hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us

Austria · Certification

ISO 13485 certification in Austria

Achieve ISO 13485 certification in Austria with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.

  • Accredited certification
  • Frankfurt office team
  • Effivity software included
  • Academy training included

Clients include

  • Allianz
  • Emirates Flight Catering
  • Etihad Rail
  • Haier
  • Whirlpool
  • Emerson
In short

ISO 13485 certification in Austria at a glance

Medizinproduktegesetz 2021 (MPG 2021), BGBl. I Nr. 122/2021 is the instrument itself: it applies to the organisations within its scope, and buyers and partners in Austria ask for evidence that you meet it.

Austria's medical device rules come from Brussels and are applied by the Bundesamt für Sicherheit im Gesundheitswesen, which the Medizinproduktegesetz 2021 names as competent national authority and as the authority responsible for notified bodies. Regulation (EU) 2017/745 expects every manufacturer to run a quality management system, and ISO 13485 is the usual way to build and evidence one, although neither the Austrian Act nor the regulation makes the certificate a legal condition. Certification comes from a body accredited by Akkreditierung Austria or an equivalent accreditation body, not from Sterling, and it is separate from CE marking. Sterling's Frankfurt office prepares design controls, risk management, supplier and complaint procedures and the internal audit, with Effivity and Sterling Academy included with the engagement.

The need

Who needs ISO 13485 in Austria, and what happens without it

In Austria the question rarely comes from a law. It comes from the buyer, the regulator or the partner that wants proof before it signs. These are the organisations that get asked.

  • Medical device manufacturers placing products on the EU marketRegulation (EU) 2017/745 expects every manufacturer to have a quality management system, and the BASG is the competent national authority.
  • Subcontractors and component suppliers to manufacturersManufacturers pass quality-system and supplier-control expectations to contract manufacturers, sterilisation and packaging partners.
  • Medtech software and electronics developersSoftware and electronics teams in Austria's life sciences and microelectronics sectors are asked for a device quality system by their customers.
  • Distributors and importersThey carry duties under the device regulations and use supplier qualification that often relies on certificates.

Not sure which of these applies to you?Answer a short set of questions and your readiness report arrives by e-mail.

Take the ISO 13485 readiness check
Requirements

ISO 13485 requirements in Austria

Strip away the vocabulary and ISO 13485 requires a company to prove six things about making medical devices that are safe and work as intended.

Regulatory requirements are built inThe quality system covers the regulatory requirements of each market you supply and your role in the device supply chain.
Design is controlledDesign and development are planned, verified and validated, with changes controlled and a file kept for each device.
Risk management runs through the life cycleRisks to safety and performance are managed from design through production, delivery and use.
Production and suppliers are controlledProduction, process validation, cleanliness, sterilisation where relevant and purchased components are controlled and recorded.
Every device can be tracedIdentification and traceability let you find the components, batches and records behind any device you have released.
Complaints and feedback drive actionComplaints and nonconformities are handled, reported to regulators where required, and closed through corrective and preventive action.

In Austria these six sit alongside the local laws and regulations listed under drivers below; one system can evidence both. The detail is on the global hub: ISO 13485 explained →

How Sterling gets an Austrian company certified

How to get ISO 13485 certified in Austria

One team from the Frankfurt office carries the work from scoping to certificate. Clients in Austria are served from Sterling's Frankfurt office, on-site where the work needs it and remotely otherwise.

  1. Discovery call and scopeEntities, locations, regulators and target date, agreed before any proposal.
  2. Gap assessment against ISO 13485 and the Austrian requirements that apply to youControls you already run for your regulators and customers are reused, not rebuilt.
  3. Your system built with your team in EffivityRisks, controls, evidence, incidents and reviews in one live system the auditor can see.
  4. Internal audit, management review and corrective actionsYour internal auditors trained by Sterling; the evidence proven before the certification body arrives.
  5. Certification body stage 1 and stage 2, then surveillanceAn accredited body audits and decides. Sterling supports the audits and the three-year cycle.
Included in every engagement
  • End to end, from one team
  • Effivity ISO & GRC software
  • Preferential Sterling Academy access, with complimentary awareness training for your people
  • Internal auditor training for your audit team, as applicable to your standard
  • Vulnerability assessment on ISMS engagements

The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements.Sterling does not certify. Certification decisions stay with independent bodies.

Time

How long does ISO 13485 certification take in Austria?

There is no standard duration: it depends on your scope and on how much of the system already runs. In Austria these are the factors that set the timeline.

  • Device class and regulatory route
  • Maturity of design controls, risk management and post-market processes
  • Number of sites and outsourced processes
  • Certification body scheduling

Sterling agrees a dated plan with you on the discovery call, once the scope is known.

Cost

How much does ISO 13485 certification cost in Austria?

The cost has two parts: the consulting work to build and prove the system, and the certification body’s audit fees, which are quoted separately. In Austria these factors move both.

  • Scope and device portfolio
  • Remediation of design and supplier controls
  • Certification body audit fees, quoted separately
  • Technical documentation and clinical evaluation work, which is separate

Sterling gives one customised, all-inclusive proposal after the discovery call, never before the scope is agreed.

