Our ISO 13485 internal auditing services support medical device organisations in assessing the effectiveness and compliance of their Quality Management System (QMS). Patient Guard provides expert auditors to ensure your system meets ISO 13485:2016 requirements and is fully prepared for certification or regulatory inspections.
ISO 13485 internal audits are a critical requirement of maintaining a compliant Quality Management System. They ensure your processes are effectively implemented, compliant with regulatory requirements, and aligned with medical device standards.
Regular internal audits help identify non-conformities, gaps, and opportunities for improvement before external audits or Notified Body inspections.
Patient Guard acts as your independent internal audit partner, providing objective, expert-led audits to evaluate your QMS against ISO 13485:2016 and applicable regulatory frameworks such as EU MDR and UK MDR.
Without robust internal audits, organisations risk audit findings, regulatory delays, and potential non-compliance.
Patient Guard provides expert ISO 13485 internal audit services tailored to medical device manufacturers, start-ups, and suppliers. We support audit planning, execution, reporting, and corrective action follow-up.
Whether preparing for certification or maintaining compliance, we ensure your QMS is audit-ready.
Don’t wait for a Notified Body to find your gaps. We conduct ‘Full-Stress’ Mock Audits designed to replicate the intensity of an MDR or MHRA inspection. Our auditors look specifically for the common 2026 pitfalls: weak Post-Market Surveillance (PMS) links and outdated Clinical Evaluation Reports (CER)
New for April 2026: Are your clinical investigation files compliant with the today’s enforcement of the Clinical Trials Amendment Regulations 2025? We provide specialized audits for Trial Master Files, ensuring your data integrity and 25-year archiving protocols meet the new MHRA standards
This page explains Patient Guard’s ISO 13485 internal auditing services for medical device manufacturers. If you're looking for a broader introduction to ISO 13485, including Quality Management System (QMS) requirements, internal audits, management reviews, risk management, document control, certification and regulatory compliance, read our Complete Guide to ISO 13485.
Operating as a trusted industry partner since 2017, we specialise strictly in medical device quality systems and global regulatory compliance standards.
We actively support diverse organisations across the full medical device lifecycle, from early-stage start-ups to established international manufacturers.
We provide completely unbiased, detached assessments of your QMS to identify real product risks and structural gaps before external inspectors do.
We believe in open operations. We provide clear, project-based or fixed annual pricing structures with absolutely no hidden costs.
Our lead auditors completely align every evaluation with ISO 13485:2016, EU MDR, UK MDR, and ever-evolving global regulatory expectations.
We don’t just flag problems. We deliver clear, highly structured audit reports packed with practical recommendations to optimize your workflows.
Patient Guard have been a great support service to Cormed, providing help and advice promptly whenever requested. They have become a virtual department within Cormed enabling us to keep up to date and comply with the regulatory requirements whilst ensuring our QMS works for us at the same time.”
Tracey Slater, Cormed
We precisely define the audit scope based directly on your active QMS architectures, device classifications, and target market requirements.
Our qualified lead auditors comprehensively assess your organizational processes against every clause of the ISO 13485:2016 standard.
We systematically check high-risk operational pillars, including design controls, risk management integration, and supplier validation metrics.
We conduct deep reviews of your standard operating procedures, historical batch records, and technical compliance documentation files.
You receive an institutional-grade audit report clearly separating minor/major non-conformities, technical gaps, and practical observations.
We don't leave you stranded with findings; we actively support your team during corrective and preventive action planning and system integration.
We design full-stress mock audits replicating the precise intensity of a Notified Body or MHRA inspector review to build total team confidence.
ISO 13485:2016 requires organisations to:
Internal audits are essential to demonstrate ongoing compliance and continual improvement.
We define scope, schedule, and audit objectives.
We conduct the audit, including interviews, document review, and process assessment.
We provide findings, identify non-conformities, and support corrective actions.
We support ISO 13485 internal audits across:
From
Ensure ongoing quality compliance and certification readiness with expert ISO 13485 quality audits.
