ISO 13485-paragraphs for a SaaS SAMD needed or not?

Hirvo

Starting to get Involved
#1
The company has a low risk SaaS Samd, which have been in production use for years. No we are finalizing the quality system and I am asking your comments/opinions, which of the following paragraph should we cover in the quality system and which can we let be?

We have no physical product. It is only a software in cloud. All customers use the same solution with their own accounts. New customer gets the user accounts and some configurations are made in the service and the customers get a training to use the software. There is also some manuals in Internet to read. We have a sales support team for helping the customers for using the customer.

My best guess is following:
7.5 Production and service provision
7.5.1 Control of production and service provision ???
7.5.2 Cleanliness of product NA
7.5.3 Installation activities NA
7.5.4 Servicing activities ???
- "If your medical device requires servicing, then you must define servicing requirements, specifications, and procedures for doing so; these items are part of the medical device file. Servicing also requires special attention to make sure the device meets its specifications after the product has been serviced. Servicing records shall be documented and maintained as part of the product’s records."
7.5.5 Particular requirements for sterile medical devices NA
7.5.6 Validation of processes for production and service provision ???
7.5.7 Particular requirements for validation of processes for sterilization and sterile barrier systems NA
7.5.8 Identification NA
7.5.9 Traceability NA
7.5.10 Customer property NA
7.5.11 Preservation of product NA
7.6 Control of monitoring and measuring equipment NA
8 Measurement, analysis and improvement (PMS Process)
8.1 General (PMS Process)
8.2 Monitoring and measurement (PMS Process)
8.2.1 Feedback (PMS Process)
8.2.2 Complaint handling (PMS Process)
8.2.3 Reporting to regulatory authorities (PMS Process)
8.2.4 Internal audit (Internal Audits Process)
8.2.5 Monitoring and measurement of processes (CAPA)
8.2.6 Monitoring and measurement of product NA
8.3 Control of nonconforming product NA
8.3.1 General NA
8.3.2 Actions in response to nonconforming product detected before delivery NA
8.3.3 Actions in response to nonconforming product detected after delivery NA
8.3.4 Rework NA
 
Elsmar Forum Sponsor

yodon

Staff member
Super Moderator
#2
7.5.3 Installation activities. I would include. You DO install the software. You probably do something to make sure the install is correct.

7.5.4 Service. I've been in some debate about "service" related to software. I think we came to the agreement that there could be cases where "service" applies. For example, you may have to clear out logs or databases or something periodically. I was able to convince the auditor that bug fixes were not servicing.

7.5.6 Validation of processes. The problem here is that you do use computer software in the 'production' process (compilers / IDEs). So we include it.

7.5.8 Identification. I think we include it and tailor it for software; i.e., we can always tell what a production build is -v- a debug build. Mostly administrative (segregation).

7.5.11 Preservation of product. The software could be "adulterated" in the install process. This kind of ties with 62304 5.8.5. We include a checksum to ensure the installed product matches the as-built load.

8.2.6 Monitoring and measurement of product. Absolutely! You certainly test before release!

8.3 Control of nonconforming product. You can absolutely have "nonconforming" product in fielded software. It's handled much differently than physical products but I think there's an expectation that if you fail to meet specifications, it's nonconforming.

This is a healthy discussion and I would enjoy seeing if others have my same or different thoughts.
 

DannyK

Trusted Information Resource
#3
Here are some comments. I hope it helps.

7.5.3 Installation-This is your deployment process and could also include the initial training.
7.5.4 Servicing- there may be issues that may require software patches. You will track all these inquiries and complaints however they are sent to you.
7.5.6 Validation- are there any automated processes?
7.5.8 Identification- identify the build number and software version
7.5.9 Traceability- which clients have which software version
8.2.6 Monitoring and measuring of product- you have to release the product to ensure that it meets requirements.
8.3 Nonconforming product- you have to track bugs
 
