iso-13485-certification

What this skill does

# ISO 13485 Certification Documentation Assistant

## Overview

This skill helps medical device manufacturers prepare comprehensive documentation for ISO 13485:2016 certification. It provides tools, templates, references, and guidance to create, review, and gap-analyze all required Quality Management System (QMS) documentation.

**What this skill provides:**
- Gap analysis of existing documentation
- Templates for all mandatory documents
- Comprehensive requirements guidance
- Step-by-step documentation creation
- Identification of missing documentation
- Compliance checklists

**When to use this skill:**
- Starting ISO 13485 certification process
- Conducting gap analysis against ISO 13485
- Creating or updating QMS documentation
- Preparing for certification audit
- Transitioning from FDA QSR to QMSR
- Harmonizing with EU MDR requirements

## Core Workflow

### 1. Assess Current State (Gap Analysis)

**When to start here:** User has existing documentation and needs to identify gaps

**Process:**

1. **Collect existing documentation:**
   - Ask user to provide directory of current QMS documents
   - Documents can be in any format (.txt, .md, .doc, .docx, .pdf)
   - Include any procedures, manuals, work instructions, forms

2. **Run gap analysis script:**
   ```bash
   python scripts/gap_analyzer.py --docs-dir <path_to_docs> --output gap-report.json
   ```

3. **Review results:**
   - Identify which of the 31 required procedures are present
   - Identify missing key documents (Quality Manual, MDF, etc.)
   - Calculate compliance percentage
   - Prioritize missing documentation

4. **Present findings to user:**
   - Summarize what exists
   - Clearly list what's missing
   - Provide prioritized action plan
   - Estimate effort required

**Output:** Comprehensive gap analysis report with prioritized action items

### 2. Understand Requirements (Reference Consultation)

**When to use:** User needs to understand specific ISO 13485 requirements

**Available references:**
- `references/iso-13485-requirements.md` - Complete clause-by-clause breakdown
- `references/mandatory-documents.md` - All 31 required procedures explained
- `references/gap-analysis-checklist.md` - Detailed compliance checklist
- `references/quality-manual-guide.md` - How to create Quality Manual

**How to use:**

1. **For specific clause questions:**
   - Read relevant section from `iso-13485-requirements.md`
   - Explain requirements in plain language
   - Provide practical examples

2. **For document requirements:**
   - Consult `mandatory-documents.md`
   - Explain what must be documented
   - Clarify when documents are applicable vs. excludable

3. **For implementation guidance:**
   - Use `quality-manual-guide.md` for policy-level documents
   - Provide step-by-step creation process
   - Show examples of good vs. poor implementation

**Key reference sections to know:**

- **Clause 4:** QMS requirements, documentation, risk management, software validation
- **Clause 5:** Management responsibility, quality policy, objectives, management review
- **Clause 6:** Resources, competence, training, infrastructure
- **Clause 7:** Product realization, design, purchasing, production, traceability
- **Clause 8:** Measurement, audits, CAPA, complaints, data analysis

### 3. Create Documentation (Template-Based Generation)

**When to use:** User needs to create specific QMS documents

**Available templates:**
- Quality Manual: `assets/templates/quality-manual-template.md`
- CAPA Procedure: `assets/templates/procedures/CAPA-procedure-template.md`
- Document Control: `assets/templates/procedures/document-control-procedure-template.md`

**Process for document creation:**

1. **Identify what needs to be created:**
   - Based on gap analysis or user request
   - Prioritize critical documents first (Quality Manual, CAPA, Complaints, Audits)

2. **Select appropriate template:**
   - Use Quality Manual template for QM
   - Use procedure templates as examples for SOPs
   - Adapt structure to organization's needs

3. **Customize template with user-specific information:**
   - Replace all placeholder text: [COMPANY NAME], [DATE], [NAME], etc.
   - Tailor scope to user's actual operations
   - Add or remove sections based on applicability
   - Ensure consistency with organization's processes

4. **Key customization areas:**
   - Company information and addresses
   - Product types and classifications
   - Applicable regulatory requirements
   - Organization structure and responsibilities
   - Actual processes and procedures
   - Document numbering schemes
   - Exclusions and justifications

5. **Validate completeness:**
   - All required sections present
   - All placeholders replaced
   - Cross-references correct
   - Approval sections complete

**Document creation priority order:**

**Phase 1 - Foundation (Critical):**
1. Quality Manual
2. Quality Policy and Objectives
3. Document Control procedure
4. Record Control procedure

**Phase 2 - Core Processes (High Priority):**
5. Corrective and Preventive Action (CAPA)
6. Complaint Handling
7. Internal Audit
8. Management Review
9. Risk Management

**Phase 3 - Product Realization (High Priority):**
10. Design and Development (if applicable)
11. Purchasing
12. Production and Service Provision
13. Control of Nonconforming Product

**Phase 4 - Supporting Processes (Medium Priority):**
14. Training and Competence
15. Calibration/Control of M&M Equipment
16. Process Validation
17. Product Identification and Traceability

**Phase 5 - Additional Requirements (Medium Priority):**
18. Feedback and Post-Market Surveillance
19. Regulatory Reporting
20. Customer Communication
21. Data Analysis

**Phase 6 - Specialized (If Applicable):**
22. Installation (if applicable)
23. Servicing (if applicable)
24. Sterilization (if applicable)
25. Contamination Control (if applicable)

### 4. Develop Specific Documents

#### Creating a Quality Manual

**Process:**

1. **Read the comprehensive guide:**
   - Read `references/quality-manual-guide.md` in full
   - Understand structure and required content
   - Review examples provided

2. **Gather organization information:**
   - Legal company name and addresses
   - Product types and classifications
   - Organizational structure
   - Applicable regulations
   - Scope of operations
   - Any exclusions needed

3. **Use template:**
   - Start with `assets/templates/quality-manual-template.md`
   - Follow structure exactly (required by ISO 13485)
   - Replace all placeholders

4. **Complete required sections:**
   - **Section 0:** Document control, approvals
   - **Section 1:** Introduction, company overview
   - **Section 2:** Scope and exclusions (critical - must justify exclusions)
   - **Section 3:** Quality Policy (must be signed by top management)
   - **Sections 4-8:** Address each ISO 13485 clause at policy level
   - **Appendices:** Procedure list, org chart, process map, definitions

5. **Key requirements:**
   - Must reference all 31 documented procedures (Appendix A)
   - Must describe process interactions (Appendix C - create process map)
   - Must define documentation structure (Section 4.2)
   - Must justify any exclusions (Section 2.4)

6. **Validation checklist:**
   - [ ] All required content per ISO 13485 Clause 4.2.2
   - [ ] Quality Policy signed by top management
   - [ ] All exclusions justified
   - [ ] All procedures listed in Appendix A
   - [ ] Process map included
   - [ ] Organization chart included

#### Creating Procedures (SOPs)

**General approach for all procedures:**

1. **Understand the requirement:**
   - Read relevant clause in `references/iso-13485-requirements.md`
   - Understand WHAT must be documented
   - Identify WHO, WHEN, WHERE for your organization

2. **Use template structure:**
   - Follow CAPA or Document Control templates as examples
   - Standard sections: Purpose, Scope, Definitions, Responsibilities, Procedure, Records, References
   - Keep procedures clear and actionable

3. **Define