Quality System Evidence: ISO 13485 and GMP

1. Key takeaways

Myanmar’s quality system requirements for medical devices come down to two sets of evidence: (1) an ISO 13485 quality management system certificate, and (2) the manufacturing licence of the country of origin together with GMP audit reports or certificates.

GRZAN note: ISO 13485 in Myanmar is not merely a bonus point; it is the foundation of conformity assessment for all manufacturers. When preparing the dossier, companies must confirm that the certificate covers the manufacturing site and the device scope, because these are the two items most frequently questioned during review. A certificate that reads beautifully in its header but stops short of the actual production address, or that lists a device category narrower than the one being registered, will generate exactly the kind of clarification request that this guidance is designed to avoid.

The practical consequence is that quality system evidence should be treated as a living asset rather than a one-off attachment. Certificates expire, sites change, and device scopes are extended, so the evidence set behind a Myanmar registration must be maintained with the same discipline as the registration itself. Mapping every certificate to its expiry date, its covered sites and its covered scope in a single register is the simplest way to keep that discipline visible.

2. Legal basis

3. Expert insights

Insight 1: ISO 13485 is a universal threshold for market access, not a class-dependent variable. Public sources record that all manufacturers need ISO 13485. This means that Class A products equally require quality system evidence, which differs from the exemption designs of some other markets where the lowest-risk devices escape most documentary demands. Companies familiar with those markets should not assume the same relaxation carries over to Myanmar.

Insight 2: the certificate must cover two dimensions at once: the site and the device scope. Holding a certificate is not enough; the review checks the site list and the product categories in the certificate annexes. For multi-site manufacturing, each relevant site may need to provide QMS evidence separately, and a certificate that names only the headquarters will not answer a question about a second plant. The review reads the annexes, not the ambition, of the certificate.

Insight 3: contract manufacturing must be traced through to the subcontractor. In outsourced production situations, the licensee’s documents and a summary of the quality agreement must be submitted. This signals that companies should include qualification documents in the supplier admission checklist when selecting a CMO, not after the manufacturing agreement has been signed. A subcontractor whose licence or quality agreement cannot be evidenced will block the dossier regardless of how complete the rest of it is.

Insight 4: ISO 13485 and GMP evidence sit side by side rather than substituting for each other. The former is evidence of the system standard; the latter is evidence of manufacturing qualification in the country of origin. Both are listed separately in the dossier, and one cannot be filed in place of the other. Preparing them as a matched pair, requested from different sources at the same time, avoids the late scramble that otherwise occurs when one arrives months before the other.

Insight 5: compared with other ASEAN markets, Myanmar relies more heavily on ISO 13485. In the absence of a dedicated national law and domestic review rules, international standards become the principal technical reference. A robust ISO 13485 system therefore does double duty: it satisfies the Myanmar requirement and simultaneously strengthens the company’s position across the region. For companies selling into several ASEAN jurisdictions, the incremental cost of keeping the system audit-ready is low relative to the number of markets it unlocks.

4. Practical recommendations

• Confirm that the ISO 13485 certificate covers all relevant manufacturing sites. Check the site list in the certificate annexes, and where a newly acquired site is missing, plan the certificate update before the submission rather than after the FDA raises it.
• Check that the certificate scope covers the device categories being submitted. Obtain the scope statement page.
• For contract manufacturing, prepare the subcontractor licence and the quality agreement summary. Include them in the dossier from the start, so that the chain of manufacturing responsibility is visible to the reviewer on the first read.
• Prepare the manufacturing licence of the country of origin and the GMP evidence in parallel. File them separately from the system certificate.
• Establish an expiry reminder mechanism for certificates. Cover ISO, GMP, the manufacturing licence and the FSC together, since a single lapsed certificate can stall a submission or a renewal just as effectively as a missing one.

5. Verification checklist

• □ A valid ISO 13485 certificate has been obtained
• □ It has been confirmed that the certificate covers the manufacturing site
• □ It has been confirmed that the certificate scope covers the devices being submitted
• □ The manufacturing licence of the country of origin has been obtained
• □ GMP audit reports or certificates have been prepared
• □ Subcontractor documents have been prepared for contract manufacturing
• □ Expiry reminders have been established for all qualification documents

Regulatory information verified as of 29 October 2026.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support across Southeast Asia, including Myanmar. Our team prepares the technical dossier to ASEAN CSDT structure, manages submission and deficiency responses with the Myanmar FDA, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com