ISO 13485 Calibration Requirements: What Medical Device Manufacturers in Singapore Must Know

ISO 13485:2016 clause 7.6, the full requirement

Clause 7.6 of ISO 13485:2016 covers the control of monitoring and measuring equipment. The key requirements are:

• Determine the measurements to be made and the measuring equipment required to assure conformity of product
• Calibrate or verify the measuring equipment at specified intervals, or prior to use, against measurement standards traceable to international or national standards
• Adjust or re-adjust as necessary
• Identify the calibration status (e.g. via calibration label with due date)
• Safeguard equipment from adjustments that would invalidate calibration
• Protect equipment from damage and deterioration during handling, maintenance, and storage
• Maintain a documented procedure for these activities
• Maintain calibration records

The clause also states that where no international or national measurement standard exists, the basis used for calibration shall be recorded. And critically: if the equipment is found not to conform to requirements, the organisation must assess the validity of all previous measurement results.

A less-quoted but equally binding part of clause 7.6 is the requirement to confirm the ability of computer software used for monitoring and measurement to satisfy its intended application, prior to initial use and, as appropriate, after changes. In practice this means any software that processes a measurement (a data acquisition system converting a transducer's voltage to engineering units, a coordinate measuring machine's analysis software, an environmental monitoring system logging cleanroom pressure differentials) needs its own validation record, separate from and in addition to the calibration of the physical sensor feeding it. Manufacturers who calibrate the sensor but never validate the software layer converting its signal into the number an operator reads have covered only half of what clause 7.6 actually requires.

Which instruments in a medical device manufacturer typically fall under clause 7.6

The scope of "monitoring and measuring equipment" in a medical device operation is broader than a metrology-specialist audience might assume, and Singapore manufacturers building their equipment register for the first time commonly under-scope it.

The common thread is that clause 7.6 does not only apply to instruments in a metrology lab or on a QC bench. Any measurement feeding a decision about product conformity, and in medical devices that reaches into sterilisation, environmental control, and process validation, sits inside the calibration control system.

Setting risk-based calibration intervals under ISO 13485

ISO 13485 does not prescribe a fixed interval; it requires the interval to be justified and reviewed. A defensible risk-based interval-setting approach considers three inputs together, rather than defaulting every instrument to the same 12-month cycle regardless of its role.

• Criticality of the measurement. An instrument verifying a dimension that, if wrong, could cause a device to fail in use or in the patient carries more risk than one used for an internal, non-release-critical check. Higher-criticality instruments justify shorter intervals.
• As-found calibration history. An instrument that repeatedly returns well within tolerance at each calibration is a candidate for interval extension, with the extension itself documented and justified, not simply assumed. An instrument that has been found near or outside tolerance on a prior cycle should have its interval shortened, not left unchanged.
• Usage intensity and environment. An instrument in daily heavy use, or exposed to a harsher environment (cleanroom gowning areas excepted, but production floor dust, vibration, temperature swings), may drift faster than the same model kept in a QC lab and used occasionally.

This interval justification, and the periodic review of it, needs to live in the documented procedure clause 7.6 requires, not just in the head of whoever manages the equipment register. An auditor who asks "why is this instrument on a 6-month interval and that one on 12 months" is asking a completely legitimate question, and "that's just how we've always done it" is not a QMS answer.

How ISO 13485 calibration requirements differ from ISO 9001

Managing out-of-tolerance findings under ISO 13485

When an instrument is found out of tolerance during calibration, the ISO 13485 response is more structured than for ISO 9001. The organisation must:

1. Quarantine the instrument and initiate a nonconformance record
2. Determine the scope of the OOT finding, which measurements were made with this instrument since its last known-good calibration
3. Assess whether the out-of-tolerance condition could have affected product conformity or patient safety
4. Review the affected products or batches
5. Initiate CAPA if the OOT finding is systemic
6. Document the investigation outcomes and retain as quality records

The scope of the review is bounded by the "last known good calibration". The most recent calibration at which the instrument was confirmed in-tolerance. This makes calibration interval management important: a shorter interval limits the maximum exposure period for an OOT finding.

A worked illustration makes the mechanics concrete. Suppose a digital torque screwdriver used to verify housing closure torque on an implantable device is calibrated every six months, and the latest calibration finds it reading 6% high across its working range, outside the ±3% acceptance criteria set for that application. The last known-good calibration was six months earlier. Every closure torque verification recorded on that instrument in the intervening six months is now within scope of the investigation: the QA team must pull the batch records for every device lot verified with that screwdriver in the window, assess whether a 6% high reading could mean actual applied torque was understated (housings under-tightened) or overstated (housings over-tightened and potentially stressed), and determine whether any lots require additional inspection, rework, or, in the worst case, a field action. This is precisely why interval discipline is not a paperwork exercise: a shorter interval on a high-consequence instrument caps the size of that investigation before it starts.

Calibration records for ISO 13485. What auditors check

Auditors for HSA, FDA, and CE notified bodies will review the calibration record for each instrument listed in the scope of the QMS. The records must be complete, traceable, and retain evidence that each calibration was performed by a competent party using traceable standards. The minimum record content is:

• Instrument identification (model, serial number, asset/tag number)
• Calibration date and next due date
• Calibration results (as-found readings, deviations, pass/fail against acceptance criteria)
• Measurement uncertainty of the calibration
• Reference standard used (with its own calibration certificate reference)
• Name and accreditation details of the calibrating laboratory
• Signature or identification of the person who performed the calibration

SAC-SINGLAS accredited calibration certificates from Unitest contain all of these elements, and the certificate itself demonstrates traceability through the accreditation body's independently verified chain.

