QMS for IVD Manufacturers: IVDR and FDA Requirements

If you manufacture in vitro diagnostics and sell into both the EU and the United States, you are running two compliance programs simultaneously — and they are getting less similar, not more. The EU's IVDR (In Vitro Diagnostic Regulation 2017/746) came into full force in May 2022. The FDA's updated Quality Management System Regulation took effect February 2, 2026. Together, they have created a documentation and quality management challenge that IVD companies — especially smaller ones — are still working out how to handle.

In my view, the core problem isn't the rules themselves. It's that manufacturers often build separate quality silos for each market rather than designing one integrated QMS that genuinely satisfies both. The result is doubled documentation effort, version control problems, and a quality system that serves compliance theater more than actual product quality.

This article is about how to think through the QMS architecture for IVD manufacturers — what each framework actually requires, where they overlap, where they diverge, and what a well-designed system looks like when you're holding both at once.

Why IVD Quality Systems Are Their Own Category

Medical device QMS is already complex. IVD QMS adds layers that don't apply to most other device categories.

The product itself is evaluated differently. An IVD doesn't just have to be safe and functional — it has to produce accurate results under real clinical conditions with real patient samples. That means analytical performance data (accuracy, precision, analytical specificity, interference), clinical performance data (sensitivity and specificity against clinical reference standards), and scientific validity of the intended analyte. These are not just pre-market requirements. They follow the device through its entire lifecycle under both IVDR and FDA frameworks.

Post-market surveillance is also more demanding for IVDs than most manufacturers expect going in. A device that drifts in performance over time — even subtly — can affect clinical decisions in ways that compound across large patient populations. Both frameworks recognize this. Both have responded with strengthened PMS requirements that go well beyond collecting complaint records.

So before getting into the specifics of IVDR versus FDA, it's worth naming that the quality foundation for IVDs is genuinely heavier than it looks from the outside.

What IVDR Actually Changed

The EU's shift from the old IVDD (In Vitro Diagnostic Directive 98/79/EC) to IVDR was not an incremental update. It was a structural overhaul.

The most consequential change is the classification system. Under the old directive, roughly 80% of IVDs by volume were self-certified by manufacturers without Notified Body involvement — a widely cited industry figure reflecting just how low the bar had been. Under IVDR, a new four-class risk-based system (Class A through D) means that most diagnostics of clinical consequence now require a Notified Body audit. Class C devices — which include most companion diagnostics, near-patient testing devices, and a wide range of clinical chemistry analyzers — require Notified Body QMS certification. Class D devices, the highest-risk category including those for blood-borne infectious disease, require even more intensive Notified Body review, including batch verification in some cases.

The practical consequence: manufacturers who had operated for years on self-declaration had to build QMS infrastructure capable of withstanding external audit, often starting from a minimal baseline.

IVDR also substantially expanded what counts as adequate performance evidence. Annex XIII lays out the requirements for performance evaluation — not just the pre-market study data, but the ongoing post-market performance follow-up (PMPF) plan, periodic safety update reports (PSURs), and the scientific validity dossier. For many device types, the expectation is that the clinical performance of the device continues to be demonstrated over time, not just at the point of initial CE marking.

The Person Responsible for Regulatory Compliance (PRRC) is another addition with no real predecessor under IVDD. Every manufacturer placing IVDs on the EU market must designate someone with documented qualifications in regulatory affairs and quality management — and that person carries personal accountability for compliance. For small manufacturers, this often means hiring or contracting someone specifically for this role.

The FDA's QMSR Update

On the U.S. side, the change that matters most right now is the Quality Management System Regulation (QMSR) that revised 21 CFR Part 820. Published January 31, 2024 and effective February 2, 2026, the QMSR formally incorporates ISO 13485:2016 by reference — the first time the FDA has anchored its device quality requirements to an international standard.

This matters for IVD manufacturers pursuing dual market access. Under the old QSR, there were meaningful structural differences between what FDA expected and what ISO 13485 required, even though the two frameworks covered similar ground. Companies had to maintain parallel documentation to satisfy both. The QMSR substantially closes that gap.

That said, the FDA doesn't simply adopt ISO 13485 wholesale. The QMSR layers specific FDA requirements on top of the standard — particularly around complaint handling under 21 CFR Part 803 (Medical Device Reporting), design controls as they interact with premarket submissions, and records access for FDA inspections. The underlying logic of ISO 13485 now carries through, but the FDA regulatory context still shapes how it's applied.

For IVDs specifically, the QMSR sits alongside 21 CFR Part 809, which governs labeling for in vitro diagnostic products. And for laboratory-developed tests, the FDA's 2024 final rule phasing out enforcement discretion created an entirely new compliance population — laboratory organizations that had never operated under a formal QMS framework now need to build one.

IVDR vs. FDA QMSR: A Side-by-Side View

What this table shows is that the two frameworks rhyme more than they clash. The underlying quality management architecture — risk-based thinking, design controls, supplier management, CAPA, post-market surveillance — is genuinely shared. The divergences are mostly in how that architecture connects to the specific regulatory pathway: the Notified Body process on one side, FDA submissions and inspections on the other.

Where the Real Divergence Lives

That said, there are areas where the two frameworks create genuine tension, not just parallel documentation needs.

