Skip To Content
Login Book a Demo
Glossary

21 CFR Part 820

What is 21 CFR 820: FDA Quality System Requirements for Medical Devices

21 CFR Part 820 is the section of the U.S. Code of Federal Regulations that historically established the FDA’s Quality System Regulation (QSR) requirements for medical device manufacturers.

The regulation addresses the quality management processes manufacturers use to ensure medical devices are consistently designed, manufactured, and controlled according to applicable requirements.

As of February 2, 2026, the FDA’s Quality Management System Regulation (QMSR) is effective and incorporates ISO 13485:2016 by reference. As a result, organizations researching 21 CFR 820, FDA CFR Part 820 medical devices, or QSR 21 CFR Part 820 for medical devices should understand both the historical QSR requirements and the current QMSR framework.

21 CFR Part 820 remains an important term for understanding FDA medical device quality system requirements, regulatory history, and existing documentation and compliance programs.

21 CFR 820: Simplified

Think of 21 CFR Part 820 as the FDA’s framework for how medical device manufacturers should manage quality.

The requirements cover processes that help ensure medical devices are consistently designed, manufactured, tested, and controlled.

These processes include areas such as:

  • Quality management
  • Design and development
  • Document control
  • Production controls
  • Purchasing controls
  • Corrective and preventive actions
  • Device records
  • Complaint handling
  • Audits
  • Management responsibilities

Today, these requirements are addressed through the FDA’s QMSR, which incorporates ISO 13485:2016 by reference.

Why 21 CFR 820 Matters for Medical Devices

Medical device manufacturers must demonstrate that their products are developed, manufactured, and controlled through processes that support safety, effectiveness, product quality, and regulatory compliance. Understanding 21 CFR 820 and the FDA’s current Quality Management System Regulation (QMSR) helps organizations establish quality processes that align with FDA expectations.

The requirements associated with FDA CFR Part 820 medical devices apply across many areas of a manufacturer’s Quality Management System, from design and production controls to documentation, corrective actions, supplier oversight, and complaint handling. Although the FDA’s QMSR became effective in 2026 and incorporates ISO 13485:2016 by reference, 21 CFR Part 820 remains an important framework for understanding FDA medical device quality system requirements.

A structured quality system helps organizations:

Support FDA Compliance

Quality system requirements provide a framework for controlling processes that can affect medical device quality, safety, and regulatory compliance.

Establishing documented and consistently implemented quality processes helps manufacturers demonstrate that their products are developed and manufactured under appropriate controls. A well-maintained QMS also provides objective evidence that quality requirements are being followed during FDA inspections.

Improve Product Quality

Standardized procedures help reduce process variation, defects, and manufacturing inconsistencies.

Clearly defined processes for design, production, inspection, testing, and quality control help organizations identify potential issues earlier and maintain consistent product quality throughout the medical device lifecycle.

Protect Patient Safety

Effective quality controls help identify and mitigate issues that could affect device safety or performance.

Quality processes such as design controls, risk management, complaint handling, CAPA, and process controls help manufacturers identify potential problems and take appropriate action before quality issues result in device failures or patient harm.

Strengthen Documentation

Controlled records provide evidence that required quality processes have been performed appropriately.

Medical device manufacturers generate significant amounts of documentation throughout product development and manufacturing. Maintaining controlled procedures, approvals, quality records, testing documentation, and other required records helps demonstrate compliance and supports complete traceability.

Improve Traceability

Connected quality records allow organizations to trace activities, approvals, changes, investigations, and product information.

Strong traceability makes it easier to understand the history of a product or quality issue and connect related activities across the QMS. This can be especially important when investigating complaints, nonconformances, CAPAs, supplier issues, or design changes.

Support Audit and Inspection Readiness

Maintaining organized quality records helps organizations respond more efficiently to FDA inspections, certification audits, internal audits, and supplier audits.

When quality documentation is centralized and controlled, employees can more easily locate procedures, records, approvals, training documentation, and evidence of corrective actions when auditors or inspectors request them.

Establish Consistent Processes

Documented procedures and standardized workflows help employees perform quality activities consistently.

