When an international distributor qualifies a new sterile consumable, an OEM brand audits a contract manufacturer, or a hospital procurement committee establishes tender specifications, the supplier almost always provides an 'ISO 10993 biocompatibility package'. In practice, these packages range from exemplary 150-page dossiers—complete with chemical characterization, toxicological risk assessments, and accredited GLP test reports on finished, aged, and sterilized devices—to single-page laboratory certificates of analysis performed on raw polymer pellets five years ago.12
Accepting a flawed biological safety dossier creates serious commercial and regulatory exposure. If a file fails notified body audit under EU MDR, halts an FDA 510(k) clearance, or fails an NMPA technical review in China, the buyer faces multi-month re-testing programmes, wasted tooling investments, and potential field corrective actions.810 This guide provides a field-by-field audit framework to evaluate any supplier's ISO 10993 file in under an hour, understand the November 2025 standard transition and FDA's July 1, 2029 deadline, and enforce acceptance criteria across US, EU, and Chinese markets.
What ISO 10993 Actually Is: An Evaluation Inside Risk Management, Not a Certificate
The most common misconception in medical device procurement is treating 'ISO 10993 compliance' as a binary certificate, similar to an ISO 13485 quality management system certificate. ISO 10993 is not a certification standard; it is a multi-part series of technical standards defining a continuous evaluation process governed by risk management (ISO 14971).14
A complete, compliant biological safety evaluation follows a mandatory five-stage evidence lifecycle:
- Biological Evaluation Plan (BEP): An upfront document authored by a qualified materials scientist or toxicologist defining the device's clinical intended use, patient contact nature (surface, external communicating, implant), cumulative exposure duration, material formulation, manufacturing process aids, and the specific biological endpoints that require evaluation.
- Chemical & Physical Characterization (ISO 10993-18): Analytical chemistry (extractables and leachables testing via GC-MS, LC-MS, ICP-MS, FTIR) to identify and quantify every chemical constituent, additive, degradation product, and processing residue that could migrate from the finished device to the patient.
- Toxicological Risk Assessment (TRA / ISO 10993-17): A toxicological evaluation comparing patient exposure levels of identified chemical substances against established Tolerable Intake (TI) limits, Tolerable Contact Limits (TCL), or the Toxicological Threshold of Concern (TTC) to determine toxicological margins of safety.
- Targeted Biological Testing: In vitro and in vivo laboratory assays (such as cytotoxicity per ISO 10993-5, skin sensitization per ISO 10993-10, in vitro reconstructed human epidermis irritation per ISO 10993-23, and hemocompatibility per ISO 10993-4) performed specifically to evaluate biological endpoints that cannot be fully resolved by chemical characterization alone.
- Biological Evaluation Report (BER): A formal, signed concluding report that synthesizes the BEP, chemical characterization, toxicological assessment, clinical literature, test reports, and risk-benefit analysis into an integrated statement of biological safety within the device's ISO 14971 risk management file.
Biological evaluation is not merely a checklist of laboratory tests to be completed and ticked off. Testing is only one tool within a broader risk management process. A stack of test reports without a chemical characterization, toxicological assessment, and signed Biological Evaluation Report is incomplete under modern FDA, MDR, and NMPA standards.— Editorial synthesis of ISO 10993-1:2025 and FDA's September 2023 biocompatibility guidance
If a supplier presents a single-page document from a test laboratory titled 'Certificate of ISO 10993 Compliance' without the underlying BEP, test reports, chemical data, and signed BER, the buyer has received a marketing summary, not regulatory evidence.28
The ISO 10993-1:2025 Transition: What Changed and Why FDA Set a July 1, 2029 Deadline
In November 2025, the International Organization for Standardization published the Sixth Edition of Part 1: ISO 10993-1:2025 ('Biological evaluation of medical devices — Part 1: Requirements and general principles for the evaluation of biological safety within a risk management process'), formally cancelling and replacing ISO 10993-1:2018.14
On May 25, 2026, the US Food and Drug Administration (FDA) formally entered ISO 10993-1:2025 into its Recognized Consensus Standards database (Recognition List 066, Recognition Number 2-313, Standard ID 47116).1 This entry created two critical realities that every medical device buyer must incorporate into current supplier agreements:
- July 1, 2029 US Transition Deadline: FDA established that declarations of conformity to the superseded 2018 edition (Recognition Number 2-258) will be accepted in support of premarket submissions (510(k), PMA, De Novo, IDE) only until July 1, 2029. After July 1, 2029, any new US submission relying on a declaration of conformity must conform to the 2025 Sixth Edition.
- FDA Partial Recognition Exclusions: FDA recognized ISO 10993-1:2025 with two explicit exclusions: (1) FDA does not recognize Clause 6.9 ('Biological risk estimation') because it conflicts with clauses 5.5, 6, and 7 of the FDA-recognized ISO 14971:2019; and (2) FDA does not recognize the phrase 'consumer products' in Clause 6.5.11.3.
