ISO 17025 Test Laboratory Selection for Medical Devices: Complete Guide

Why Your Test Lab Choice Directly Affects Regulatory Success

Every medical device submitted to the FDA or a Notified Body under EU MDR requires supporting test data — biocompatibility, electromagnetic compatibility (EMC), electrical safety, sterilization validation, mechanical performance, and more. This data is only as credible as the laboratory that generates it. Selecting the wrong testing laboratory can result in rejected test reports, Additional Information requests from the FDA, delays in Notified Body review, wasted budgets, and months of lost time.

ISO/IEC 17025:2017 — General requirements for the competence of testing and calibration laboratories — is the international benchmark for laboratory quality and technical competence. When a laboratory holds ISO 17025 accreditation from a recognized accreditation body, it has been independently assessed for its ability to produce valid, reproducible, and traceable test results.

But here is the critical nuance that most manufacturers miss: a laboratory can hold ISO 17025 accreditation and still not be accredited for the specific test your device requires. Accreditation is scope-specific. A lab may be accredited for IEC 60601-1 basic safety testing but not for the particular collateral standards your device needs, or for biocompatibility testing under ISO 10993-5 but not for ISO 10993-18 chemical characterization.

This guide walks through the complete process of selecting, qualifying, and working with an ISO 17025 accredited testing laboratory for medical device regulatory submissions. It covers how accreditation works, the FDA's ASCA program, how to read and verify a lab's scope of accreditation, evaluation criteria, cost and timeline expectations, and the most common mistakes manufacturers make.

What ISO 17025 Accreditation Actually Means

ISO/IEC 17025 is not a certification a laboratory purchases. It is an accreditation granted by an independent accreditation body (AB) after rigorous on-site assessment. The accreditation body evaluates the laboratory against the standard's requirements in two broad categories:

Management Requirements

• Impartiality and confidentiality — the lab must demonstrate structural independence from conflicts of interest and protect client data
• Management system documentation — documented policies, procedures, and quality objectives
• Control of records — complete traceability of test results, calibration records, and corrective actions
• Internal audits and management reviews — regular self-assessment against the standard
• Corrective actions — systematic root cause analysis and resolution of nonconformities
• Customer feedback and complaints — formal processes for addressing client concerns

Technical Requirements

• Competence of personnel — qualified staff with documented training and demonstrated proficiency
• Accommodation and environmental conditions — facilities that do not compromise test results (temperature, humidity, cleanliness, vibration isolation)
• Test method validation and verification — methods must be validated before use and verified at regular intervals
• Equipment calibration and maintenance — all instruments traceable to national or international measurement standards
• Measurement traceability — an unbroken chain of calibrations linking every measurement to SI units or other recognized standards
• Sampling and sample handling — documented procedures for receiving, identifying, storing, and disposing of test samples
• Assurance of quality of results — participation in proficiency testing programs, use of reference materials, and replicate testing
• Reporting of results — test reports that meet regulatory formatting requirements and include measurement uncertainty where applicable

The accreditation body issues a Schedule of Accreditation (sometimes called a "scope of accreditation") that lists the specific test methods, standards, and measurement ranges for which the laboratory is accredited. This document is the single most important artifact to review when selecting a lab.

Accreditation Bodies: Who Accredits the Accreditors

Accreditation bodies themselves operate under ISO/IEC 17011, Conformity assessment — Requirements for accreditation bodies accrediting conformity assessment bodies. They are typically members of international mutual recognition arrangements, which means accreditation granted by one body is recognized by others globally.

Major Accreditation Bodies Relevant to Medical Device Testing

Because these bodies are ILAC MRA (International Laboratory Accreditation Cooperation Mutual Recognition Arrangement) signatories, test reports from labs accredited by any of them are accepted across borders. A test report from an A2LA-accredited lab in Ohio is accepted by EU Notified Bodies, and a report from a DAkkS-accredited lab in Germany is accepted by the FDA.

The FDA ASCA Program: Added Confidence for U.S. Submissions

The FDA's Accreditation Scheme for Conformity Assessment (ASCA) program adds an extra layer of confidence for test data in premarket submissions. Launched as a pilot in 2020 and converted to a permanent program in September 2023, ASCA is voluntary for both laboratories and manufacturers.

How ASCA Works

1. The FDA grants ASCA Recognition to qualified accreditation bodies
2. Those accreditation bodies accredit testing laboratories to ISO 17025 plus FDA-specific ASCA program specifications
3. Manufacturers use ASCA-accredited labs to perform testing for their 510(k), De Novo, or PMA submissions
4. Instead of submitting full test reports, manufacturers include an ASCA Summary Test Report along with their Declaration of Conformity

The practical benefit: the FDA has greater confidence in test data from ASCA-accredited labs, which means fewer questions about testing methodology during review. According to the FDA, the ASCA program is designed to enhance confidence in medical device testing, promote consistency and predictability in the premarket review process, and reduce regulatory burden.

