MDSAP Compliance Answers
Clear Answers for Confident MDSAP Readiness
Find practical guidance on eligibility, audit preparation, certification, quality systems, findings, and maintaining compliance across participating markets.
Browse MDSAP FAQ Topics
Eligibility
Participating Jurisdictions
Audit Readiness
Certification Preparation
Implementation Timelines
Quality Systems & Ongoing Compliance
MDSAP Eligibility Questions
Understand whether MDSAP applies to your organization, devices, and target markets before you begin preparing for certification.
Which medical device manufacturers are eligible to participate in MDSAP?
Medical device manufacturers of all sizes may participate in MDSAP when they market, or plan to market, devices in participating jurisdictions. The program is suitable for established manufacturers, new market entrants, and organizations seeking a more streamlined approach to multi-market audit requirements.
Can manufacturers outside Canada participate in MDSAP?
Yes. MDSAP is an international program and is not limited to Canadian manufacturers. Manufacturers located in any country can pursue an MDSAP audit when their products are regulated in one or more participating jurisdictions and they work with an authorized auditing organization.
Are all medical device classifications eligible for an MDSAP audit?
MDSAP can apply across a broad range of medical device classifications, from lower-risk devices to higher-risk devices. The exact regulatory obligations, evidence required, and market authorization pathway will depend on the device type, classification, and jurisdictions where it is sold.
Do private-label manufacturers and contract manufacturers need MDSAP certification?
It depends on each organization’s regulatory role. Legal manufacturers are generally responsible for the quality management system and regulatory compliance of their devices, while contract manufacturers may be audited when their activities are included within the certified quality system or are critical to product conformity.
Is MDSAP mandatory for selling medical devices in Canada?
For many manufacturers seeking or maintaining a Canadian medical device licence, MDSAP certification is required as evidence that the manufacturer’s quality management system meets applicable Canadian requirements. Specific obligations can vary by device classification and regulatory role.
Can a manufacturer participate if it sells in only one MDSAP market?
Yes. A manufacturer may use MDSAP even when serving a single participating market. However, the greatest efficiency is often achieved when the audit scope supports access to multiple participating jurisdictions, including Canada, the United States, Brazil, Japan, and Australia.
MDSAP Participating Jurisdictions and Market Considerations
MDSAP allows a single quality management system audit to support regulatory oversight across Australia, Brazil, Canada, Japan, and the United States. For manufacturers, this can reduce duplicate audit activity, create a more consistent compliance approach, and strengthen confidence when operating across participating markets. Canada recognizes MDSAP certification as a requirement for most medical device licence holders, while the other participating jurisdictions use audit reports within their own regulatory programs.
One audit does not mean one identical market pathway. Each jurisdiction retains its own device classification, registration, licensing, labeling, reporting, and post-market requirements. Manufacturers should use MDSAP as the foundation for a harmonized quality system while confirming the country-specific obligations that apply to every product and market. A well-prepared program connects global processes with local regulatory responsibilities—supporting smoother access, clearer evidence, and sustained compliance.
MDSAP Audit Readiness Questions
Audit readiness is built through everyday control of your quality management system, not a last-minute document review. These answers address the records, people, internal oversight, and practical checks that help manufacturers approach an MDSAP audit with confidence.
How do we know whether we are ready for an MDSAP audit?
Begin with a structured gap assessment against ISO 13485 and the MDSAP audit model. Review whether your processes are implemented, records are complete and retrievable, risks are controlled, and previous issues have been effectively addressed. Internal audit results, management review outputs, quality metrics, and corrective action status provide a realistic picture of readiness.
What records should be available during an MDSAP audit?
Auditors typically need objective evidence that your quality system is functioning as intended. This may include quality manuals and procedures, device master and technical documentation, training records, supplier controls, design and production records, complaint files, CAPA records, internal audit reports, management review minutes, and post-market surveillance evidence. Records should be current, organized, and easy to trace from process to product.
How important are internal audits and management reviews?
They are essential. Internal audits verify whether processes conform to requirements and are being followed in practice, while management reviews demonstrate leadership oversight of quality system performance, risks, resources, and improvement actions. Both activities should be meaningful, documented, and completed often enough to identify issues before an external audit.
Do employees need to participate in the audit?
Yes. MDSAP audits assess how work is performed across the organization, so process owners and relevant employees may be asked to explain their responsibilities and demonstrate the records they create or use. Employees do not need scripted answers; they should understand the applicable procedures, follow them consistently, and know how to escalate quality concerns.