Choosing a partner

ISO 13485 consultants and certification bodies in Austria

Two different organisations are involved. A consultant helps you build the system and prove it works; an accredited certification body then audits or assesses it and decides. Keeping the two separate is what makes the result credible to buyers and regulators.

  • Check that the body’s accreditation or approval covers ISO 13485 and your sector, and that its certificates can be verified online.
  • Ask the consultant how the local requirements in Austria are mapped into the same system, so nothing runs twice.
  • Ask for client references in your sector; Sterling’s client letters are available on request.
  • Agree who owns the evidence and the tool after the engagement; with Sterling the system stays yours, in Effivity.

    Laws and regulations that drive ISO 13485 in Austria (4)

    InstrumentHow it treats the standard
    Medizinproduktegesetz 2021 (MPG 2021), BGBl. I Nr. 122/2021The instrument itself
    It names the Bundesamt für Sicherheit im Gesundheitswesen as the competent national authority under the EU medical device and in vitro diagnostic regulations and as the authority responsible for notified bodies; the Act does not name ISO 13485.
    Regulation (EU) 2017/745 (EU MDR)The regulation itself
    Its recitals expect all manufacturers to have a quality management system, and conformity assessment for higher risk classes involves a notified body.
    Akkreditierung Austria as the Austrian national accreditation bodyRegulator page
    The Federal Minister for Economy set up Akkreditierung Austria as a department of the ministry; it accredits conformity assessment bodies established in Austria.
    EA directory entry for Akkreditierung AustriaRecognition
    EA lists Akkreditierung Austria as an MLA signatory with scopes that include management system certification, product certification, certification of persons, inspection, calibration, testing and validation and verification.

    Accreditation, audit language and remote audits in Austria

    Choose a certification body accredited for this standard by Akkreditierung Austria, Austria's national accreditation body, or by another accreditation body within the international mutual recognition arrangements (Global ACI — Global Accreditation Cooperation Incorporated, formerly the IAF MLA). Check that the body's accreditation scope covers the standard and your sector. No body is named here. Edition and transition details: ISO 13485 hub →

    Audit language

    German is the official language of Austria and English is common in international groups and technology firms. Agree the audit language and the language of controlled documents with the certification body at application, and follow any language requirement in a contract or a regulator's procedure.

    Remote and on-site

    Audits are on-site because they examine production, design controls and records; remote elements are at the certification body's discretion. Notified bodies under the device regulations are a separate matter.

    ISO 13485 in Austria: questions clients ask

    Does Austrian law require ISO 13485?

    The Medizinproduktegesetz 2021 does not name ISO 13485. It makes the Bundesamt für Sicherheit im Gesundheitswesen the competent national authority under the EU device regulations and the authority responsible for notified bodies. The legal duties come from those regulations, so the certificate is voluntary evidence. Confirm your regulatory route with the authority or a regulatory adviser.

    What does the EU MDR expect about quality systems?

    The regulation's recitals say all manufacturers should have a quality management system, and conformity assessment for higher risk classes involves a notified body. ISO 13485 is the usual way of structuring such a system, though the regulation does not make the certificate itself a condition. Check your device class and route with your regulatory adviser.

    Is an ISO 13485 certificate the same as CE marking?

    No. CE marking follows conformity assessment under the device regulations, which for higher risk classes involves a notified body supervised in Austria by the BASG. An ISO 13485 certificate shows an accredited body audited your quality system. The two can support each other, but neither replaces the other. Ask your regulatory adviser how they fit your product.

    Who certifies ISO 13485 in Austria?

    Certification is by an accredited body, not Sterling. Select one whose accreditation from Akkreditierung Austria or an equivalent body covers ISO 13485 and the device sector. Sterling prepares design controls, risk management, supplier controls, complaint and vigilance procedures and the internal audit.

    Read more

    More on ISO 13485 for Austrian organisations

    Explore

    Other standards Austrian businesses ask Sterling for

    Organisations in Austria often combine ISO 13485 with one of these, under one management system where the scopes allow.

    All 22 standards Sterling delivers in Austria →

    Next step

    Start with a free discovery call from the Frankfurt office

    A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.

    Sources

    1. Medizinproduktegesetz 2021 (MPG 2021), BGBl. I Nr. 122/2021 — ris.bka.gv.at; basg.gv.at (accessed 11 Oct 2026)
    2. Regulation (EU) 2017/745 (EU MDR) — eur-lex.europa.eu (accessed 11 Oct 2026)
    3. Akkreditierung Austria as the Austrian national accreditation body — bmwet.gv.at (accessed 11 Oct 2026)
    4. EA directory entry for Akkreditierung Austria — european-accreditation.org (accessed 11 Oct 2026)
    5. Akkreditierung Austria (Austrian national accreditation body, a department of the Federal Ministry for Economy, Energy and Tourism) — bmwet.gv.at; ris.bka.gv.at; european-accreditation.org; ilac.org (accessed 11 Oct 2026)

    Talk to a consultant

    Plan your certification with the Frankfurt team.

    Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

    germany@sterling-grc.com

    +1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

    What would you like to achieve?

    Choose a starting point. The enquiry form takes about a minute.

    Your goal
    Book my free discovery call

    Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice