Association: Medical devices and medtech

MDMA, AdvaMed and medical device manufacturing: regulation, ERP and AI realities

The Medical Device Manufacturers Association (MDMA) and the Advanced Medical Technology Association (AdvaMed) are the two best-known US trade groups for device and medtech companies, both based in Washington, DC. Device makers share a regulatory load of FDA quality system rules, UDI and design controls, which drives how ERP, document control and any AI tooling must be set up.

Who the members are

Contract manufacturing of devices and components
Precision machining, injection molding, extrusion and assembly of surgical instruments, implant components, housings and disposables for device OEMs, often in cleanroom or controlled environments.
Orthopedic and implantable devices
Titanium, cobalt chrome and stainless machining, surface finishing, laser marking and sterile packaging with full lot and serial traceability.
Electronic and diagnostic equipment
Printed circuit board assembly, sensors, software-driven monitors and diagnostic instruments with firmware version control and calibration records.
Single-use disposables and packaging
High volume molded and assembled products such as syringes, catheters and tubing sets, with sterilization, validation and lot release steps.

The ecosystem

Advanced Medical Technology Association (AdvaMed) association
Washington, DC trade association representing medical device, diagnostics and digital health companies, and organizer of The MedTech Conference.
Medical Device Manufacturers Association (MDMA) association
Washington, DC association that focuses on policy issues for innovative and often smaller medical device companies.
US Food and Drug Administration, CDRH regulator
The Center for Devices and Radiological Health regulates medical devices in the United States.
ISO 13485 standard body
International quality management standard for medical device organizations, published by ISO.
AAMI standard body
The Association for the Advancement of Medical Instrumentation develops standards and technical reports used across device manufacturing and sterilization.
Medical Device Single Audit Program (MDSAP) audit program
Program that lets one audit satisfy the requirements of several participating regulators.
MD&M trade shows trade show
Medical Design and Manufacturing events are a long-running venue for suppliers and device makers.

Requirements customers here expect

FDA 21 CFR Part 820, the Quality Management System Regulation (QMSR), which incorporates ISO 13485:2016 and took effect in February 2026ISO 13485 quality management system certificationUnique Device Identification under 21 CFR Part 830Design controls, CAPA, complaint handling and device history recordsMedical device reporting under 21 CFR Part 80321 CFR Part 11 for electronic records and signaturesISO 14971 risk managementEU MDR (Regulation 2017/745) for devices sold in the European Union

What device makers and suppliers produce

The sector has two layers. Device OEMs hold the regulatory responsibility and design history, while a large supplier base machines, molds, assembles and packages components to the OEM's drawings and quality agreements. Suppliers often inherit the OEM's traceability and change-control expectations even when they are not themselves the legal manufacturer.

Quoting and estimating realities

Device quotes carry costs that general job shops often miss: first article and process validation (IQ, OQ, PQ), inspection plans, cleanroom time, sterilization or packaging validation, and documentation labor. Small lots and frequent revisions make setup recovery critical.

Estimators who price from historical jobs can use retrieval over past quotes and validation packages to find comparable parts, then have a person confirm the final price and the validation scope.

Validation protocols and re-validation after change
Inspection, gauge and calibration burden
Controlled environment and packaging costs

Try it here, free

FDA 21 CFR 820 to ISO 13485 Clause Crosswalk

Open full tool

Map each 21 CFR 820 quality system topic to the corresponding ISO 13485 clause to speed up QMSR gap assessments and procedure rewrites.

Download:

21 CFR 820 section (legacy QSR)	Topic	Closest ISO 13485 clause	Note
820.20	Management responsibility	5 Management responsibility	Includes quality policy, planning and management review
820.20(c)	Management review	5.6 Management review	ISO 13485 specifies review inputs and outputs in more detail
820.22	Quality audit	8.2.4 Internal audit	Audit procedure, auditor independence, follow-up
820.25	Personnel, training	6.2 Human resources	Competence, training and awareness
820.30	Design controls	7.3 Design and development	Planning, inputs, outputs, review, verification, validation, transfer, changes
820.40	Document controls	4.2.4 Control of documents	Approval, distribution, change control of documents
820.50	Purchasing controls	7.4 Purchasing	Supplier evaluation, purchasing information, verification of purchased product
820.60	Identification	7.5.8 Identification	Product identification through all stages
820.65	Traceability	7.5.9 Traceability	Required for implants and life-supporting devices in particular
820.70	Production and process controls	7.5.1 Control of production and service provision	Includes environmental control, personnel health, equipment
820.72	Inspection, measuring and test equipment	7.6 Control of monitoring and measuring equipment	Calibration and calibration records
820.75	Process validation	7.5.6 Validation of processes for production and service provision	Validation where results cannot be fully verified by inspection
820.80	Receiving, in-process and finished device acceptance	7.4.3 and 8.2.6 Monitoring and measurement of product	Acceptance criteria and release records
820.86	Acceptance status	7.5.8 and 8.2.6	Status identification through the process
820.90	Nonconforming product	8.3 Control of nonconforming product	Disposition, rework, concessions
820.100	Corrective and preventive action	8.5.2 Corrective action, 8.5.3 Preventive action	Investigation, verification of effectiveness
820.120	Device labeling	7.5.1 and 4.2.3 as applicable	Labeling control requirements are partly regulatory rather than in the standard
820.130	Device packaging	7.5.11 Preservation of product	Packaging and handling that protect product
820.140	Handling	7.5.11 Preservation of product	Handling that prevents mix-ups, damage, contamination
820.150	Storage	7.5.11 Preservation of product	Storage areas and receipt and dispatch authorization
820.160	Distribution	7.5.1 and 7.5.11	Distribution records and review of orders
820.170	Installation	7.5.3 Installation activities	Where installation is a requirement of the device
820.180	General records requirements	4.2.5 Control of records	Retention periods set by device life and regulation
820.181	Device master record	4.2.3 Medical device file	ISO 13485 uses the medical device file concept
820.184	Device history record	7.5.1 Production records	Per batch or unit production record
820.198	Complaint files	8.2.2 Complaint handling	Includes evaluation for reportability
820.200	Servicing	7.5.4 Servicing activities	Service records and analysis
820.250	Statistical techniques	8.1 and 8.4 Analysis of data	Valid statistical methods for sampling and analysis

Since the Quality Management System Regulation (QMSR) took effect, 21 CFR Part 820 incorporates ISO 13485 by reference and keeps some FDA-specific requirements. The legacy section numbers in this table are a familiar index for existing procedures, and the mapping is approximate. Read the current text of Part 820 and ISO 13485 before relying on it in an audit response.

Optional QMSR gap assessment walk-through

We can review how your ERP and QMS records line up against the crosswalk areas.

Optional. The tool and every export work without this. No spam.

ERP, traceability and records

Device makers need lot and serial genealogy, device history records, supplier approval status, nonconformance and CAPA links, and controlled document revisions tied to routings. Many use Epicor Kinetic, Infor SyteLine/CloudSuite Industrial, Plex, DELMIAworks, NetSuite, Acumatica or SAP Business One, paired with a separate eQMS or document system such as Greenlight Guru or MasterControl.

Whichever combination you run, validate any computerized system that supports quality records as your QMS requires, and keep the validated state documented.

Compliance and data handling

Design history files, supplier agreements and complaint records are sensitive, and some contain patient or health related information. Inspections require that records be accurate, attributable and retrievable.

A private AI setup that is read-only on ERP and quality data, logs every query and answer, and never writes to controlled records without human approval fits that culture. Whether it needs formal validation depends on how it is used in your QMS, which is a decision for your quality and regulatory team.

Where private AI helps, and where it does not

Useful early uses are answering where a lot went, which open CAPAs touch a supplier, what changed between two revisions of a routing, or what a complaint trend looks like. These are searches across records people already own.

AI should not make risk decisions, close CAPAs, disposition product or draft regulatory submissions without expert review. For simple questions, your eQMS vendor's own search may be enough.

Frequently asked questions

What is the difference between MDMA and AdvaMed?

Both are Washington, DC trade associations for the device industry. AdvaMed is the larger group that represents device, diagnostics and digital health companies of many sizes and runs The MedTech Conference. MDMA focuses on policy concerns of innovative, often smaller, device companies.

What is the FDA QMSR?

The Quality Management System Regulation amends 21 CFR Part 820 to incorporate ISO 13485:2016 by reference, replacing the former Quality System Regulation approach. It took effect in February 2026. Device makers should map their existing quality system to ISO 13485 terms and confirm gaps with their regulatory team.

What ERP do medical device manufacturers use?

Choices include Epicor Kinetic, Infor SyteLine/CloudSuite Industrial, Plex, DELMIAworks, NetSuite, Acumatica and SAP, often alongside a separate eQMS. The deciding factors are lot and serial genealogy, supplier controls, document revision control and the ability to support validation.

Can AI be used in a regulated device quality system?

Yes, with care. Read-only search and summarization over records is a lower-risk use than anything that changes records or informs product release. Define the intended use, control access, keep an audit trail and let your quality team decide on validation scope.

Tools and guides for manufacturers in this ecosystem

Free tools

Guides

AI on your ERP

Manufacturing hubs

TermsFDA QMSR (Quality Management System Regulation)FDA 21 CFR Part 11 ISO 13485

All manufacturing hubs