Thread starter Similar threads Forum Replies Date
P ISO 13485:2003 6.4 vs 7.5.1.2.1 - For me these paragraphs are very close ISO 13485:2016 - Medical Device Quality Management Systems 1
D Notified Bodies - ISO 13485 & MDR Technical Files ISO 13485:2016 - Medical Device Quality Management Systems 3
D Deviations - Where in ISO 13485 deviations are covered? ISO 13485:2016 - Medical Device Quality Management Systems 7
B ISO 13485 Certification ISO 13485:2016 - Medical Device Quality Management Systems 2
Y ISO 13485:2015 Software Validation IQ/OQ/PQ ISO 13485:2016 - Medical Device Quality Management Systems 12
J ISO 13485 for Metal Finishing Medical Device and FDA Regulations and Standards News 5
S How to calculate Effective Number of People for ISO 13485 Certification? General Auditing Discussions 2
D Question regarding where "validations" fit according to ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 1
E Any template/ form of Monitoring and Measurement of Processes and product to ISO 13485? ISO 13485:2016 - Medical Device Quality Management Systems 1
D Question on using audit checklist ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 20
M ISO 13485 and document control for programs ISO 13485:2016 - Medical Device Quality Management Systems 6
M Customer Property - ISO 13485:2016 Clause 7.5.10 ISO 13485:2016 - Medical Device Quality Management Systems 9
pbojsen ISO 13485 Requirements versus FDA product classification and GMP exemptions - Audits ISO 13485:2016 - Medical Device Quality Management Systems 3
D Lead time to schedule an ISO 13485 audit General Auditing Discussions 2
S Does anyone have a checklist to prepare for ISO 13485, Stage I audit? ISO 13485:2016 - Medical Device Quality Management Systems 1
H QMS ISO 13485:2016 - ISO14971 IEC60304 etc ISO 13485:2016 - Medical Device Quality Management Systems 6
B Operational Procedures for ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 7
D ISO 14971 applicability in ISO 13485 ISO 13485:2016 - Medical Device Quality Management Systems 7
E ISO 13485 in Clinical Trial conduct: Applicable or No ISO 13485:2016 - Medical Device Quality Management Systems 2
G ISO 13485 Certification - Can we get the ISO 13485 certification prior to shipment of the device? ISO 13485:2016 - Medical Device Quality Management Systems 6
N Does anyone use SGS for ISO 13485 / CE certification Registrars and Notified Bodies 0
Ed Panek ISO 13485:2016 Section 5.5.3 ISO 13485:2016 - Medical Device Quality Management Systems 3
ebrahim QMS as per ISO 13485, Clause 4.2 Requirements for regulatory purposes for Medical Devices Authorized Representatives. ISO 13485:2016 - Medical Device Quality Management Systems 3
D ISO 13485 scope (implantable) - Polymers for dental application EU Medical Device Regulations 9
N ISO 13485 7.3.9 Change control in medical device software ISO 13485:2016 - Medical Device Quality Management Systems 6
A ISO 13485 procedure change and reflect to legacy manufacture items ISO 13485:2016 - Medical Device Quality Management Systems 2
D ISO 13485 & CE Certification for Surgical Gloves CE Marking (Conformité Européene) / CB Scheme 0
S Inventory Listing and ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 3
M ISO 13485:2016 Certification Scope ISO 13485:2016 - Medical Device Quality Management Systems 3
D Reports under change management | ISO 13485:2016 & ISO 9001:2015 ISO 13485:2016 - Medical Device Quality Management Systems 3
M Scope for ISO 13485 Certification of a Translation Service Provider ISO 13485:2016 - Medical Device Quality Management Systems 17
Q ISO 13485 7.5.6 Validation - Off the shelf Software ISO 13485:2016 - Medical Device Quality Management Systems 3
A ISO 13485 Certification for Resin Manufacturer ISO 13485:2016 - Medical Device Quality Management Systems 4
A ISO 13485 Sterilization Clause Applicability ISO 13485:2016 - Medical Device Quality Management Systems 7
K ISO 13485 and compliance of electronic signature ISO 13485:2016 - Medical Device Quality Management Systems 5
T ISO 13485 - Assembly instructions written vs. online ISO 13485:2016 - Medical Device Quality Management Systems 5
M ISO 13485:2016 internal audit checklist Medical Device and FDA Regulations and Standards News 8
N 93/42/EEC certification without ISO 13485 EU Medical Device Regulations 3
M How Specific in an ISO 13485:2016 Scope for a Contract Manufacturer ISO 13485:2016 - Medical Device Quality Management Systems 9
A ISO 13485 for Class 1 Medical Device ISO 13485:2016 - Medical Device Quality Management Systems 7
0 ISO 13485:2016 Chapter 8 Integration of the subsections ISO 13485:2016 - Medical Device Quality Management Systems 3
M Change in Constitution / Ownership of firm -------ISO 13485 ISO 13485:2016 - Medical Device Quality Management Systems 1
E ISO 13485 QMS certification as a Supplier ISO 13485:2016 - Medical Device Quality Management Systems 8
T ISO 13485:2016 Clauses related to process matrix ISO 13485:2016 - Medical Device Quality Management Systems 3
J Can signed agreements over-ride review of every "contract" under ISO 13485:2016? ISO 13485:2016 - Medical Device Quality Management Systems 2
J Implementing an ISO 13485 QMS Software ISO 13485:2016 - Medical Device Quality Management Systems 9
Q EN ISO 13485:2016/AC:2018 - AC:2018 being stated in the applicable harmonized standard listing Other ISO and International Standards and European Regulations 1
J Leveraging another company's ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 5
J New Job Position - Achieving ISO 13485 Certification ISO 13485:2016 - Medical Device Quality Management Systems 5
A Scope of ISO 13485 certificate ISO 13485:2016 - Medical Device Quality Management Systems 1

Similar threads

Top Bottom