Consistency is particularly important as medical device organizations grow. Standardized processes help ensure that employees across different departments and locations follow the same approved procedures and understand their responsibilities within the Quality Management System.

Support Continuous Improvement

Quality data from complaints, CAPAs, audits, nonconformances, supplier performance, and other quality processes can be used to identify recurring issues and improvement opportunities.

Analyzing this information allows organizations to identify trends, evaluate the effectiveness of corrective actions, prioritize resources, and strengthen quality processes over time. This creates a more proactive approach to quality management rather than simply responding to individual problems.

Build a Scalable Quality Management System

A structured approach to 21 CFR 820 for medical devices helps organizations establish quality processes that can scale as products, employees, suppliers, and manufacturing operations grow.

For growing medical device companies, integrating document control, training, CAPA, complaints, supplier quality, design controls, risk management, and other QMS processes can improve visibility and reduce the administrative burden associated with maintaining compliance.

Ultimately, understanding 21 CFR 820 and implementing an effective Quality Management System helps medical device manufacturers establish controlled, traceable, and repeatable processes that support product quality, patient safety, and FDA regulatory compliance.

21 CFR Part 820 and the FDA QMSR

The FDA’s Quality Management System Regulation (QMSR) became effective on February 2, 2026.

The QMSR incorporates ISO 13485:2016 by reference and aligns the FDA’s quality management requirements more closely with the internationally recognized medical device QMS standard.

This represents an important change from the previous QSR framework.

Organizations should therefore distinguish between:

QSR: The previous FDA Quality System Regulation framework under 21 CFR Part 820.

QMSR: The current FDA Quality Management System Regulation, effective February 2, 2026, which incorporates ISO 13485:2016.

QMSR vs. QSR for Medical Devices

QMSR vs. QSR

QSR – Quality System Regulations

QMSR – Quality Management System Regulation

Status

Previous FDA quality system framework

Current FDA quality system regulation

 

Effective Date

Previous requirements were in effect before February 2, 2026

Effective February 2, 2026

Regulation

21 CFR Part 820

21 CFR Part 820

Foundation

FDA’s own Quality System Regulation requirements

Incorporates ISO 13485:2016 by reference

International alignment

Less directly aligned with international QMS requirements

More closely harmonized with international medical device QMS requirements

Quality Management System

Required manufacturers to establish a quality system meeting FDA requirements

Requires a QMS consistent with the QMSR and incorporated ISO 13485 requirements

Design & Development

Included specific FDA design control requirements

Design and development requirements are primarily addressed through ISO 13485

Documentation

Included FDA-specific requirements for quality system documentation and records

Uses ISO 13485’s documentation framework, with additional FDA-specific requirements where applicable

Complaint Records

Complaint handling requirements were defined under the QSR

ISO 13485 provides the broader complaint-handling framework, with additional FDA requirements remaining in 21 CFR 820.35

Management Review & Audit Records

Certain records had exemptions from FDA inspection under the previous QSR

FDA can inspect management review, quality audit, and supplier audit reports under the QMSR

Relationship to ISO 13485

Separate from ISO 13485, although requirements were substantially similar in many areas

ISO 13485:2016 is incorporated by reference

Primary Goal

Ensure medical devices are consistently manufactured according to applicable quality requirements

Harmonize FDA quality requirements with internationally recognized medical device QMS requirements

QMSR vs. QSR

QSR – Quality System Regulations

QMSR – Quality Management System Regulation

Status

Previous FDA quality system framework

Current FDA quality system regulation

 

Effective Date

Previous requirements were in effect before February 2, 2026

Effective February 2, 2026

Regulation

21 CFR Part 820

21 CFR Part 820

Foundation

FDA’s own Quality System Regulation requirements

Incorporates ISO 13485:2016 by reference

International alignment

Less directly aligned with international QMS requirements

More closely harmonized with international medical device QMS requirements

Quality Management System

Required manufacturers to establish a quality system meeting FDA requirements

Requires a QMS consistent with the QMSR and incorporated ISO 13485 requirements

Design & Development

Included specific FDA design control requirements

Design and development requirements are primarily addressed through ISO 13485

Documentation

Included FDA-specific requirements for quality system documentation and records

Uses ISO 13485’s documentation framework, with additional FDA-specific requirements where applicable