- The Two-Document US Reality: FDA's formal guidance document ('Use of International Standard ISO 10993-1...') remains the September 2023 revision, which teaches FDA's core review policies (risk-based testing, chemical characterization, test-article preparation for submicron/absorbable materials, and intact-skin exemptions). Reviewers evaluate dossiers against both the guidance document and the newly recognized 2025 consensus standard.
| Dimension | ISO 10993-1:2018 (Fifth Edition) | ISO 10993-1:2025 (Sixth Edition) | Buyer & Regulatory Audit Implication |
|---|---|---|---|
| Standard Title | Evaluation and testing within a risk management process | Requirements and general principles for the evaluation of biological safety within a risk management process | Reinforces that biological evaluation is a safety requirements framework, not a standalone testing mandate. |
| Endpoint Table Structure | Table A.1 listed endpoints for consideration with 'X' (prerequisite) and 'E' (endpoints to be evaluated). | Restructured tables separating physical/chemical information requirements from biological endpoint evaluations. | Clearer distinction between mandatory chemical characterization and conditional in vivo/in vitro testing. |
| Biological Risk Estimation | General alignment with ISO 14971 risk estimation principles. | Added an explicit 'Biological risk estimation' step (Clause 6.9). | FDA partially excluded Clause 6.9 (Rec# 2-313); US files must maintain standard ISO 14971 risk matrices. |
| Non-Animal & In Vitro Priority | Encouraged in vitro testing but retained legacy animal test frameworks in primary text. | Explicit mandate for 3Rs (Replacement, Reduction, Refinement); prioritizing ISO 10993-23 in vitro irritation and ISO 10993-18/17 chemical assessment. | Regulators increasingly reject live-animal Draize irritation tests when validated in vitro RhE methods exist. |
| US FDA Recognition Status | Recognized under Rec# 2-258; transition acceptance expires July 1, 2029. | Recognized under Rec# 2-313 (entered May 25, 2026) with partial exclusions. | Files approved today on the 2018 edition remain valid for existing devices, but new submissions after July 2029 require the 2025 standard. |
| EU MDR Harmonization Status | Harmonized under MDR via Implementing Decision (EU) 2021/1182. | Harmonized under MDR via Commission Implementing Decision (EU) 2026/1231. | Confers presumption of conformity with MDR Annex I GSPR 10.1 and 10.2 when properly executed. |
| China NMPA Status | Identically adopted as national standard GB/T 16886.1-2022 (implemented May 1, 2023). | Not yet adopted as a GB/T standard (China remains on GB/T 16886.1-2022 / 2018 edition). | China dossiers must continue referencing GB/T 16886.1-2022 while US/EU files transition to 2025. |
Source: Compiled from ISO 10993-1:2025, FDA Recognition Entry Rec# 2-313, and FDA Guidance (Sept 2023)
The Six-Point Scope Check: Matching an Evaluation File to the Device You Are Buying
When auditing an incoming supplier file, do not start by reading laboratory cytotoxicity percentages or animal skin erythema scores. Most of the gaps that matter are visible before anyone reads the laboratory data: scope mismatch, test-article invalidity, or a broken evidence lineage.23 Run this six-point scope check first:
- Device Identity & Manufacturing Site Match: Verify that the test reports and BER explicitly identify the commercial brand name, model numbers, exact polymer resin grades, masterbatch colorants, and the physical manufacturing facility. Reports naming a 'family representative' are invalid unless accompanied by a written toxicological equivalency rationale demonstrating identical chemical composition and surface-area-to-mass ratios.
- Contact Category & Duration Accuracy: Verify that the device is classified correctly under ISO 10993-1 (Surface, External Communicating, Implant) and exposure duration (Limited: <= 24 h; Prolonged: > 24 h to 30 d; Permanent: > 30 d). Ensure cumulative exposure is calculated for consumables replaced repeatedly during treatment.
- Final Sterilized Form (ISO 10993-12): Confirm that all biological testing and chemical characterization were performed on finished devices that underwent the exact commercial manufacturing process, including final cleaning, assembly, packaging, and commercial sterilization (e.g., ethylene oxide per ISO 11135 or gamma/e-beam radiation per ISO 11137) with worst-case sterilization exposure (e.g., 2x sterilization cycles for re-sterilization scenarios).
- The Complete 18 -> 17 -> Testing -> BER Evidence Chain: Confirm that the file contains analytical chemical characterization (ISO 10993-18), toxicological risk assessment (ISO 10993-17), targeted laboratory test reports, and a concluding Biological Evaluation Report signed by a qualified toxicologist or materials expert.
- Regulatory Edition & Jurisdiction Alignment: Check that the file addresses the specific regulatory requirements of your target markets: FDA guidance and consensus standard Rec# 2-313 for the US; MDR Annex I GSPR 10.1/10.2/10.4 for the EU; and GB/T 16886.1-2022 for China.
