule. The medical-device manufacturer and molding supplier should define the validation strategy, critical parameters, measurement methods, traceability depth, change-notification rules, record retention, sample sizes, responsibilities and deliverables before production release. Late discovery of these requirements can force a new trial after tooling and production plans have already been fixed.
Material and equipment continuity can reduce the burden, but stability should not be confused with inflexibility. When a change is needed, the quality system should make the decision visible: what changed, what risk it creates, which prior evidence still applies, and what new evidence is necessary.
As public supplier-scoping references—not audit evidence—HordRT’s medical-device industry page, inspection workflow, and plastic injection molding service can help frame questions about scope, inspection, material records, and molding handoffs. Certification status and scope, controlled-environment claims, validated processes, traceability depth, and project deliverables still require current site-specific records.
Frequently Asked Questions
Does ISO 13485 automatically require every injection molding process to use the same validation protocol?
No. The organization must define a protocol appropriate to the product, process, risk and applicable regulation. MDSAP identifies injection molding as a common validation example, and its U.S. guidance states that injection molding requires validation under 21 CFR 820.75, but the study design is project-specific.
Is an ISO 13485 certificate enough to approve an injection molder?
No. Confirm the certificate’s status, legal entity, site and scope, then evaluate process capability, validation evidence, supplier controls, traceability and performance according to product risk. Third-party certification should not be the sole initial supplier-evaluation method.
Must every molded medical part be traceable to an individual cavity?
Not universally. Traceability depth is based on device risk, applicable regulation and the manufacturer’s quality planning. Cavity identification is especially useful when a cavity-specific failure could affect product isolation or investigation.
Does every mold repair require full revalidation?
No. Every relevant repair should be assessed under change control. The impact assessment determines whether dimensional inspection, partial qualification, process challenge or full revalidation is appropriate.
Conclusion
The strongest ISO 13485 injection molding evidence follows a real part through three questions: Was the process validated to consistently achieve the planned result? Can the released lot be traced through the material, mold, production and inspection records at the depth required by risk? Were repairs, transfers and other changes controlled and assessed against the validated state? A certificate starts the conversation. The molding evidence completes it.
Sources
[1] ISO: ISO 13485:2016—Medical devices quality management systems. https://www.iso.org/standard/59752.html
[2] FDA: Quality Management System Regulation (QMSR). https://www.fda.gov/medical-devices/postmarket-requirements-devices/quality-management-system-regulation-qmsr
[3] FDA: QMSR Frequently Asked Questions. https://www.fda.gov/medical-devices/quality-management-system-regulation-qmsr/quality-management-system-regulation-frequently-asked-questions
[4] IAF CertSearch: Certificate Verification Guide. https://support.iafcertsearch.org/verifiers/certificate-verification/how-to-verify-a-company-certificate
[5] FDA/MDSAP: Audit Approach AU P0002.009. https://www.fda.gov/media/166672/download
[6] IMDRF: GHTF Study Group 3 Quality Systems—Process Validation Guidance Listing. https://www.imdrf.org/documents/ghtf-final-documents/ghtf-study-group-3-quality-systems