Complaint Records

Complaint handling requirements were defined under the QSR

ISO 13485 provides the broader complaint-handling framework, with additional FDA requirements remaining in 21 CFR 820.35

Management Review & Audit Records

Certain records had exemptions from FDA inspection under the previous QSR

FDA can inspect management review, quality audit, and supplier audit reports under the QMSR

Relationship to ISO 13485

Separate from ISO 13485, although requirements were substantially similar in many areas

ISO 13485:2016 is incorporated by reference

Primary Goal

Ensure medical devices are consistently manufactured according to applicable quality requirements

Harmonize FDA quality requirements with internationally recognized medical device QMS requirements

What does the QMSR change for medical device manufacturers?
The transition from QSR to QMSR brings FDA quality management requirements into closer alignment with ISO 13485:2016. Rather than maintaining a separate FDA quality system framework, the QMSR incorporates ISO 13485 by reference while retaining certain FDA-specific requirements. Manufacturers should therefore evaluate their existing QMS against the current QMSR requirements and ensure that documentation, processes, and records continue to meet applicable FDA expectations.

Key Areas of 21 CFR 820 and the QMSR

The FDA quality system framework covers many of the processes needed to maintain an effective medical device Quality Management System.

Quality Management

Organizations must establish and maintain processes that support an effective Quality Management System and meet applicable regulatory requirements.

Design and Development

Manufacturers must control product development activities and maintain appropriate documentation and traceability throughout the design process.

Document and Record Control

Quality documents and records must be appropriately controlled, maintained, and available as required.

Production and Process Controls

Manufacturing processes should be controlled to consistently produce devices that meet specified requirements.

Purchasing Controls

Organizations must establish controls over suppliers and externally provided products and services that can affect product quality.

Identification and Traceability

Manufacturers must establish appropriate controls for identifying products, components, and associated records.

Corrective and Preventive Action

Quality issues should be investigated and addressed through appropriate corrective action processes.

Complaint Handling

Customer complaints must be evaluated and handled through appropriate quality processes.

Audits

Organizations should evaluate their quality processes to determine whether the QMS is functioning effectively and meeting applicable requirements.

21 CFR 820 Requirements for Medical Devices

Organizations researching 21 CFR 820 requirements for medical devices should understand that FDA quality system requirements extend across the entire product lifecycle. These requirements are designed to ensure that medical devices are developed, manufactured, tested, and controlled using documented and repeatable processes.

The requirements cover many of the core activities within a medical device Quality Management System (QMS), from design and development through manufacturing, post-market activities, and continuous improvement.

Key areas include:

Quality Management

Organizations must establish quality processes that define responsibilities, procedures, and controls for maintaining product quality and regulatory compliance. An effective QMS provides the foundation for implementing and monitoring quality activities throughout the organization.

Design and Development

Medical device design and development activities must be appropriately planned, documented, reviewed, and controlled. Design controls help ensure that user needs and requirements are translated into specifications and that the resulting design is verified and validated.

Risk Management

Manufacturers should identify and evaluate risks that could affect product safety, quality, or performance. Risk management activities can influence design decisions, quality controls, supplier oversight, CAPA, complaint handling, and other QMS processes.

Document Control

Controlled documents help ensure employees are working from current and approved procedures, specifications, work instructions, and other quality documentation. Document control also provides revision history and traceability when procedures or requirements change.

Record Management

Quality records provide objective evidence that required processes and activities have been completed. Records may include design documentation, testing results, training records, quality events, CAPAs, complaints, supplier records, and audit documentation.

Purchasing Controls

Organizations must establish appropriate controls for purchased products and services that can affect product quality. Purchasing controls may include supplier evaluation, qualification, monitoring, specifications, and ongoing supplier performance management.

Supplier Management

Supplier quality management helps manufacturers identify and control risks associated with external suppliers. Organizations may monitor supplier performance, conduct supplier audits, manage supplier nonconformances, and require corrective actions when necessary.