- Laboratory Accreditation & GLP Documentation: Ensure all test reports originate from an ISO/IEC 17025 accredited laboratory with biocompatibility in its formal scope of accreditation, and include Good Laboratory Practice (GLP, 21 CFR Part 58 / OECD Principles of GLP) compliance certificates.
Which Endpoints Your Device Needs: Contact Category, Duration, and 3 Worked Examples
ISO 10993-1 categorizes medical devices by the nature of body contact and the duration of exposure. The required biological endpoints expand systematically as tissue invasiveness and exposure duration increase.124
| Device Category | Contact Type | Duration Bracket | The 'Big Three' (Cyto, Sens, Irrit) | Systemic Toxicity & Pyrogenicity | Hemocompatibility (ISO 10993-4) | Implantation & Subchronic (10993-6/-11) | Genotoxicity & Carcinogenicity (10993-3) |
|---|---|---|---|---|---|---|---|
| Surface Device | Intact Skin | Limited (<=24h) / Prolonged (>24h-30d) | Listed for consideration (Cyto, Sens, Irrit), but common materials can be covered by documented information instead of new testing under FDA Attachment G | Exempt for limited intact skin unless novel resin/enhancer | Not Required | Not Required | Not Required (unless novel nanomaterial) |
| Surface Device | Mucosal Membrane | Limited (<= 24 h) | Mandatory (Cyto -5, Sens -10, Irrit -23) | Not required at limited contact; material-mediated pyrogenicity and acute systemic toxicity begin at prolonged (> 24 h) exposure | Not Required | Not Required | Not required at limited contact; required at permanent contact (the 2025 edition extends evaluation to prolonged contact — see note below) |
| Surface Device | Breached / Compromised Surface | Prolonged (> 24 h to 30 d cumulative) | Mandatory (Cyto -5, Sens -10, Irrit -23) | Material-Mediated Pyrogenicity + Acute & Subacute Systemic | Not Required | Implantation local tissue effects required | Required at permanent contact; prolonged-contact evaluation added by ISO 10993-1:2025 (see note below) |
| External Communicating | Circulating Blood | Limited (<= 24 h) | Mandatory (Cyto -5, Sens -10, Irrit -23) | Material-Mediated Pyrogenicity + Acute Systemic | Mandatory (Hemolysis, Thrombosis, Coagulation, Complement) | Not Required for limited contact | Conditional at limited contact (FDA note); required beyond 24 h and expanded by the 2025 edition |
| External Communicating | Tissue / Bone / Dentin | Prolonged (> 24 h to 30 d) | Mandatory (Cyto -5, Sens -10, Irrit -23) | Material-Mediated Pyrogenicity + Subacute / Subchronic | Not Required unless blood path | Implantation (10993-6) Mandatory | Genotoxicity (10993-3) Mandatory |
| Implant Device | Tissue / Bone / Blood | Permanent (> 30 d) | Mandatory (Cyto -5, Sens -10, Irrit -23) | Subchronic, Chronic Systemic & Pyrogenicity | Mandatory if blood-contacting implant | Implantation with histology mandatory | Genotoxicity, Carcinogenicity & Degradation (10993-9/13/14/15) |
Source: Compiled from ISO 10993-1:2025, ISO 10993-1:2018 Table A.1, and FDA September 2023 Guidance Attachment A
Two edition nuances matter when you read Table 2 against a supplier file. First, intact-skin devices: FDA's endpoint table lists cytotoxicity, sensitization and irritation for consideration even for intact skin, but Attachment G of the September 2023 guidance lets certain common materials be covered by documented information instead of a new biocompatibility evaluation — so an intact-skin file built on material history can still be complete.23 Second, genotoxicity: the FDA guidance table, which follows the 2018 edition, attaches genotoxicity mainly to long-term and permanent contact, while ISO 10993-1:2025 expands genotoxicity evaluation to prolonged (> 24 h) contact with tissues other than intact skin — a divergence FDA's recognition entry explicitly flags, advising submitters to discuss implementation with review staff before relying on it.1 A 2025-edition file may therefore legitimately contain genotoxicity data that a 2018-edition file for the same device would not show; treat that as an edition difference, not automatically a gap or a bonus.
To understand how these requirements translate into real-world procurement audits, let us examine three worked product case studies representing different clinical contact categories across minimally invasive surgery and perioperative wound care:
Worked Example 1: Disposable Circumcision Stapler / Anastomat (Surface / Mucosal & Breached Surface, Limited Duration)
A disposable circumcision stapler or anastomat consists of an ABS/polycarbonate housing, stainless steel or titanium surgical staples, a silicone protection ring, and an internal circular cutting blade. During surgery, the device contacts mucosal membrane and breached penile tissue for under 15 minutes (Limited contact, Duration A <= 24 h).211
- Required Endpoints: (1) Cytotoxicity per ISO 10993-5 (MEM elution assay); (2) Skin sensitization per ISO 10993-10 (Guinea Pig Maximization Test or Murine Local Lymph Node Assay); (3) Irritation per ISO 10993-23 (in vitro RhE reconstructed human epidermis model or mucosal irritation); (4) Material-mediated pyrogenicity per ISO 10993-11; and (5) Acute systemic toxicity per ISO 10993-11.