ASCA Testing Categories

The ASCA program currently covers two main areas:

In 2025, the FDA expanded ASCA to include IEC 61326-2-6 Edition 4 for IVD medical equipment EMC, significantly expanding IVD manufacturers' ability to leverage the program.

ASCA-Recognized Accreditation Bodies

As of 2026, the FDA recognizes five accreditation bodies for the ASCA program:

• A2LA (American Association for Laboratory Accreditation)
• NVLAP (National Voluntary Laboratory Accreditation Program)
• PJLA (Perry Johnson Laboratory Accreditation)
• ANAB (ANSI National Accreditation Board)
• IAS (International Accreditation Service)

Manufacturers can find the current list of ASCA-accredited testing laboratories on the FDA's website. The FDA has noted that during audits of ASCA-accredited labs, some laboratories were found not to meet requirements, and the FDA has withdrawn ASCA accreditation from labs that failed audits — which underscores the importance of verifying a lab's current ASCA status.

How to Read a Schedule of Accreditation

This is where most selection errors occur. The Schedule of Accreditation is a detailed technical document, not a marketing brochure. Here is what to look for:

Step 1: Identify the Standard

Confirm that the specific standard you need is listed. For example, if your device requires EMC testing to IEC 60601-1-2:2014 + AMD1:2020 (Edition 4.1), verify that exact edition is in the scope. A lab accredited to Edition 3.0 may not satisfy current requirements.

Step 2: Check the Specific Test Methods

Within each standard, there are often multiple test methods. A lab accredited for IEC 60601-1-2 may have accreditation for emissions testing (conducted emissions, radiated emissions) but not for immunity testing (ESD, electrical fast transient, surge, conducted susceptibility, radiated susceptibility). Check for the specific clauses and test methods.

Step 3: Verify the Measurement Range

Accreditation includes measurement ranges. A lab may be accredited for radiated emissions testing from 30 MHz to 1 GHz but not from 1 GHz to 6 GHz. If your device operates at 2.4 GHz (Wi-Fi or Bluetooth), the lab's scope must cover that frequency range.

Step 4: Check for Exclusions

The scope of accreditation will list any exclusions. A common exclusion is specific clauses of a standard that the lab is not accredited to perform. The FDA's ASCA program specifically requires that exclusions be clearly listed in the accreditation scope.

Step 5: Confirm Current Status

Accreditation has an expiration date. Verify that the accreditation is current and has not lapsed. Accreditation bodies typically provide online verification tools.

The Selection Process: Step by Step

1. Define Your Testing Requirements

Before contacting any lab, document exactly what testing your device needs:

• Applicable standards — list every standard and specific edition required (e.g., IEC 60601-1:2005 + AMD1:2012, IEC 60601-1-2:2014 + AMD1:2020)
• Test methods within each standard — which specific tests (e.g., radiated emissions, ESD immunity, voltage dips)
• Device-specific considerations — home healthcare environment (IEC 60601-1-11), particular standards for your device type (IEC 60601-2-XX)
• Regulatory jurisdiction — FDA (ASCA eligible?), EU MDR (Notified Body expectations?), both
• Sample requirements — how many devices, what configuration, sterile vs. non-sterile
• Timeline — when you need results by
• Budget constraints — approximate spend limit

2. Identify Candidate Laboratories

Sources for finding accredited labs:

• Accreditation body directories — A2LA, NVLAP, UKAS, and other ABs maintain searchable online directories of accredited labs with their scopes
• FDA ASCA laboratory list — for FDA submissions, start with the FDA's list of ASCA-accredited labs
• Industry referrals — ask your Notified Body, regulatory consultant, or industry colleagues for recommendations
• Standard-specific labs — some labs specialize (e.g., NAMSA and Nelson Labs for biocompatibility; Intertek, SGS, and UL for EMC and safety)

3. Request Proposals and Evaluate

Send your testing requirements document to at least three laboratories. In your request, ask specifically for:

4. Verify Accreditation Independently

Do not rely solely on the lab's marketing materials or proposal. Verify independently:

• Download the current Schedule of Accreditation from the accreditation body's website
• Confirm the accreditation is active (not expired, suspended, or withdrawn)
• Cross-reference every test method you need against the schedule
• Check for any restrictions, exclusions, or footnotes

5. Conduct a Technical Evaluation

For critical or high-risk testing programs, consider:

• On-site visit — tour the facility, meet the technical staff, review equipment calibration records
• Technical call — discuss your device, test plan, and any unique considerations with the lab's engineering team
• Sample test plan review — ask the lab to propose a detailed test plan and review it for completeness and regulatory alignment
• Audit readiness — ask about the lab's most recent accreditation body assessment and any findings

