Reading an ISO 13485 Scope: Why 'Components' Is Not 'Finished Devices'
Published 2026-10-27 · Keywords: ISO 13485 autoinjector
Two suppliers can both say “ISO 13485 certified” and only one of them is certified for what you are buying. The difference is in the scope text — the line on the certificate that states what the quality system actually covers. A scope reading “plastic injection moulding” or “medical device components” does not cover a finished autoinjector, and a sourcing team that skips that line discovers the gap during the audit, when it costs the most.
Scope wordings, and what each really covers
| Scope text says | Covers a finished pen injector? | What you can source under it |
|---|---|---|
| “Design and Development, Production and Distribution of Pen Injector, Disposable Pen Injector” | Yes — finished device, explicitly | Complete devices |
| “Production of medical device components” | No — components only | Parts, not the qualified device |
| “Plastic injection moulding” | No — a process, not a device | Moulded parts |
| “Design and manufacture of drug delivery devices” | Yes, in substance | Devices — but ask which device families |
The first line is our manufacturing partner’s scope, quoted verbatim, because it is the version worth copying: certificate issued by TÜV SÜD under ISO 13485:2016, MDSAP-audited for TGA, ANVISA, Health Canada, Japan MHLW/PMDA and USA FDA markets, valid to 2029-02-11. Every word in that scope is doing work — design and development means engineering changes run inside the system; distribution means the supply chain step is too.
The holder question, asked plainly
Certificates belong to legal entities. When the certificate holder is a manufacturing partner rather than the brand you are talking to — a common and legitimate structure — the pages that name nothing are the ones to distrust. The useful version states who holds it and offers the redacted certificate: this is why our compliance page shows redacted public copies with the scope text visible and the holder identified to qualified buyers on request.
The counterintuitive point: a supplier who states plainly what it does not hold — “ISO 15378 for primary packaging sits with our carton supplier; we can request their certificate” — is easier to trust than one whose certificate page is all logos and no scope text. Stating the boundary moves the conversation from catching claims to confirming them.
How to verify any certificate in five minutes
Ask for: certificate number, issuing body, validity dates, scope text verbatim. Then look the number up in the issuing body’s public registry. Then ask whether the scope’s device family matches your product line by name. Three documents, one registry lookup, no phone calls.
What this does not cover
ISO 13485 is a quality-system standard — it says nothing about a device’s market clearance or approval in any jurisdiction. Product registrations, 510(k) clearances and CE markings are separate evidence with separate documents.
Next step: ask which entity holds the certificate, which scope text it carries and when the copy is released — with us it comes with the order documentation, not before — then verify the number against the registry once you have it. Start the inquiry.
Related reading
Talk to NOVIXPEN about your program
Send your container format, annual volume and target market — we reply with the platform match, documentation set and written quotation within one working day.
Start the inquiry