- Critical Audit Checkpoint: Verify that the test article included the post-sterilization device with both polymer housing, silicone gasket, and metal staples in composite extract, or separate testing of non-metallic components. Check that ISO 10993-7 ethylene oxide residual limits (EO <= 4 mg/device, ECH <= 9 mg/device for limited exposure) are documented.
- Common Deficiencies: Suppliers submitting test reports for the bare surgical blade or virgin resin without testing the molded, sterilized, and packaged final assembly.
Worked Example 2: Single-Use Endovenous Laser Fiber (External Communicating / Circulating Blood, Limited Duration)
A single-use endovenous laser fiber (such as a 1470 nm radial or bare-tip quartz fiber with fused silica core, fluoroacrylate cladding, and polyimide/PEEK jacket) is introduced intravenously into the great saphenous vein to deliver laser energy for varicose vein ablation. Contact duration is under 60 minutes (External communicating device, Circulating blood, Duration A <= 24 h).12
- Required Endpoints: (1) Cytotoxicity (ISO 10993-5); (2) Sensitization (ISO 10993-10); (3) Irritation / Intracutaneous reactivity (ISO 10993-23); (4) Acute systemic toxicity (ISO 10993-11); (5) Material-mediated pyrogenicity (ISO 10993-11); and (6) Comprehensive Hemocompatibility per ISO 10993-4.
- Hemocompatibility Battery Detail (ISO 10993-4): Must evaluate four distinct blood interaction mechanisms: (a) Thrombosis / In vitro blood loop or static platelet adhesion; (b) Hemolysis (direct contact and extract ASTM F756 method, hemolytic index < 2.0%); (c) Coagulation (Prothrombin Time / Activated Partial Thromboplastin Time); and (d) Complement activation (C3a and SC5b-9 enzyme immunoassays).
- Common Deficiencies: A file containing only the 'Big Three' (cytotoxicity, sensitization, irritation) is fatal for an endovenous laser fiber. Regulators and notified bodies will immediately reject blood-contacting files lacking ISO 10993-4 hemocompatibility and ISO 10993-11 pyrogenicity test reports.
Worked Example 3: Negative Pressure Wound Therapy Dressing (Surface / Breached Skin, Prolonged Cumulative Duration)
A negative pressure wound therapy (NPWT) dressing kit comprises polyurethane or polyvinyl alcohol (PVA) open-cell foam, an acrylic adhesive polyurethane drape, suction tubing, and liquid drainage ports placed on open, debrided wounds. While an individual dressing may be changed every 48 to 72 hours, continuous wound therapy extends for 2 to 4 weeks, establishing a Prolonged cumulative contact duration (Duration B: > 24 h to 30 d) on breached or compromised tissue.28
- Required Endpoints: (1) Cytotoxicity (ISO 10993-5); (2) Sensitization (ISO 10993-10); (3) Irritation (ISO 10993-23); (4) Material-mediated pyrogenicity (ISO 10993-11); (5) Acute systemic toxicity (ISO 10993-11); (6) Subacute / Subchronic systemic toxicity (ISO 10993-11, 14-day or 28-day repeat-dose exposure); (7) Genotoxicity battery (ISO 10993-3: bacterial reverse mutation / Ames test and in vitro mammalian chromosomal aberration or mouse lymphoma assay); and (8) Implantation / local tissue tolerance (ISO 10993-6 subcutaneous or wound-contact histology).
- Chemical & Toxicological Core: Full extractables and leachables screening (ISO 10993-18) identifying unreacted monomers (diisocyanates, polyols), polymerization catalysts, plasticizers, and acrylic adhesive tackifiers, coupled with an ISO 10993-17 toxicological risk assessment calculating Margin of Safety (MoS) values for prolonged dermal absorption.
- Common Deficiencies: Suppliers classifying the dressing as a 'limited contact device' based on a single 48-hour dressing wear time, ignoring ISO 10993-1 cumulative exposure rules. This omission results in missing subacute toxicity, implantation, and genotoxicity evaluations.