Step 1
Build a Practical MDSAP Certification Plan
Define the products, sites, markets, and regulatory responsibilities within your certification scope. Set a realistic timeline, assign accountable owners, identify needed resources, and coordinate with an authorized auditing organization early in the process.
Step 2
Align Documentation and Process Controls
Confirm that your quality management system reflects ISO 13485 and the MDSAP audit approach. Maintain clear procedures, controlled documents, risk-based process controls, supplier oversight, traceable records, and evidence that regulatory requirements are integrated into daily operations.
Step 3
Verify Implementation Before the Audit
Run internal audits, review key quality data, test record retrieval, and complete management review before the certification audit. Address gaps through documented corrective actions and verify effectiveness so the organization can show sustained control rather than temporary preparation.
Step 4
Sustain Compliance After Certification
Maintain certification through ongoing monitoring, internal audits, management review, CAPA follow-up, employee training, and timely updates to processes and regulatory obligations. Treat MDSAP as a continuous quality commitment that supports reliable market access and lasting global confidence.
A Realistic Path to MDSAP Certification
Most manufacturers can prepare for MDSAP in 6–12 months, depending on product complexity, existing ISO 13485 maturity, market registrations, available resources, and the scope of required improvements.
Months 1–2
Assess Readiness and Define Scope
Review your current quality management system, applicable jurisdictions, regulatory obligations, and audit history. A focused gap assessment helps prioritize work and prevent late-stage surprises.
Months 2–5
Build and Strengthen the QMS
Update ISO 13485 processes, risk management records, production controls, supplier oversight, and post-market procedures to address MDSAP requirements across your target markets.
Months 5–8
Implement, Train, and Verify
Put revised procedures into practice, train relevant teams, gather objective evidence, and conduct internal audits and management review before scheduling the certification audit.
Months 8–12
Complete the Audit and Close Findings
Complete the MDSAP audit, respond promptly to any nonconformities, and implement effective corrective actions. Early planning, clear ownership, and complete records help avoid unnecessary delays.
What Your MDSAP Audit Evaluates
MDSAP auditors assess whether your quality management system is effective, consistently implemented, and aligned with ISO 13485 and applicable regulatory requirements in participating jurisdictions.
Quality System and Regulatory Controls
Risk, Design, and Production Management
Post-Market Surveillance and Improvement
How MDSAP Findings Are Managed
Step 1
Auditors document findings as nonconformities and explain the affected requirement, objective evidence, and severity. Review each finding carefully with the audit team before the audit closes.
Step 2
Contain the issue where needed, determine the root cause, and submit a corrective action plan with clear actions, responsibilities, and realistic completion dates. Address the system cause, not only the individual instance.
Step 3
Your corrective actions are reviewed for adequacy and effectiveness. Provide complete evidence of implementation, verify results internally, and maintain the records needed for formal closure.
Maintain MDSAP Compliance With Confidence
Surveillance Audit Support
Stay prepared between certification audits with focused reviews, evidence checks, and practical support for surveillance audit readiness.
Change Management Guidance
Assess regulatory, product, process, and supplier changes so your quality management system remains aligned with MDSAP requirements.
CAPA & Continual Improvement
Strengthen corrective action effectiveness, trend monitoring, and management review processes to turn findings into sustainable improvements.
MDSAP Compliance Questions, Answered
Who is eligible to participate in MDSAP?
Medical device manufacturers that market, or plan to market, devices in participating jurisdictions can generally pursue MDSAP certification. Your eligibility depends on your device activities, market access plans, and applicable regulatory requirements.
Which jurisdictions participate in the MDSAP program?
MDSAP audits are recognized by Australia, Brazil, Canada, Japan, and the United States. Acceptance and specific regulatory obligations can vary by jurisdiction, so confirm the requirements for each market you serve.
Is MDSAP certification required to sell medical devices in Canada?
For most manufacturers holding a Canadian Medical Device Licence, an MDSAP certificate is required to maintain a Medical Device Single Audit Program quality management system certificate. Device classification and role in the supply chain may affect your obligations.
How long does MDSAP implementation and certification preparation take?
Timelines vary with the maturity of your quality management system, the number of sites, product complexity, and the size of identified gaps. Organizations with an established ISO 13485 system may progress faster, but adequate time for implementation and evidence generation is essential.
What happens if an MDSAP audit identifies a nonconformity?
A finding does not automatically mean certification is lost. You will need to investigate the issue, address its root cause, implement corrective action, and provide objective evidence that the action is effective within the required timeframe.