Production Controls

Manufacturing processes must be appropriately controlled to ensure that devices consistently meet established requirements. Production controls can include procedures, equipment controls, inspections, testing, environmental controls, and other manufacturing activities.

Process Validation

When process results cannot be fully verified through subsequent inspection or testing, manufacturers may need to validate the process. Process validation provides documented evidence that a process can consistently produce results meeting predetermined requirements.

Identification and Traceability

Identification and traceability controls help organizations maintain information about products, components, materials, and related quality records throughout the manufacturing and distribution process. Traceability can be particularly important when investigating complaints, defects, recalls, or other quality issues.

Corrective and Preventive Actions

CAPA processes help organizations investigate quality problems, identify root causes, implement corrective actions, and evaluate whether those actions were effective. CAPA data can also help organizations identify recurring issues and opportunities for continuous improvement.

Complaint Handling

Manufacturers must maintain processes for receiving, evaluating, investigating, and documenting complaints related to medical devices. Complaint information can provide important insight into product performance and may trigger additional quality activities such as CAPA, risk assessment, or design changes.

Audits

Auditing helps organizations evaluate whether quality processes are being followed and whether the Quality Management System is effective. Internal and other applicable audits can identify nonconformities, process weaknesses, and opportunities for improvement.

Management Responsibility

Leadership plays an important role in maintaining an effective Quality Management System. Management responsibilities include establishing quality objectives, providing appropriate resources, reviewing QMS performance, and ensuring that quality responsibilities are clearly defined throughout the organization.

Training and Competency

Employees must have the knowledge and competency necessary to perform their assigned responsibilities. Training processes help ensure employees understand applicable procedures, regulatory requirements, and quality responsibilities, while training records provide evidence of completed training.

How 21 CFR 820 Requirements Work Together

These requirements work together rather than functioning as independent activities. A change to one quality process can affect several other areas of the QMS.

For example, a medical device design change may require a risk evaluation, updated design documentation, verification or validation testing, document revisions, approval workflows, employee training, and additional quality records. Similarly, a supplier quality issue could result in a nonconformance, CAPA, risk assessment, supplier corrective action, and potentially a design or manufacturing change.

This interconnected approach is an important part of maintaining an effective 21 CFR 820 medical device Quality Management System. Organizations that connect their quality processes can improve traceability, reduce duplicate work, and more easily demonstrate how quality decisions were made and implemented.

Understanding these interconnected requirements is particularly important for growing medical device companies, where managing quality processes through spreadsheets, email, and disconnected systems can make compliance increasingly difficult.

21 CFR 820 Design Controls

Design controls are an important component of medical device quality management.

Design control activities help organizations establish and maintain a controlled product development process that connects requirements, design outputs, testing, reviews, risk management, and changes.

Common design control activities include:

  • Design planning
  • Design inputs
  • Design outputs
  • Design reviews
  • Design verification
  • Design validation
  • Design transfer
  • Design changes
  • Design documentation
  • Traceability

These activities help manufacturers demonstrate that devices were developed according to defined requirements and that the resulting design meets intended needs.

21 CFR 820 Recordkeeping and Documentation

Documentation is a fundamental component of an effective medical device Quality Management System.

Manufacturers may need to maintain records related to:

Complete and accurate records provide objective evidence that quality processes are being followed and help organizations demonstrate compliance during inspections and audits.

What is the Difference Between 21 CFR 820 and ISO 13485?

21 CFR Part 820 and ISO 13485 are closely related but are not identical concepts.

ISO 13485 is an international standard specifically designed for medical device Quality Management Systems.

21 CFR Part 820 refers to the FDA’s regulatory framework for medical device quality systems.

With the implementation of the QMSR, the FDA has incorporated ISO 13485:2016 by reference into its quality management system requirements.

This closer alignment means organizations implementing ISO 13485 may be better positioned to meet FDA quality system expectations, although companies must still evaluate and comply with applicable FDA-specific requirements.

Common 21 CFR 820 Compliance Challenges

Medical device manufacturers frequently encounter:

Manual Documentation

Spreadsheets, paper records, and email-based processes can make quality management difficult to scale.

Document Control

Organizations may struggle to ensure employees are consistently using current approved procedures.

Maintaining Traceability

Connecting requirements, quality events, CAPAs, changes, and supporting records can become difficult across disconnected systems.

Training Management

Keeping employee training aligned with changing procedures and responsibilities requires ongoing oversight.

Supplier Oversight

Managing supplier qualification, monitoring, audits, and corrective actions can become increasingly complex.

Audit and Inspection Preparation

Finding and organizing records quickly can be challenging when quality information is distributed across multiple systems.

Regulatory Changes

Organizations must monitor changes to FDA requirements and update their QMS processes accordingly.

As medical device companies grow, these challenges become increasingly difficult to manage using disconnected or manual systems.

21 CFR 820 Software for Medical Device Companies

Modern eQMS software helps medical device organizations manage quality processes through centralized workflows, documentation, and traceability.

Common capabilities include:

Document Control

Manage SOPs, policies, forms, and controlled quality records.

Training Management

Assign, track, and document employee training.

CAPA Management

Manage investigations, root cause analysis, corrective actions, and effectiveness checks.

Complaint Management

Centralize complaint records, investigations, evaluations, and follow-up activities.

Supplier Management

Manage supplier qualification, performance monitoring, audits, and corrective actions.

Audit Management

Schedule audits, document findings, and manage follow-up activities.

Quality Event Management

Manage nonconformances, deviations, complaints, and other quality events through standardized workflows.

Reporting and Dashboards

Monitor quality metrics, trends, compliance activities, and QMS performance.

QMS Integration

Connect:

  • Design Controls
  • Risk Management
  • Document Control
  • CAPA
  • Change Control
  • Supplier Quality
  • Complaint Handling
  • Training Management
  • Audit Management
  • Quality Events

Connecting these processes creates greater visibility and end-to-end traceability across the Quality Management System.

How QuickVault Supports FDA Quality Management Requirements

QuickVault helps medical device companies manage connected quality processes within a centralized eQMS environment.

Organizations can use QuickVault to manage areas such as:

  • Document Control
  • Training Management
  • CAPA
  • Nonconformance Management
  • Complaint Handling
  • Supplier Quality
  • Design Controls
  • Risk Management
  • Change Control
  • Audit Management

By connecting these processes, QuickVault helps growing MedTech companies reduce manual administrative work, improve traceability, and maintain organized quality records that support audit and inspection readiness. Book your personalized demo of QuickVault to see how. Book your personalized demo of QuickVault to learn more.

Frequently Asked Questions

What is 21 CFR Part 820?

21 CFR Part 820 is the section of the U.S. Code of Federal Regulations historically associated with the FDA’s Quality System Regulation for medical device manufacturers. As of February 2, 2026, the FDA’s QMSR is effective and incorporates ISO 13485:2016 by reference.

QSR refers to the FDA’s previous Quality System Regulation framework. QMSR refers to the FDA’s current Quality Management System Regulation, which became effective February 2, 2026 and incorporates ISO 13485:2016 by reference.

Yes. Although the FDA’s QMSR replaced the previous QSR framework, 21 CFR Part 820 remains the regulatory location for the FDA’s medical device quality management requirements and is an important term when researching FDA quality system compliance.

The FDA QMSR incorporates ISO 13485:2016 by reference, but FDA compliance should not be treated as identical to simply obtaining ISO 13485 certification. Manufacturers must comply with applicable FDA requirements, including any FDA-specific provisions.

The FDA’s quality management requirements cover areas such as quality management, design and development, production and process controls, purchasing controls, documentation and records, CAPA, complaint handling, audits, and other QMS activities.

Design control requirements establish a structured process for controlling medical device design and development. Activities include defining design requirements, producing design outputs, conducting reviews, performing verification and validation, transferring designs into production, and controlling design changes.

The FDA’s QMSR incorporates ISO 13485:2016 by reference, bringing the FDA’s quality management requirements into closer alignment with the international medical device QMS standard. Organizations should still evaluate applicable FDA-specific requirements when implementing their QMS.

An eQMS can help organizations centralize quality records, automate workflows, manage controlled documents, track training, manage CAPAs and complaints, oversee suppliers, maintain audit trails, and connect quality processes through end-to-end traceability.