The Core Supporting Parts: Chemical Characterization (10993-18), Toxicology (10993-17), and In Vitro Irritation (10993-23)
ISO 10993 is a 23-part standard suite. While Part 1 sets the overall evaluation strategy, modern regulatory acceptance relies heavily on recent revisions to supporting vertical standards.567
| Standard & Current Edition | Scope & Analytical Methodology | Key Technical Requirements | Buyer Audit Checkpoint |
|---|---|---|---|
| ISO 10993-18:2020 (+ Amd 1:2022) | Chemical characterization of medical device materials within a risk management process | Extraction under exaggerated/exhaustive conditions; GC-MS (volatiles/semi-volatiles), LC-MS (non-volatiles), ICP-MS (metals); calculation of Analytical Evaluation Threshold (AET). | Confirm the laboratory calculated an appropriate AET based on device clinical dosing and patient body weight (50 kg adult, 10 kg child, 3.5 kg infant). |
| ISO 10993-17:2023 (+ Amd 1:2025) | Toxicological risk assessment of medical device constituents | Replaced the 2002 edition; introduces Toxicological Threshold of Concern (TTC), Margin of Safety (MoS), Derived Tolerable Intake (TI), and Release Kinetics Modeling. | Verify the toxicologist evaluated chemical release over time rather than assuming 100% instantaneous constituent release for prolonged devices. |
| ISO 10993-23:2021 (+ Amd 1:2025) | Tests for irritation (separated from sensitization in 2021) | Established validated in vitro reconstructed human epidermis (RhE) models (e.g., EpiDerm, SkinEthic) replacing live rabbit intracutaneous Draize tests. | Reject files referencing outdated 'ISO 10993-10:2010 for irritation'; ensure in vitro RhE is utilized per 3Rs reduction principles. |
| ISO 10993-10:2021 | Tests for skin sensitization | Focuses exclusively on sensitization mechanisms: Guinea Pig Maximization Test (GPMT), Buehler test, or Murine Local Lymph Node Assay (LLNA). | Verify that both polar (saline) and non-polar (cottonseed oil/sesame oil) extraction vehicles were tested per ISO 10993-12. |
| ISO 10993-12:2021 | Sample preparation and reference materials | Standard surface-area-to-volume extraction ratios (3 cm²/mL for thickness 0.5–1.0 mm; 6 cm²/mL for <0.5 mm) or mass-to-volume (0.2 g/mL); extraction at 37°C, 50°C, 70°C, or 121°C. | Confirm extraction conditions did not cause polymer degradation or melt artifact during autoclave extraction. |
| ISO 10993-7:2008 (+ Amd 1:2019) | Ethylene oxide sterilization residuals | Maximum allowable limits for Ethylene Oxide (EO) and Ethylene Chlorohydrin (ECH) based on patient contact duration (Limited, Prolonged, Permanent). | Cross-check gas chromatography residual reports against EO sterilization validation data. |
Source: Compiled from ISO Standards Catalog (2026) and FDA Recognized Consensus Standards Database
Jurisdiction Differences: US FDA, EU MDR, and China NMPA Biological Evaluation Rules
A biological evaluation dossier prepared for one jurisdiction cannot be submitted blindly to another. While ISO 10993-1 serves as the common global language, FDA, EU notified bodies, and China's NMPA enforce divergent national requirements and standard editions.1810
| Audit Dimension | United States (US FDA) | European Union (EU MDR 2017/745) | China (NMPA / SAMR) |
|---|---|---|---|
| Governing Standard Edition | ISO 10993-1:2025 recognized (Rec# 2-313); ISO 10993-1:2018 accepted until July 1, 2029. | EN ISO 10993-1:2025 harmonized under MDR via Implementing Decision (EU) 2026/1231. | GB/T 16886.1-2022 (identical adoption of ISO 10993-1:2018; implemented May 1, 2023). |
| Chemical Assessment Expectations | Expects ISO 10993-18:2020 characterization with AET calculation; the guidance asks submitters to justify extractant and solvent choices. | Requires full material characterization and toxicological evaluation per ISO 10993-18 and ISO 10993-17. | Evaluated per GB/T 16886.18; constituent safety is assessed under the GB/T 16886 series (including GB/T 16886.17/-18 chemical and toxicological evaluation). |
| Substances of Concern Mandate | General toxicological safety assessment under ISO 10993-17; Proposition 65 applies at state level. | MDR Annex I GSPR 10.4.1: Mandatory justification and labeling for CMR 1A/1B and endocrine disruptors > 0.1% w/w. | No EU-style 0.1% w/w CMR justification-and-labelling rule; constituent hazards are handled through GB/T 16886.17 toxicological risk assessment within the submission. |
| Intact Skin Exemptions | FDA September 2023 guidance allows biological evaluation without new testing for common polymers contacting intact skin. | Notified bodies require documented material history and MDR GSPR 10.1 justification even for intact skin. | Class I devices are filed rather than technically reviewed; intact-skin evidence expectations are correspondingly lighter. |
| Laboratory Accreditation & GLP | 21 CFR Part 58 GLP compliance required for in vivo safety studies; ISO/IEC 17025 accredited test facilities. | ISO/IEC 17025 accreditation required; GLP compliance required for non-clinical safety testing. | NMPA Notice No. 76 of 2021: tests entrusted to qualified testing institutes; overseas labs need GLP QA documentation. |
| Biological Evaluation Report (BER) | Mandatory in 510(k)/PMA; authored and signed by a qualified biological safety assessor. | Mandatory in Technical Documentation (Annex II Section 4); scrutinized heavily during notified body audits. | Mandatory in Technical Dossier (综述资料 & 研究资料); reviewed by CMDE technical evaluation experts. |
Source: Compiled from FDA Rec# 2-313, FDA Guidance (Sept 2023), Regulation (EU) 2017/745 Annex I, and NMPA Notice No. 76 of 2021
Three specific jurisdiction traps require immediate attention during file review:
- EU MDR GSPR 10.4.1 Phthalate & CMR Threshold: Under EU MDR Annex I Section 10.4.1, if an invasive device or a device administering fluids/gases contains Carcinogenic, Mutagenic, or Reprotoxic (CMR Category 1A/1B) substances or Endocrine Disrupting Chemicals (EDCs) in a concentration exceeding 0.1% w/w, the manufacturer must provide a formal clinical justification, benefit-risk analysis, and specific label warnings.8 An ISO 10993 report alone that does not screen for the EU REACH Candidate List and CMR thresholds fails MDR audits.