1-2 weeks
1-2 days depending on organisation size
1-2 days depending on organisation size
An internal audit is a systematic review of your Quality Management System to ensure compliance with ISO 13485 and regulatory requirements.
Internal audits should be conducted at planned intervals, typically annually or based on risk and process criticality.
Yes, Patient Guard provides independent auditors to ensure objective and unbiased audit results.
Non-conformities must be addressed through corrective actions, and we can support CAPA implementation.
Audit duration depends on organisation size and scope but typically ranges from 2–5 days.
Yes. Clause 8.2.4 of ISO 13485:2016 requires audits at 'planned intervals.' In the current 2026 regulatory climate, the MHRA and Notified Bodies expect to see a robust audit schedule that covers every process of your QMS at least once per year.
Absolutely. We offer a specific 'Medical Device File Audit' (Technical File) as a bolt-on to our QMS audits. This ensures your Annex II/III documentation (MDR) or Part II (UK MDR) is audit-ready and aligned with your quality procedures.
A Gap Analysis is a roadmap used before you have a system in place. An Internal Audit is a compliance check used after your system is live to verify it is actually being followed. We provide both to support you at every stage of your growth.
Click on the links below to discover more:
Does your medical device require FDA 510(k) clearance? This step-by-step guide explains the 510(k) process, substantial equivalence, predicate devices, testing, eSTAR submissions, FDA review and what manufacturers need to do after clearance.
Planning to place a medical device on the US market? This complete guide explains FDA medical device regulations, including device classification, 510(k), De Novo and PMA pathways, QMSR and ISO 13485, establishment registration, device listing, U.S. Agent requirements, UDI and post-market obligations.
Preparing to sell digital health technology to the NHS requires more than completing DTAC. This guide explains how manufacturers can build a procurement-ready position by aligning regulatory compliance, clinical safety, data protection, cybersecurity, interoperability, accessibility and commercial evidence for NHS market access.
For digital health manufacturers preparing to enter the NHS, clinical safety can be one of the most important—and sometimes misunderstood—parts of DTAC.
It is not enough to demonstrate that your software works.
Manufacturers need to consider what could happen if the technology fails, produces incorrect information, presents information incorrectly, contributes to a workflow error or is used in circumstances that could expose patients to harm.
This is where clinical risk management and DCB0129 become particularly important.
NHS England identifies DCB0129 as the clinical risk management standard for manufacturers of health IT systems. Its counterpart, DCB0160, applies to health organisations deploying and using health IT systems. NHS England states that compliance with these standards is required under the Health and Social Care Act 2012.
For manufacturers working towards NHS DTAC readiness, understanding the distinction—and having the right clinical safety evidence—is essential.
If your digital health technology is heading towards the NHS, understanding the Digital Technology Assessment Criteria (DTAC) should be part of your market-access planning.
But one of the biggest mistakes manufacturers can make is treating DTAC as simply another questionnaire to complete.
The questions are only part of the process.
Behind your answers needs to be evidence showing that your technology and organisation have appropriate arrangements for clinical safety, data protection, technical security, interoperability, and usability and accessibility.
These five areas form the core of NHS DTAC. NHS England describes DTAC as national baseline criteria for digital health technologies entering NHS and social care.
For digital health manufacturers, the practical question is therefore not simply:
“Can we complete the DTAC assessment?”
It is:
“Can we demonstrate that our product meets the requirements?”
This guide looks at each of the five DTAC areas, the types of evidence manufacturers should consider and some of the common gaps that can delay NHS readiness.
A complete guide to NHS DTAC compliance for digital health manufacturers, covering the five DTAC assessment areas, required evidence, clinical safety, data protection, technical security, interoperability and usability, and how to prepare your digital health technology for NHS procurement.
Speak to one of our regulatory and compliance experts to arrange an obligation-free call. Our experienced team is ready to help you get your medical device to market.
UK Office
Thank you! The checklist is now ready to download.
