ISO 13485 certification in the United Kingdom

ISO 13485 certification in the UK at a glance

Department of Health and Social Care notice 0129/26, dated 17 January 2026, lists EN ISO 13485:2016, with its 2018 correction and A11:2021 amendment, among the standards designated in support of the Medical Devices Regulations 2002 for England, Wales and Scotland. For manufacturers, that designation links the quality management system directly to the regulatory route the MHRA oversees, including UKCA marking and UK approved bodies. Northern Ireland follows different rules, so many firms run one QMS that serves Great Britain, Northern Ireland and EU requirements together. Health and life sciences feature in the Liverpool City Region Freeport's profile, and contract manufacturers, sterilisers and component suppliers across the country are drawn in through supplier controls. ISO 13485 certification is granted by an accredited certification body. From the London office, Sterling builds design controls, risk management, supplier control and post-market processes, with Effivity and Sterling Academy included.

Who needs ISO 13485 in the UK, and what happens without it

In the UK the question rarely comes from a law. It comes from the buyer, the regulator or the partner that wants proof before it signs. These are the organisations that get asked.

• Medical device manufacturers placing devices on the Great Britain marketEN ISO 13485:2016 is a designated standard under the Medical Devices Regulations 2002.
• Life sciences firms in the Liverpool City RegionThe Freeport targets health and life sciences and biomanufacturing.
• Contract manufacturers, sterilisers and component suppliers to device makersDevice manufacturers extend QMS requirements to critical suppliers.
• Manufacturers selling into Northern Ireland and the EUDifferent rules apply in Northern Ireland and the EU; a single QMS serves both routes.

ISO 13485 requirements in the UK

Strip away the vocabulary and ISO 13485 requires a company to prove six things about making medical devices that are safe and work as intended.

In the UK these six sit alongside the local laws and regulations listed under drivers below; one system can evidence both. The detail is on the global hub: ISO 13485 explained →

• ISO 13485 requirements, clause by clause in plain language

How to get ISO 13485 certified in the UK

One team from the London office carries the work from scoping to certificate. England, Scotland, Wales and Northern Ireland, on-site from London; remote delivery for distributed teams.

1. Discovery call and scopeEntities, locations, regulators and target date, agreed before any proposal.
2. Gap assessment against ISO 13485 and the UK requirements that apply to youControls you already run for your regulators and customers are reused, not rebuilt.
3. Your system built with your team in EffivityRisks, controls, evidence, incidents and reviews in one live system the auditor can see.
4. Internal audit, management review and corrective actionsYour internal auditors trained by Sterling; the evidence proven before the certification body arrives.
5. Certification body stage 1 and stage 2, then surveillanceAn accredited body audits and decides. Sterling supports the audits and the three-year cycle.

The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements.Sterling does not certify. Certification decisions stay with independent bodies.

• The ISO 13485 certification process, step by step
• ISO 13485 internal audit

How long does ISO 13485 certification take in the UK?

There is no standard duration: it depends on your scope and on how much of the system already runs. In the UK these are the factors that set the timeline.

• Device classification and regulatory route (Great Britain, Northern Ireland, EU)
• Design and development controls and technical documentation
• Supplier controls for critical suppliers and sterilisation
• Risk management to ISO 14971 integrated with the QMS

Sterling agrees a dated plan with you on the discovery call, once the scope is known.

• Scope and timeline estimator

How much does ISO 13485 certification cost in the UK?

The cost has two parts: the consulting work to build and prove the system, and the certification body’s audit fees, which are quoted separately. In the UK these factors move both.

• Number of device families and sites
• Design history and validation work
• Certification body audit fees, quoted separately from consulting
• Post-market surveillance and complaint handling processes

Sterling gives one customised, all-inclusive proposal after the discovery call, never before the scope is agreed.

• What makes up the cost of ISO 13485

ISO 13485 consultants and certification bodies in the UK

Two different organisations are involved. A consultant helps you build the system and prove it works; an accredited certification body then audits or assesses it and decides. Keeping the two separate is what makes the result credible to buyers and regulators.

• Check that the body’s accreditation or approval covers ISO 13485 and your sector, and that its certificates can be verified online.
• Ask the consultant how the local requirements in the UK are mapped into the same system, so nothing runs twice.
• Ask for client references in your sector; Sterling’s client letters are available on request.
• Agree who owns the evidence and the tool after the engagement; with Sterling the system stays yours, in Effivity.

ISO 13485 in the UK: questions clients ask

More on ISO 13485 for UK organisations

• ISO 13485: the complete guide
• Watch: How to implement ISO 13485
• Sterling in London
• ISO 13485 certification in the UK and every other standard Sterling delivers there

Other standards UK businesses ask Sterling for

Organisations in the UK often combine ISO 13485 with one of these, under one management system where the scopes allow.

All 23 standards Sterling delivers in the United Kingdom →