ISO 13485-paragraphs for a SaaS SAMD needed or not?

Hirvo

Starting to get Involved
#1
The company has a low risk SaaS Samd, which have been in production use for years. No we are finalizing the quality system and I am asking your comments/opinions, which of the following paragraph should we cover in the quality system and which can we let be?

We have no physical product. It is only a software in cloud. All customers use the same solution with their own accounts. New customer gets the user accounts and some configurations are made in the service and the customers get a training to use the software. There is also some manuals in Internet to read. We have a sales support team for helping the customers for using the customer.

My best guess is following:
7.5 Production and service provision
7.5.1 Control of production and service provision ???
7.5.2 Cleanliness of product NA
7.5.3 Installation activities NA
7.5.4 Servicing activities ???
- "If your medical device requires servicing, then you must define servicing requirements, specifications, and procedures for doing so; these items are part of the medical device file. Servicing also requires special attention to make sure the device meets its specifications after the product has been serviced. Servicing records shall be documented and maintained as part of the product’s records."
7.5.5 Particular requirements for sterile medical devices NA
7.5.6 Validation of processes for production and service provision ???
7.5.7 Particular requirements for validation of processes for sterilization and sterile barrier systems NA
7.5.8 Identification NA
7.5.9 Traceability NA
7.5.10 Customer property NA
7.5.11 Preservation of product NA
7.6 Control of monitoring and measuring equipment NA
8 Measurement, analysis and improvement (PMS Process)
8.1 General (PMS Process)
8.2 Monitoring and measurement (PMS Process)
8.2.1 Feedback (PMS Process)
8.2.2 Complaint handling (PMS Process)
8.2.3 Reporting to regulatory authorities (PMS Process)
8.2.4 Internal audit (Internal Audits Process)
8.2.5 Monitoring and measurement of processes (CAPA)
8.2.6 Monitoring and measurement of product NA
8.3 Control of nonconforming product NA
8.3.1 General NA
8.3.2 Actions in response to nonconforming product detected before delivery NA
8.3.3 Actions in response to nonconforming product detected after delivery NA
8.3.4 Rework NA
 
Elsmar Forum Sponsor

yodon

Leader
Super Moderator
#2
7.5.3 Installation activities. I would include. You DO install the software. You probably do something to make sure the install is correct.

7.5.4 Service. I've been in some debate about "service" related to software. I think we came to the agreement that there could be cases where "service" applies. For example, you may have to clear out logs or databases or something periodically. I was able to convince the auditor that bug fixes were not servicing.

7.5.6 Validation of processes. The problem here is that you do use computer software in the 'production' process (compilers / IDEs). So we include it.

7.5.8 Identification. I think we include it and tailor it for software; i.e., we can always tell what a production build is -v- a debug build. Mostly administrative (segregation).

7.5.11 Preservation of product. The software could be "adulterated" in the install process. This kind of ties with 62304 5.8.5. We include a checksum to ensure the installed product matches the as-built load.

8.2.6 Monitoring and measurement of product. Absolutely! You certainly test before release!

8.3 Control of nonconforming product. You can absolutely have "nonconforming" product in fielded software. It's handled much differently than physical products but I think there's an expectation that if you fail to meet specifications, it's nonconforming.

This is a healthy discussion and I would enjoy seeing if others have my same or different thoughts.
 

DannyK

Trusted Information Resource
#3
Here are some comments. I hope it helps.

7.5.3 Installation-This is your deployment process and could also include the initial training.
7.5.4 Servicing- there may be issues that may require software patches. You will track all these inquiries and complaints however they are sent to you.
7.5.6 Validation- are there any automated processes?
7.5.8 Identification- identify the build number and software version
7.5.9 Traceability- which clients have which software version
8.2.6 Monitoring and measuring of product- you have to release the product to ensure that it meets requirements.
8.3 Nonconforming product- you have to track bugs
 
#4
The company has a low risk SaaS Samd, which have been in production use for years. No we are finalizing the quality system and I am asking your comments/opinions, which of the following paragraph should we cover in the quality system and which can we let be?

We have no physical product. It is only a software in cloud. All customers use the same solution with their own accounts. New customer gets the user accounts and some configurations are made in the service and the customers get a training to use the software. There is also some manuals in Internet to read. We have a sales support team for helping the customers for using the customer.

My best guess is following:
7.5 Production and service provision
7.5.1 Control of production and service provision ???
7.5.2 Cleanliness of product NA
7.5.3 Installation activities NA
7.5.4 Servicing activities ???
- "If your medical device requires servicing, then you must define servicing requirements, specifications, and procedures for doing so; these items are part of the medical device file. Servicing also requires special attention to make sure the device meets its specifications after the product has been serviced. Servicing records shall be documented and maintained as part of the product’s records."
7.5.5 Particular requirements for sterile medical devices NA
7.5.6 Validation of processes for production and service provision ???
7.5.7 Particular requirements for validation of processes for sterilization and sterile barrier systems NA
7.5.8 Identification NA
7.5.9 Traceability NA
7.5.10 Customer property NA
7.5.11 Preservation of product NA
7.6 Control of monitoring and measuring equipment NA
8 Measurement, analysis and improvement (PMS Process)
8.1 General (PMS Process)
8.2 Monitoring and measurement (PMS Process)
8.2.1 Feedback (PMS Process)
8.2.2 Complaint handling (PMS Process)
8.2.3 Reporting to regulatory authorities (PMS Process)
8.2.4 Internal audit (Internal Audits Process)
8.2.5 Monitoring and measurement of processes (CAPA)
8.2.6 Monitoring and measurement of product NA
8.3 Control of nonconforming product NA
8.3.1 General NA
8.3.2 Actions in response to nonconforming product detected before delivery NA
8.3.3 Actions in response to nonconforming product detected after delivery NA
8.3.4 Rework NA
Hi Hirvo,
How did it end up going with your QMS. I'm in the exact situation with audits coming up and was wondering if auditors agreed with the non-applicable clauses?
 
