Is ISO 13485 based on ISO 9001:2015 or an earlier version?

ISO 13485:2016 is based on ISO 9001:2008, not ISO 9001:2015.

When ISO 13485 was last revised (2016), the technical committee intentionally aligned it with the 2008 version of ISO 9001 to maintain stability for regulated medical device quality management systems and regulators. As a result:

• ISO 13485:2016 keeps the ISO 9001:2008-style clause structure (not the Annex SL high-level structure used in ISO 9001:2015).
• It does not fully adopt ISO 9001:2015 concepts such as organization-wide risk-based thinking in the same form, although it has extensive, more specific risk management requirements for medical devices.
• Some terminology and clause references differ from ISO 9001:2015, which complicates direct one-to-one mappings in integrated QMS deployments.

In brownfield environments where a site already uses ISO 9001:2015 for general operations and ISO 13485 for medical device lines or business units, this misalignment means:

• You cannot assume a common clause structure across both standards; mappings must be explicit and documented.
• Electronic QMS, MES, and document control systems need carefully configured workflows and metadata so records support both standards without implying full equivalence.
• Change control and validation for shared processes (e.g., CAPA, document control, training) must show how each requirement from ISO 13485 and ISO 9001:2015 is individually addressed.

Future revisions of ISO 13485 may move closer to ISO 9001:2015, but any such change would require careful impact assessment, revalidation of computerized systems, and updated mappings in regulated manufacturing environments.