# ISO 13485 Internal Audit Report Template (with Sample Findings and Checklist)

> Source: https://netray.co/tools/iso-13485-internal-audit-report-template
> Publisher: Netray (netray.co), AI and integration engineering for ERP and manufacturing systems.
> Section: Free Tools

## Short answer

A fillable ISO 13485 internal audit report with scope, findings by clause, CAPA references, conclusions and a short audit checklist. Includes realistic sample content.

## Category

quality

## Industry

Medical Devices

## Audience

- Internal auditor
- Quality manager
- Medical device manufacturer

## Tool

**Kind:** template

**Output:** document

**Fields:**

#### Company name

**Key:** company

**Type:** text

**Default:** Acme Medical Devices Ltd

#### Audit number

**Key:** audit_no

**Type:** text

**Default:** IA-2026-04

#### Audit date

**Key:** date

**Type:** date

**Default:** 2026-10-14

#### Lead auditor

**Key:** auditor

**Type:** text

**Default:** J. Rivera (Quality Engineer)

#### Auditee / process

**Key:** auditee

**Type:** text

**Default:** Purchasing and supplier evaluation

#### Audit scope

**Key:** scope

**Type:** textarea

**Default:** Purchasing process, approved supplier list maintenance, incoming inspection records for the last six months.

#### Audit criteria

**Key:** criteria

**Type:** text

**Default:** ISO 13485:2016 clause 7.4, QP-004 Purchasing procedure, applicable regulatory requirements

#### Finding 1 (nonconformity)

**Key:** finding1

**Type:** textarea

**Default:** Three of ten sampled critical suppliers had no documented re-evaluation within the interval set in QP-004. Evidence: approved supplier list rows 4, 7 and 9.

#### Finding 2 (observation)

**Key:** finding2

**Type:** textarea

**Default:** Incoming inspection sampling plan references a superseded revision of the inspection specification in the ERP; the released revision was used on the floor.

#### Conclusion

**Key:** conclusion

**Type:** textarea

**Default:** The purchasing process is generally effective. One nonconformity and one observation were raised. Corrective action is required for the supplier re-evaluation gap.

**Blocks:**

#### Internal Audit Report

**Body:** Organization: {{company}}
Audit number: {{audit_no}}
Audit date: {{date}}
Lead auditor: {{auditor}}
Process audited: {{auditee}}

#### 1. Scope and criteria

**Body:** Scope: {{scope}}

Criteria: {{criteria}}

Method: interviews, document and record review, sampling of records, observation. The auditor was independent of the process audited.

#### 2. Findings

**Table:**

**Columns:**

- No.
- Type
- Clause
- Finding and evidence
- CAPA no.
- Due date

**Rows:**

**0:** 1

**1:** Nonconformity

**2:** 7.4.1

**3:** {{finding1}}

**4:** CAPA-2026-031

**0:** 2

**1:** Observation

**2:** 4.2.4

**3:** {{finding2}}

**0:** 3

**1:** Good practice

#### 3. Conclusion

**Body:** {{conclusion}}

#### 4. Audit checklist (record answers during the audit)

**Table:**

**Columns:**

- Question (paraphrased requirement)
- Evidence reviewed
- Y / N / NA

**Rows:**

**0:** Are suppliers evaluated and selected on their ability to supply to requirements, with criteria defined?

**0:** Is the approved supplier list controlled, with re-evaluation done at the defined interval?

**0:** Do purchasing records describe the product, including quality and regulatory requirements?

**0:** Is incoming product verified according to a plan matched to risk?

**0:** Are supplier performance issues recorded and acted on?

**0:** Are previous audit nonconformities closed with effective corrective action?

#### Sign-off

**Signatures:**

- Lead auditor
- Auditee process owner
- Management representative

**Notes:** Internal audits under clause 8.2.4 must be planned with a documented procedure, cover the whole system on a schedule that considers risk and previous results, use auditors independent from the area, and report results to management. This sample is a starting point and the checklist paraphrases clause 7.4; it does not replace the standard. Change the clause and criteria for each process audited.