Performance evaluation as a living document versus a submission artifact. IVDR's Annex XIII is more prescriptive about how performance evidence is organized and maintained over the product lifecycle than FDA's submission-based approach. The performance evaluation report (PER) is a living document that gets updated throughout the product's life under IVDR. Under FDA, the analytical and clinical validation supporting a 510(k) or PMA is submitted once at clearance and updated only when changes trigger a new submission. If you're maintaining one set of performance data for both markets, your document management system needs to track which version of the evidence satisfies which framework at any given time — and that's harder to do well than it sounds.

Intended purpose language. IVDR ties classification and performance evaluation to the "intended purpose" as stated in labeling and technical documentation. FDA's intended use / indications for use framework serves a similar function but uses different terminology with different downstream effects on the submission pathway. Small labeling differences can create large regulatory divergences. IVD manufacturers who try to use a single global intended purpose statement often discover mid-submission or mid-audit that it doesn't quite work in one jurisdiction or the other.

Change control thresholds. Both frameworks have robust change control requirements, but the thresholds for what triggers a new regulatory submission differ. In the EU, significant changes typically require consultation with the Notified Body. In the U.S., they may require a new 510(k), a 30-day notice PMA supplement, or nothing at all — depending on the nature of the change. Evaluating a proposed design change against both frameworks simultaneously is a real QMS process design challenge, and doing it sequentially (EU first, then FDA, or vice versa) is how manufacturers end up with inconsistent documentation.

Building a QMS That Holds Both

The manufacturers who handle dual-market compliance most efficiently share a common design principle: one QMS with market-specific compliance modules, rather than two separate systems running in parallel.

What that means in practice is that the core quality processes — design controls, risk management, supplier qualification, CAPA, training, complaint handling — are unified and run once. The market-specific requirements — EU technical documentation structure, FDA submission-ready validation packages, EUDAMED reporting versus MDR reporting — are structured outputs of that unified system, not separate processes.

This requires a document management system with enough structure to know which documents belong to which regulatory context and which are shared. It requires change control procedures that evaluate proposed changes against both frameworks simultaneously. And it requires performance evaluation processes that generate evidence organized for both Annex XIII and FDA validation at the same time, because restructuring the same underlying study data after the fact is expensive and error-prone.

The PRRC designation on the EU side is worth thinking through carefully here. Because the PRRC carries personal regulatory accountability, they need real visibility into the QMS — not just signing authority over compliance documents. If your QMS is a paper system or a disconnected collection of SOPs and spreadsheets, giving the PRRC meaningful oversight is genuinely hard. This is one place where IVDR's regulatory design has pushed manufacturers toward more integrated, functional quality systems rather than purely documentary ones — and I think that's mostly a good outcome, even when the transition is painful.

For IVD manufacturers evaluating QMS platforms, Nova QMS is designed specifically for regulated industries where dual-framework compliance is the reality, not the exception.

Common Pitfalls for IVD Manufacturers

A few patterns come up repeatedly in conversations about where IVD QMS programs break down.

Starting EUDAMED registration too late. EUDAMED has had well-documented delays and phased rollouts, and manufacturers sometimes discover mid-certification that their actor registration or device data is incomplete in ways that create timeline risk. This is administrative rather than quality-substantive, but the consequences are real.

Treating the performance evaluation as a one-time exercise. Under IVDR, it isn't. The PMPF plan needs to describe how post-market performance data will be collected and analyzed on an ongoing basis, and that plan needs to produce real outputs at defined intervals. Notified Bodies have become increasingly attentive to whether PMPF plans are actually being executed versus just written.

CAPA processes that don't reach performance issues. In many IVD QMS programs, CAPA is well-connected to customer complaints and field failures but not to performance drift observed through post-market surveillance data. IVDR is particularly explicit that performance issues identified through PMS should feed back into the quality system.

Underestimating the UDI implementation burden. Both the EU UDI system (reporting to EUDAMED) and the FDA's GUDID have labeling, packaging, and database registration requirements. For manufacturers with large product portfolios, this is a substantial project that benefits from early planning — not something to address in the final weeks before certification.

What This Means for Smaller Manufacturers

The IVDR's Notified Body requirement created a genuine access problem for smaller IVD manufacturers. Notified Body capacity under IVDR is significantly constrained compared to what existed under IVDD — fewer bodies are designated, their queues have been long, and the cost of the certification process is substantial relative to the revenue of a small product portfolio. For companies with one or two IVD products, this can be close to prohibitive.

The EU has responded with transition provisions and extended timelines for some device categories, but the trajectory is clear: Notified Body involvement is now the expected path for most clinically significant IVDs, and that raises the floor for what a compliant QMS has to look like.

On the U.S. side, the QMSR's alignment with ISO 13485 actually helps smaller manufacturers. ISO 13485 is a well-understood standard with a robust ecosystem of training and implementation resources. A manufacturer who builds a genuinely conformant ISO 13485 QMS is simultaneously building the FDA compliance foundation — rather than having to maintain and translate between two differently structured frameworks.

The honest framing for small IVD manufacturers is that the regulatory environment has become more expensive to navigate, and the quality infrastructure required to do it right has become more substantial. That's not a criticism of the regulation — the case for why IVD accuracy matters clinically is real, and the old IVDD self-certification model had genuine gaps. But it is the honest context for planning, and pretending the bar hasn't moved doesn't serve anyone well.

If you're thinking through what a modern, integrated IVD QMS should look like, the Nova QMS resource library is a good place to explore what AI-powered quality management can do for teams navigating this complexity.

Last updated: 2026-07-10

Jared Clark is the Founder of Nova QMS, building AI-powered quality management systems that make compliance accessible for organizations of all sizes.