- China NMPA Overseas Laboratory GLP Proof: Under NMPA Notice No. 76 of 2021, if biological testing is performed at an overseas laboratory outside China, the submission must include comprehensive quality assurance documentation proving that the laboratory operated in full compliance with GLP requirements.10 Generic test reports lacking GLP quality statements are rejected during NMPA formal review.
- FDA Device-Specific Guidance Precedence: FDA maintains device-specific guidance documents (for example, guidance addressing surgical staplers, intravascular catheters, and wound dressings) whose biocompatibility recommendations can add to, or differ from, the general ISO 10993-1 endpoint table.23 Always check whether FDA has published a product-code-specific biocompatibility expectation.
Change Control and Re-Evaluation Triggers: When Does an Existing Biological File Expire?
A biological evaluation file does not carry an arbitrary calendar expiration date, but it remains valid only as long as the device's design, material formulation, supplier base, manufacturing process, and sterilization method remain 100% unchanged.14
Under medical device change-control systems (ISO 13485 and FDA QMSR), any of the following modifications automatically triggers a mandatory biological re-evaluation:
- Raw Material & Polymer Changes: Changing the raw resin supplier, resin grade, masterbatch pigment, plasticizer, antioxidant additive, or lubricant (even when the generic polymer family remains 'polycarbonate' or 'medical-grade silicone').
- Manufacturing & Chemical Aid Changes: Altering mold release agents, machine cutting oils, ultrasonic cleaning detergents, bonding adhesives (such as medical cyanoacrylates), or surface passivation treatments.
- Sterilization Process Changes: Switching from ethylene oxide (EO) to gamma radiation or e-beam, increasing the maximum sterilization dose, or changing the sterilization cycle parameters. Radiation can cause polymer chain scission and cross-linking, generating new toxic degradation products that invalidate legacy chemical files.
- Primary Sterile Packaging Changes: Altering the direct-contact sterile barrier packaging material (e.g., changing Tyvek/film pouch supplier) that could transfer volatile leachables onto the device during extended shelf life.
- Clinical Exposure or Indication Changes: Expanding the anatomical contact site (e.g., from intact skin to breached mucosal tissue) or extending patient contact duration (e.g., from <24 hours to >30 days).
When auditing a supplier that has manufactured a device for multiple years, request the Change Control Log and Biological Re-Evaluation Assessments. A supplier that changed raw resin suppliers three years ago but presents an eight-year-old biological test report is supplying non-compliant product.
Eight Red Flags That Should Immediately Halt Supplier File Acceptance
If your incoming audit uncovers any of the following eight red flags, halt supplier acceptance immediately and issue a formal Supplier Corrective Action Request (SCAR):
- Red Flag 1: Test Reports on Raw Resin Pellets or Raw Material Coupons. Testing virgin polymer pellets from the resin supplier ignores mold release agents, thermal degradation during injection molding, machining oils, ultrasonic cleaning residues, and packaging leachables. Biological evaluation must test the finished, sterilized device.
- Red Flag 2: Unsterilized Test Articles. Biological testing performed on unsterilized devices is invalid. Commercial sterilization (EO gas, gamma radiation, electron beam, steam) fundamentally alters polymer chemistry, surface energy, and chemical extractables.
- Red Flag 3: Missing Biological Evaluation Report (BER). Presenting raw lab test reports without an overarching, signed Biological Evaluation Report that ties the results to ISO 14971 risk management and provides a toxicological conclusion.
- Red Flag 4: Missing ISO 10993-4 Hemocompatibility for Blood-Contacting Devices. Submitting only cytotoxicity, sensitization, and irritation tests for vascular catheters, endovenous laser fibers, or surgical hemoclips contacting circulating blood.
- Red Flag 5: Non-Accredited Test Laboratories. Testing performed at internal, non-certified company labs or facilities lacking ISO/IEC 17025 accreditation and GLP compliance statements.
- Red Flag 6: Mismatched SKU, Part Number, or Production Facility. Biological reports listing a different model number, alternative polymer formulation, or different manufacturing facility without a documented biological equivalency assessment.
