Medical devices · ISO 13485 · FDA QMSR (21 CFR 820) · ISO 14971 · 21 CFR Part 11

Your device QMS, built the way your team works.

Since February 2026 the FDA's Quality Management System Regulation incorporates ISO 13485. Keep risk files, complaints, CAPA, nonconformances, documents, training, calibration and suppliers in one workspace, with controlled records and signatures.

What you keep in Qualsted
  • Risk management files: hazards, harms, risk controls and residual risk (ISO 14971)
  • Complaints with reportability decisions
  • CAPA and nonconforming product
  • Controlled documents and records
  • Competence and training
  • Monitoring and measuring equipment, calibration
  • Approved suppliers and their requalification
Who uses it
  • Quality and regulatory affairs
  • R&D and design engineering
  • Operations and supplier quality

People who only need to look, such as managers, auditors and customers, get free viewer seats.

In practice

What it looks like.

A table of corrective and preventive actions with their source, problem, owner, due date and status.
CAPA, each linked to the deviation that raised it.
A calendar of equipment calibration due dates for the month.
Calibration calendar for the equipment your results depend on.

Screens show sample data from a fictional company.

How it supports your standard

The clauses your auditor asks about, and what answers them.

Qualsted gives you the technical controls and the records; your procedures, training and verification of your own configuration complete the picture.

Clause How Qualsted helps
ISO 13485 §4.2.4, §4.2.5 Control of documents and records. Documents reviewed and approved before use, versions kept, records protected, retrievable and never deleted.
ISO 13485 §7.1 · ISO 14971 Risk management. A risk register per product with severity, probability, risk controls and residual risk, reviewed and approved.
ISO 13485 §8.2.2 Complaint handling. Complaints from receipt to closure with investigation, reportability decision and approval.
ISO 13485 §8.3 Nonconforming product. Identification, disposition and approval of nonconforming product, linked to CAPA.
ISO 13485 §8.5.2, §8.5.3 Corrective and preventive action. CAPA with root cause, actions, effectiveness check and approval, with reminders before due dates.
21 CFR Part 11 Electronic records and signatures. Signatures with meaning and re-authentication, linked to content; an append-only audit trail.
Templates

Start from these, installed in one click.

Working processes with review signatures, reminders and views set up, as ordinary tables and pages you can change.

Quality

Risk management (ISO 14971)

A risk register per product: hazards, hazardous situations and harms, severity and probability before and after risk controls, verification of the controls, and Quality's approval, with a yearly review.

  • Risk register 20 columns · IDs like RSK-0001 · signed: Approved by
  • Reminder: Risk review due in 30 days

ISO 14971:2019 · ISO 13485 §7.1 · FDA QMSR (21 CFR 820) · EU MDR Annex I

Quality

Complaints

Customer complaints from receipt to closure: investigation, reportability decision, response, and QA approval.

  • Complaints 13 columns · IDs like CMP-0001 · signed: Closed by QA
  • Reminder: Complaint due in 3 days
  • Reminder: Complaint overdue

21 CFR 211.198 · FDA QMSR (21 CFR 820) · ISO 13485 §8.2.2 · ISO 9001 §9.1.2

Quality

Deviations and CAPA

Record deviations, assess their impact, and open a corrective and preventive action when one is needed. CAPAs are reviewed and approved, with reminders before they fall due.

  • Deviations 15 columns · IDs like DEV-0001 · signed: QA approval
  • CAPA 13 columns · IDs like CAPA-0001 · signed: Reviewed by, Approved by
  • Reminder: Deviation due in 3 days
  • Reminder: Deviation overdue
  • Reminder: CAPA due in 3 days
  • Reminder: CAPA overdue

21 CFR 211.192 · FDA QMSR (21 CFR 820) · ISO 13485 §8.5.2 · ISO 9001 §10.2 · EU GMP Ch. 1

Quality

Nonconformances

Product or material that doesn't meet requirements: identify it, decide its disposition, and get it approved.

  • Nonconformances 14 columns · IDs like NC-0001 · signed: Disposition approved by
  • Reminder: Nonconformance due in 3 days
  • Reminder: Nonconformance overdue

ISO 9001 §8.7 · ISO 13485 §8.3 · FDA QMSR (21 CFR 820) · AS9100 §8.7 · IATF 16949 §8.7

Quality

Document control (SOPs)

Controlled documents with versions, review and approval. Each document gets a periodic review date two years ahead, and its owner is reminded a month before it's due.

  • Documents 11 columns · IDs like DOC-0001 · signed: Reviewed by, Approved by
  • Reminder: Periodic review due in 30 days

21 CFR 211.100 · FDA QMSR (21 CFR 820) · ISO 9001 §7.5 · ISO 13485 §4.2.4 · ISO/IEC 17025 §8.3

Operations

Supplier qualification

Approved suppliers with their risk, certificates and qualification, approved by Quality and requalified every year.

  • Suppliers 10 columns · IDs like SUP-0001 · signed: Approved by
  • Reminder: Requalification due in 30 days

FDA QMSR (21 CFR 820) · ISO 9001 §8.4 · ISO 13485 §7.4 · AS9100 §8.4 · EU GMP Ch. 5

See all templates

AI assistant · add-on

Ask your records, in your own words.

The assistant answers questions about your tables, draws charts and summarizes long records. It sees only what you can see, never changes or signs anything, and every use is logged.

How the assistant works

Help · Ask the assistant

Which risks for product X still have a residual risk of High?

Summarize complaint CMP-0042 and its investigation.

Answers come from the records you can see, with charts and links to them.

Questions

What medical devices teams ask us.

Does it cover design controls?

You can build design inputs, outputs, verification and reviews as linked tables with signatures. There's no ready-made design-control template yet; the risk management template covers ISO 14971.

Is it validated for QMSR?

Every release comes with a validation report (requirements traced to automated tests). You verify your own configuration for its intended use, as ISO 13485 §4.1.6 asks.

See it with your own process

Bring one workflow. We'll build it with you in the demo.