Verification vs calibration, a distinction ISO 13485 auditors expect you to know

Clause 7.6 uses the phrase "calibrate or verify," and the two are not interchangeable, though they are often used loosely on the production floor. Calibration compares an instrument's readings against traceable reference standards across its working range and produces a certificate quantifying the instrument's actual performance and associated uncertainty, typically performed by an external accredited lab or a suitably equipped internal metrology function. Verification is a narrower, often internal check confirming an instrument still performs correctly at one or a few points relevant to its actual use, commonly done between full calibrations using a check standard, to catch gross drift or damage early without waiting for the next full cycle.

A defensible ISO 13485 programme uses both, deliberately: full accredited calibration on the defined interval, with interim verification checks scheduled between cycles for instruments where drift risk or criticality justifies the extra discipline. What an auditor will not accept is a programme that only ever performs informal verification and calls it calibration, because verification alone does not establish or re-establish traceability, it only checks that a previously established calibration still appears to hold.

Preparing for an HSA or notified body audit of your calibration system

Beyond having the individual certificates and register in order, a few practical steps consistently shorten and smooth the calibration portion of a QMS audit.

1. Pull the equipment register and a sample of certificates before the auditor asks. An internal review that catches an expired calibration or a missing uncertainty statement a week before the audit is a self-identified nonconformance you control; the same gap found by the auditor is not.
2. Rehearse tracing one instrument end to end. From the register entry, to its most recent certificate, to a specific batch record it supported. If your own team cannot do this quickly, the auditor will not be able to either, and will conclude the linkage does not really exist.
3. Have the interval justification documented, not just remembered. A one-paragraph rationale per instrument class, referencing risk and as-found history, answers the "why this interval" question before it is asked as a finding.
4. Confirm every accredited certificate's scope actually covers the parameter claimed. A lab's SAC-SINGLAS accreditation is scope-specific; a certificate for a parameter outside that scope is not accredited evidence even if it comes from an otherwise accredited lab.

Building an equipment register that survives an audit

The single document that does more to make or break an ISO 13485 calibration audit than any individual certificate is the master equipment register: the list that ties every piece of monitoring and measuring equipment in the QMS scope to its calibration status, interval, and location. A register that is complete, current, and cross-referenced to the device history records it supports gives an auditor confidence in the whole system within the first few minutes of review. A register with gaps, duplicate entries, or instruments that were retired but never removed does the opposite, and tends to invite a deeper, slower audit into everything else.

A usable register records, at minimum: a unique asset identifier, make/model/serial number, location or department, the parameter(s) and range calibrated, the assigned interval and its risk-based justification, last and next-due calibration dates, the calibrating laboratory and whether that calibration was accredited, and a link (physical or in the QMS software) to the actual certificate. For instruments that directly touch product release decisions, cross-referencing the register to the specific batches or lots verified during each calibration interval closes the loop an OOT investigation needs.

Equally important is a documented process for what happens when an instrument is taken out of service, sold, or replaced: removing it from active calibration schedules while retaining its historical records for the full device lifetime retention period, so the register reflects what is actually in use today without losing the audit trail for products already shipped.

Common findings in HSA and notified body audits, and how to close the gap

• Instruments used for release decisions missing from the register. Often gauges, jigs with built-in indicators, or environmental sensors treated as "facilities" equipment rather than QMS-scoped instruments. If a measurement from it ever informs a conformity decision, it belongs on the register.
• Fixed intervals with no risk justification on file. Auditors increasingly ask to see the reasoning behind an interval, not just the interval itself. A one-line risk statement per instrument class, reviewed periodically against as-found data, closes this gap cheaply.
• Calibration certificates without stated measurement uncertainty. A pass/fail-only certificate does not give the manufacturer enough information to judge whether the instrument is fit for the tolerance it is being used to verify. SAC-SINGLAS accredited certificates state uncertainty as a matter of course.
• Software confirmation records missing or undocumented. Teams that diligently calibrate transducers but never separately confirm the software layer processing the signal, in breach of the software-suitability requirement in clause 7.6.
• No linkage between an OOT finding and the batches it could have affected. Without traceability from instrument to product lot, the impact assessment required after an OOT finding cannot be properly scoped, which is itself flagged as a nonconformance.

Why SAC-SINGLAS accreditation carries particular weight for HSA-regulated manufacturers

Singapore's Health Sciences Authority regulates medical devices under the Health Products Act, and its GDPMDS (Good Distribution Practice for Medical Devices) and manufacturing oversight expectations align closely with ISO 13485 as the reference QMS standard. For a manufacturer supplying HSA-regulated devices, or exporting into markets whose regulators (FDA under 21 CFR Part 820, EU notified bodies under the MDR) will review the same QMS records, calibration evidence needs to withstand scrutiny from more than one regulatory audience at once. A SAC-SINGLAS accredited certificate does that efficiently: SAC's status as an ILAC Mutual Recognition Arrangement signatory means the accreditation itself, and the traceability chain behind every certificate it issues, is recognised well beyond Singapore's borders, which matters directly for manufacturers whose devices and audit trails travel to multiple markets.