- Red Flag 7: Failure to Calculate Cumulative Exposure. Classifying consumables replaced repeatedly (such as negative pressure wound dressings, drainage catheters, or surgical kits) as 'limited contact (<24 h)' instead of calculating cumulative exposure (>24 h or >30 d).
- Red Flag 8: Citations of Outdated Standard Revisions Without Gap Analysis. Reports citing obsolete versions (e.g., ISO 10993-10:2010 before irritation was separated into ISO 10993-23:2021) without a documented gap analysis demonstrating technical equivalence.
The Buyer's Acceptance Checklist and RFQ Biological Evidence Specification Block
Incorporate this 15-item verification checklist into your supplier-qualification standard operating procedure (SOP) to audit incoming biological safety dossiers:
- Confirm the file contains a formal Biological Evaluation Plan (BEP) defining contact category, exposure duration, and clinical use.
- Verify the device is correctly classified (Surface / External Communicating / Implant; Duration A / B / C) with cumulative exposure calculated.
- Confirm all test articles were finished, fully packaged, and commercially sterilized devices matching the exact commercial SKU.
- Check that worst-case sterilization exposure (e.g., 2x cycles) was applied to test articles if re-sterilization is permitted.
- Verify that analytical chemical characterization (ISO 10993-18:2020) was performed with appropriate Analytical Evaluation Threshold (AET) calculations.
- Verify that an ISO 10993-17:2023 toxicological risk assessment evaluated all identified extractable/leachable constituents against TI/TCL/TTC limits.
- Confirm the 'Big Three' endpoints (cytotoxicity ISO 10993-5, sensitization ISO 10993-10, irritation ISO 10993-23) are complete and passed.
- Confirm blood-contacting devices include full ISO 10993-4 hemocompatibility testing (hemolysis, thrombosis, coagulation, complement activation).
- Confirm prolonged and permanent devices (>24 h) include subacute/subchronic toxicity, genotoxicity (ISO 10993-3), and implantation (ISO 10993-6) data.
- Verify ethylene oxide residual data complies with ISO 10993-7 allowable limits for EO-sterilized devices.
- Confirm all testing was conducted by an ISO/IEC 17025 accredited laboratory with GLP compliance statements.
- Verify that overseas laboratory reports intended for China NMPA submissions include official GLP quality assurance documentation.
- Confirm EU-bound files include MDR Annex I GSPR 10.4.1 screening proving no CMR 1A/1B or endocrine disruptors exceed 0.1% w/w without clinical justification.
- Verify the file concludes in a signed Biological Evaluation Report (BER) authored by a qualified toxicologist or materials expert.
- Confirm the supplier has established a formal Change Control Agreement committing to notify the buyer before altering materials, manufacturing aids, packaging, or sterilization.
When issuing Request for Quotations (RFQs) or negotiating OEM contract manufacturing agreements, embed this biological evidence specification block directly into your quality agreement:
RFQ Biological Safety Specification Clause:
The Supplier shall maintain a complete Biological Safety Dossier for each contracted SKU in accordance with ISO 10993-1:2025 (or current recognized consensus standard), ISO 14971, and target jurisdiction requirements (US FDA 21 CFR 820/QMSR, EU MDR 2017/745 Annex I GSPR 10, China NMPA GB/T 16886.1-2022). All biological testing and chemical characterization shall be performed on finished, packaged, and commercially sterilized devices by an ISO/IEC 17025 accredited, GLP-compliant laboratory.
The Supplier shall provide a complete Biological Evaluation Package upon request, including: (a) Biological Evaluation Plan (BEP); (b) ISO 10993-18 Chemical Characterization and E&L Reports; (c) ISO 10993-17 Toxicological Risk Assessment; (d) Quantitative Biological Test Reports matching device contact nature and cumulative exposure duration; (e) ISO 10993-7 Sterilization Residual Reports; and (f) a signed Biological Evaluation Report (BER) authored by a qualified assessor.
No change in raw material resin, supplier, additive, colorant, manufacturing chemical aid, packaging material, or sterilization parameter shall be implemented without prior written notification and submission of a biological re-evaluation assessment.— Model VEMERIX OEM Quality Agreement & Tender Specification Block
Where VEMERIX Fits — And Where Buyer Due Diligence Begins
VEMERIX is the international brand of Weihai Medison Medical Equipment Co., Ltd., positioned as a Minimally Invasive Surgery Total Solution Platform serving urology, vascular surgery and perioperative care.
Biological evidence is also the spine of our own registrations. Every VEMERIX sterile single-use line is an NMPA-registered Class II device, and Chinese registration is precisely the regime described above — a biological evaluation sits inside the registration study documentation, with testing entrusted to qualified institutions.1011 The correct buyer posture toward us is therefore the same as toward any supplier: ask for the biological evaluation documentation pack and audit it with the six-point scope check.
- Urology & Surgical Consumables: our disposable circumcision staplers and anastomat kits are factory-EO-sterilized registered devices; a qualification request for these lines should demand exactly the mucosal and breached-surface evidence set described in Worked Example 1, including ISO 10993-7 residual data for the EO process.