## Content

**Intro:** This ISO 13485 internal audit report template includes a filled sample so you can see what a good finding looks like: a clause reference, the evidence found, a type, and a CAPA link. Change the fields, export to Word or PDF, and use the short checklist during the audit.

**Sections:**

#### How to use this audit report template

**Body:** Plan the audit before you write anything: scope, criteria, auditee, date and who is independent. During the audit, record evidence in the checklist table, such as record numbers, lot numbers and who you interviewed. After the audit, write each finding as the requirement, the evidence and the gap, then assign a clause reference and a type: nonconformity, observation or good practice. Link nonconformities to a CAPA so the report and the corrective action system match. Send the signed report to the process owner and include a summary in the next management review.

**Bullets:**

- One finding per issue, not a paragraph of mixed problems
- Cite record IDs, not 'some records'
- Classify nonconformities consistently, major versus minor, using your own definition
- Verify effectiveness of earlier CAPAs at the next audit of that process

#### What ISO 13485 requires of internal audits

**Body:** Clause 8.2.4 requires audits at planned intervals to check that the quality management system conforms to the planned arrangements, the standard and your regulatory requirements, and is effectively implemented and maintained. The audit programme is planned considering the status and importance of the processes and areas, and the results of previous audits. A documented procedure must describe responsibilities, planning, reporting and records. Auditors must not audit their own work. Management responsible for the area must take timely action on findings, and follow-up must verify the actions and report the results.

#### Writing a good finding: sample wording

**Body:** A weak finding says 'supplier evaluation is inadequate'. A strong one says: 'Three of ten critical suppliers sampled had no re-evaluation record within the interval defined in QP-004, rows 4, 7 and 9 of the approved supplier list. Requirement: clause 7.4.1.' The strong version is checkable, traceable and gives the CAPA owner a starting point. Add a risk comment where the gap could affect product quality or compliance, because it influences how quickly the action should close.

#### Auditor training and checklists

**Body:** Internal auditor training for ISO 13485 should cover the standard, your regulatory environment, audit planning, interviewing, evidence collection and reporting findings. A checklist is a prompt, not a script, and auditors who read every question aloud miss what the evidence shows. Build checklists from your own procedures and risk, and keep them with the report so another auditor can see the sample. If you need a clause by clause list, start with our ISO 13485 internal audit checklist.

**Cta:** If audit evidence is spread across your ERP, document control and CAPA tool, Netray can build a private AI layer on your own servers to retrieve it for the auditor in seconds.

**Faq:**

#### What must an ISO 13485 internal audit report contain?

**Answer:** Scope and criteria, the date and auditors, findings with evidence and clause references, conclusions, and follow-up actions. The report is a record under clause 4.2.5 and feeds management review. The exact layout is up to you.

#### How often should internal audits be done?

**Answer:** Clause 8.2.4 requires planned intervals but does not fix them. Most manufacturers audit the whole system annually and high-risk processes more often. Consider process changes, complaints, and the previous audit results.

#### Can the quality manager audit their own department?

**Answer:** No. Auditors must be objective and impartial and must not audit their own work. In a small company, use an auditor from another department or an external auditor for that process.

#### What is the difference between an observation and a nonconformity?

**Answer:** A nonconformity is a failure to meet a requirement of the standard, regulation or your own procedure and needs corrective action. An observation is a potential weakness or improvement opportunity. Your audit procedure should define both.

## Search terms

iso 13485 audit report template, iso 13485 audit report pdf, iso 13485 audit report sample, iso 13485 internal audit report template, iso 13485 internal audit report sample, check list auditoria iso 13485, internal auditor training iso 13485, iso 13485 internal audit

---
Talk to an engineer: https://netray.co/contact?intent=erp_ai | Machine catalog: https://netray.co/agent/catalog.json