Thread starter Similar threads Forum Replies Date
P ISO 13485:2003 6.4 vs 7.5.1.2.1 - For me these paragraphs are very close ISO 13485:2016 - Medical Device Quality Management Systems 1
Q ISO 13485 certificate needed if I go for MDSAP certification? ISO 13485:2016 - Medical Device Quality Management Systems 1
K ISO 13485 Design Requirement with respect to "component" manufacturers ISO 13485:2016 - Medical Device Quality Management Systems 3
P Registrar Cancelled ISO 13485 Auditors multiple times? Registrars and Notified Bodies 1
rob3027 ISO 13485 justification for design and development exclusion for medical packaging ISO 13485:2016 - Medical Device Quality Management Systems 18
A Help understanding what it takes to implement a QMS that is ISO 13485 compliant ISO 13485:2016 - Medical Device Quality Management Systems 1
FuzzyD ISO 13485:2016 Customer Assessment OFI ISO 13485:2016 - Medical Device Quality Management Systems 2
M ISO 13485 consultants and auditors with design oriented focus ISO 13485:2016 - Medical Device Quality Management Systems 7
S Brexit ISO 13485:2016 + Corrigendum - What does a UKCA DoC require? EU Medical Device Regulations 2
Aliken Recommendation for the ISO 13485 certification company ISO 13485:2016 - Medical Device Quality Management Systems 7
ISO-tired ISO 13485: file structure overview ISO 13485:2016 - Medical Device Quality Management Systems 11
M PROBLEM IN SCOPE OF ISO 13485 ISO 13485:2016 - Medical Device Quality Management Systems 6
S ISO 13485 signing of Procedures etc. ISO 13485:2016 - Medical Device Quality Management Systems 10
N ISO 13485 Scope Reduction Other ISO and International Standards and European Regulations 2
M Can veterinary implants be ISO 13485 certified? ISO 13485:2016 - Medical Device Quality Management Systems 23
D Audit Report details when ISO 13485:2016 and cGMP 21 CFR 820 are applicable ISO 13485:2016 - Medical Device Quality Management Systems 6
R Looking for ISO 13485 Internal Audit Checklist ISO 13485:2016 - Medical Device Quality Management Systems 8
FuzzyD ISO 13485 change in process ISO 13485:2016 - Medical Device Quality Management Systems 3
R Interesting Discussion Chapter 7.5 of ISO 13485 for manufacturers of mobile medical applications ISO 13485:2016 - Medical Device Quality Management Systems 4
V ADDING NEW MEDICAL DEVICE / Product, WHEATHER THIS AFFECTS EXISTING ISO 13485 CERTIFICATION? ISO 13485:2016 - Medical Device Quality Management Systems 4
K Subcontractors Providing Services Under MDD or MDR need ISO 13485 from EU Notified Body? CE Marking (Conformité Européene) / CB Scheme 8
E Theoretical project: Implementing ISO 13485:2016 into a start up acrylic bone cement manufacturer ISO 13485:2016 - Medical Device Quality Management Systems 4
M ISO 13485: 2016 Lot numbering question ISO 13485:2016 - Medical Device Quality Management Systems 4
Q Documented Evidence of Training ISO 13485: 2016 ISO 13485:2016 - Medical Device Quality Management Systems 42
D Customer Survey Example - ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 7
D Normative References for ISO 13485 ISO 13485:2016 - Medical Device Quality Management Systems 5
A Scope of ISO 13485 certification as legal manufacturer ISO 13485:2016 - Medical Device Quality Management Systems 4
R ISO 13485 certification scope ISO 13485:2016 - Medical Device Quality Management Systems 5
M Requirements ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 12
M ISO 13485 Clause 7.3.8 ---- on Business Transfer ISO 13485:2016 - Medical Device Quality Management Systems 2
D ISO 13485--Question regarding performing calibrations in house. ISO 13485:2016 - Medical Device Quality Management Systems 13
I EN ISO 13485:2016/A11:2021 ISO 13485:2016 - Medical Device Quality Management Systems 0
A ISO 13485:2016 Clause 8.2.1 ISO 13485:2016 - Medical Device Quality Management Systems 3
FuzzyD ISO 13485:2016 Clause 8.2.6 ISO 13485:2016 - Medical Device Quality Management Systems 4
A ISO 13485 Calibration Requirements- Assess and Record validity Previous measuring results ISO 13485:2016 - Medical Device Quality Management Systems 5
K Can I make an exclusion of Design and Development in ISO 13485:2016 if my product is not regulated ISO 13485:2016 - Medical Device Quality Management Systems 12
S Is the Design Service Provider required to be ISO 13485 certified? ISO 13485:2016 - Medical Device Quality Management Systems 13
C ISO 13485 Clause 7.3.3 a) ISO 13485:2016 - Medical Device Quality Management Systems 2
S ISO 13485, Clause 4.1.2 b) ISO 13485:2016 - Medical Device Quality Management Systems 12
Ed Panek FDA Submits to White House Plan to Harmonize with ISO 13485 US Medical Device Regulations 2
B ISO 9001:2015 vs ISO 13485:2016 Gap analysis ISO 13485:2016 - Medical Device Quality Management Systems 9
K 3rd party auditor for ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 4
chris1price MDSAP and ISO 13485 ISO 13485:2016 - Medical Device Quality Management Systems 5
D ISO 13485 Contained NC ISO 13485:2016 - Medical Device Quality Management Systems 3
Brizilla ISO 13485 for a Distributor ISO 13485:2016 - Medical Device Quality Management Systems 7
Q Harmonised Standards (EN ISO 13485 / EN ISO 14971) in MDR (2017/745/EU) ISO 13485:2016 - Medical Device Quality Management Systems 4
J ISO 13485- 8.3.1 Non-conforming material high volume ISO 13485:2016 - Medical Device Quality Management Systems 4
H Contract Manufacturer as Design Owner ISO 13485 ISO 13485:2016 - Medical Device Quality Management Systems 6
blackholequasar ISO 13485 certification prior to Medical Device Manufacturing... worth it? ISO 13485:2016 - Medical Device Quality Management Systems 4
S Electronic Signatures - Non-Conformance - ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 36

Similar threads

Top Bottom