- Vascular Laser Energy: Medison's NMPA-registered single-use medical laser fiber (paired with a partner-supplied diode laser console) is the circulating-blood case in Worked Example 2 — request the fiber's registration evidence pack and apply the same ISO 10993-4 hemocompatibility check to it that you would apply to any supplier's file.
- Perioperative Wound Care: our negative pressure wound therapy (NPWT) dressings fall under the prolonged breached-surface set of Worked Example 3; ask for the cumulative-exposure classification and the change-control commitments that stand behind it.
International distributors, OEM partners, and clinical engineering teams qualifying new product lines can request our technical documentation and biological-evaluation evidence packs through our Quality Portal or by contacting our regulatory affairs team directly via our Contact Page — and we expect buyers to run the acceptance checklist in this guide on whatever we send. Due diligence, including independent review of test reports and the signed biological evaluation report, always remains the buyer's own.
Frequently Asked Questions
Is 'ISO 10993 tested' or 'ISO 10993 certified' a meaningful supplier claim on its own?
No. Claiming that a device is 'ISO 10993 tested' or 'certified' without specifying which parts, which endpoints, which extraction vehicles, and whether testing was conducted on the finished sterilized device is meaningless. ISO 10993 is an evaluation standard that culminates in a signed Biological Evaluation Report (BER), not a standalone certificate. Always demand the full test reports, chemical characterization data, and signed BER.
Which ISO 10993-1 edition should a US-bound file use today, and what happens after July 1, 2029?
For US FDA submissions today, files built on either ISO 10993-1:2018 (Rec# 2-258) or ISO 10993-1:2025 (Rec# 2-313) are acceptable. However, FDA has established that declarations of conformity to the 2018 edition will no longer be accepted after July 1, 2029. Any new premarket submission (510(k), PMA, De Novo) submitted after July 1, 2029 must declare conformity to the 2025 Sixth Edition (taking into account FDA's partial recognition exclusions for Clause 6.9 and Clause 6.5.11.3).
Can a supplier reuse biocompatibility test reports across products or device families?
Only under strict conditions. Reusing biological data across device sizes or models requires a documented Biological Equivalency Rationale demonstrating identical raw material formulations, identical manufacturing process aids, identical sterilization parameters, and an equivalent or lower surface-area-to-mass ratio. You cannot cross-reference data across different polymer grades or different manufacturing facilities without chemical bridge testing.
Do test reports on raw resin or unsterilized samples ever satisfy regulatory requirements?
Never for final regulatory clearance or notified body approval. Raw material testing provides baseline screening data for the manufacturer during material selection, but final regulatory submissions require testing of the finished, packaged, and commercially sterilized medical device. Sterilization, injection molding heat, and assembly aids introduce chemical leachables that cannot be detected in virgin resin.
Are Chinese GB/T 16886 test reports acceptable for FDA or EU submissions, and vice versa?
GB/T 16886.1-2022 is an identical adoption (IDT) of ISO 10993-1:2018. If a Chinese test report was executed by an ISO/IEC 17025 accredited and GLP-compliant laboratory using standard ISO extraction methods and endpoints, FDA and EU notified bodies will generally accept the technical data, provided it is translated and integrated into a compliant BER. Conversely, overseas ISO reports submitted to China NMPA must include formal GLP quality assurance documentation per NMPA Notice No. 76 of 2021.
What is the minimum credible file for a short-duration surface consumable like a circumcision stapler?
For a limited-duration (<=24 h) mucosal/breached-surface consumable, the minimum credible dossier contains: (1) Biological Evaluation Plan (BEP); (2) Material characterization identifying all polymer, metal, and silicone components; (3) Cytotoxicity (ISO 10993-5); (4) Sensitization (ISO 10993-10); (5) Irritation (ISO 10993-23); (6) Material-mediated pyrogenicity (ISO 10993-11); (7) Acute systemic toxicity (ISO 10993-11); (8) EO sterilization residuals (ISO 10993-7); and (9) a signed Biological Evaluation Report (BER).
Does a change in sterilization method, adhesive, or packaging invalidate an existing biological evaluation?
Yes. A change in sterilization method (e.g., EO to gamma), a change in bonding adhesive, or a change in direct-contact primary packaging material is a major regulatory change that invalidates the existing biological evaluation until a formal re-evaluation is conducted. The manufacturer must perform an ISO 10993-18 chemical characterization or targeted biological testing to verify that no new leachables or toxic degradation products were introduced.
Who writes the Biological Evaluation Report (BER), and does it need to be signed?
The Biological Evaluation Report must be authored and signed by a qualified biological safety expert (such as a board-certified toxicologist, materials scientist, or regulatory biomedical engineer) with documented curriculum vitae (CV) demonstrating expertise in toxicology, biocompatibility, and medical device risk management. Regulatory bodies routinely reject unsigned BERs or reports written by unqualified personnel.