6. Negotiate and Contract

Key terms to address in the testing agreement:

• Fixed-price vs. time-and-materials pricing
• Payment milestones (deposit, upon completion, net terms)
• Report delivery timeline with penalties for delay
• Ownership of test data and samples
• Confidentiality and data protection
• Liability for sample damage or loss
• Change order process (what happens if the test plan needs modification)
• Warranty on report accuracy and regulatory acceptance support

Major Testing Laboratories for Medical Devices

The following laboratories are widely used by medical device manufacturers and hold relevant ISO 17025 accreditations. This is not exhaustive — many excellent specialty labs exist — but these represent the major players:

Common Testing Types and Cost Ranges

Biocompatibility Testing (ISO 10993)

EMC and Electrical Safety Testing

Sterilization Validation

Costs vary significantly based on device complexity, the number of configurations to be tested, and the laboratory's capacity. Always obtain fixed-price quotations.

EU MDR vs. FDA: Lab Selection Differences

While both regulatory frameworks accept ISO 17025 accredited test data, there are differences in expectations:

For dual-market submissions (FDA + EU), select a laboratory that can generate reports acceptable to both jurisdictions simultaneously. Most major labs offer this service, but confirm explicitly.

Common Mistakes and How to Avoid Them

1. Not Checking Scope at the Method Level

A manufacturer developing a polymer-based implantable device selected a laboratory holding ISO 17025 accreditation and proceeded with chemical characterization testing under ISO 10993. During FDA review of the 510(k), the reviewer flagged that the specific extractables analysis technique used was not listed in the laboratory's Schedule of Accreditation. The testing had been competently performed, but the absence of accreditation coverage for that analytical method introduced questions about method validation and measurement traceability. The manufacturer was asked to provide supplementary documentation, delaying clearance.

Prevention: Always cross-reference your required test methods against the lab's Schedule of Accreditation at the method level — not just the standard level.

2. Assuming All ISO 17025 Labs Are Equivalent

ISO 17025 accreditation confirms a lab meets minimum competency requirements. But labs vary enormously in their experience with specific device types, their technical expertise, the sophistication of their equipment, and the quality of their reporting. A lab that excels at EMC testing of hospital-grade equipment may have limited experience with wearable devices or home-use products.

Prevention: Ask about the lab's specific experience with your device category and review sample reports.

3. Not Involving the Lab Early Enough

Many manufacturers finalize their device design before engaging a testing laboratory. This can lead to surprises: the device may not be in a testable configuration, the lab may identify design issues that affect testability, or the test plan may need revisions that cascade into timeline delays.

Prevention: Engage your testing laboratory during the design phase. The FDA's ASCA program specifically recommends that manufacturers work with their testing laboratory to develop the test plan collaboratively.

4. Ignoring Sample Preparation Requirements

ISO 10993-12 defines specific extraction conditions (temperature, duration, surface-area-to-volume ratio, extraction vehicle) for biocompatibility testing. Manufacturers who do not provide adequate samples in the correct configuration, or who do not sterilize samples using the final sterilization process, will have test results that do not represent the device as it will be marketed.

Prevention: Discuss sample requirements with the lab before manufacturing test samples. Ensure samples are representative of the final sterilized device.

5. Overlooking Report Format Requirements

The FDA and EU Notified Bodies have different expectations for test report formatting. A report that is perfectly adequate for one jurisdiction may be rejected by another due to missing information (e.g., measurement uncertainty, equipment identification, calibration dates).

Prevention: Specify the regulatory jurisdiction(s) upfront and request reports formatted for each.

Checklist: Evaluating a Testing Laboratory

Use this checklist when evaluating potential testing partners:

• ISO 17025 accreditation confirmed current and active
• Schedule of Accreditation covers every required standard, edition, and test method
• No relevant exclusions or restrictions in the scope
• Accreditation body is ILAC MRA signatory (for international acceptance)
• ASCA accreditation verified (if pursuing FDA submissions)
• Lab has demonstrated experience with your device type
• Turnaround time meets your project timeline
• Fixed-price quotation obtained and reviewed
• Report format specified for target regulatory jurisdictions
• Sample handling and return procedures documented
• Project manager / technical contact identified
• Quality agreement or testing agreement executed
• Confidentiality agreement in place
• Reference clients contacted and feedback obtained
• On-site visit completed (for critical testing programs)

Key Takeaways

Selecting the right ISO 17025 accredited testing laboratory is a regulatory strategy decision, not a procurement decision. The laboratory you choose directly affects the quality of your submission, the speed of your review, and ultimately how quickly your device reaches patients. Verify accreditation scope at the method level, leverage the FDA's ASCA program where applicable, involve your lab early in the design process, and never assume that accreditation alone equals competence for your specific testing needs.