Quality KPIs and Metrics for Medical Devices: Complete Framework + ISO 13485 & QMSR 2026 Alignment
How to build a quality KPI framework for medical device companies — CAPA effectiveness, first pass yield, complaint rates, design control metrics, and cost of quality. Fully aligned with ISO 13485:2016 and FDA QMSR 2026 requirements.
Why Quality KPIs Matter More Than Ever in 2026
The FDA's Quality Management System Regulation (QMSR) took effect on February 2, 2026, replacing the legacy Quality System Regulation (QSR) and incorporating ISO 13485:2016 by reference. One of the most consequential changes is the requirement for "top management" engagement in the quality management system — quality metrics are now expected to appear on executive scorecards and board-level dashboards.
Companies like OrthoX, profiled in IntuitionLabs' QMSR transition analysis, already elevated their CEO to attend quarterly QMS review meetings and tied quality metrics (nonconformances, audit findings, CAPA effectiveness) to executive KPIs. This is no longer optional — it is the new baseline.
Meanwhile, McKinsey estimates that the total direct cost of quality in MedTech runs between 6.8% and 9.4% of industry sales — between $36 billion and $50 billion annually at 2024 market size. The companies that recover the most are those that measure, track, and act on quality data systematically.
This guide provides a complete quality KPI framework for medical device manufacturers, covering manufacturing, design and development, CAPA, post-market surveillance, and quality system compliance — with specific metrics, formulas, benchmarks, and ISO 13485 clause mappings.
The Quality Metrics Landscape: Four Categories
Quality metrics in medical device manufacturing fall into four categories, each serving a distinct purpose:
| Category | What It Measures | Primary Metrics | ISO 13485 Clause |
|---|---|---|---|
| Process Quality | Efficiency and reliability of production | First Pass Yield, Rework Rate, Scrap Rate | 7.5 (Production) |
| Product Quality | Conformance to customer and regulatory requirements | Defect Rate (DPPM/DPMO), Customer Complaints, RMA Rate | 8.2 (Monitoring) |
| Asset Performance | Equipment reliability and productivity | OEE, MTBF, Calibration On-Time Rate | 7.1.3 (Infrastructure) |
| Financial Quality | Business impact of quality performance | Cost of Quality (CoQ), Cost of Poor Quality (COPQ) | 5.6 (Management Review) |
The distinction matters. Organizations that try to track too many metrics simultaneously end up tracking none effectively. The goal is to identify three to five quality KPIs that have the greatest impact on your most important business objectives, elevate those to KPI status, and focus organizational attention on moving those numbers.
Manufacturing Quality KPIs
First Pass Yield (FPY)
Formula: FPY = (Units passing inspection on first attempt / Total units started) × 100
First Pass Yield is the single most important manufacturing quality metric. It measures the percentage of units manufactured to specification on the first attempt — without rework, repair, or scrap.
Benchmark: ≥98% for medical device manufacturing. Maintaining FPY above 98% ensures quality standards are met and minimizes costs associated with warranty reserves (typically 0.3% to 0.5% of revenue).
ISO 13485 Mapping: Clause 7.5.1 (Control of production and service provision) requires documented procedures that ensure consistent product quality. FPY is the most direct measure of process stability.
How to improve FPY:
- Implement Statistical Process Control (SPC) to detect process drift before it produces nonconforming units
- Validate manufacturing processes per Clause 7.5.6 with appropriate IQ/OQ/PQ protocols
- Use Design of Experiments (DoE) to optimize process parameters before full production
- Track FPY by production line, shift, and operator to identify specific sources of variation
Defect Rate — DPPM and DPMO
Formulas:
- DPPM (Defective Parts Per Million) = (Number of defective units / Total units produced) × 1,000,000
- DPMO (Defects Per Million Opportunities) = (Total defects / (Total units × Opportunities per unit)) × 1,000,000
DPPM counts defective units; DPMO counts individual defects. A unit with three defects counts as one defective unit in DPPM but as three defects in DPMO.
Benchmark: A Six Sigma process produces 3.4 DPMO or fewer. Most medical device manufacturers target DPMO below 500 for critical-to-quality (CTQ) characteristics.
ISO 13485 Mapping: Clause 8.2.4 (Monitoring of product) requires monitoring and measuring product characteristics to verify that requirements are met.
Scrap Rate
Formula: Scrap Rate = (Units scrapped / Total units started) × 100
Scrap rate is the percentage of units that cannot be reworked or repaired and must be discarded.
Benchmark: Medical device manufacturers typically target scrap rates below 2%. Higher rates signal issues with process design, incoming material quality, or operator training.
ISO 13485 Mapping: Clause 8.3 (Control of nonconforming product) requires procedures for identifying and controlling nonconforming product, including disposition decisions (rework, scrap, use-as-is with concession).
Rework Rate
Formula: Rework Rate = (Units requiring rework / Total units produced) × 100
Rework adds cost, cycle time, and risk. Every reworked unit carries additional handling, potential for reintroduction of defects, and documentation burden.
Benchmark: Target below 1% for Class II/III devices. Rework rates above 2% typically trigger a CAPA investigation.
CAPA and Quality Event KPIs
CAPA system effectiveness is a top focus area for both FDA inspectors and ISO 13485 auditors. The following KPIs measure whether your CAPA system is functioning as intended.
CAPA Closure Timeliness
Formula: CAPA On-Time Closure Rate = (CAPAs closed within target timeframe / Total CAPAs due) × 100
Target: ≥90% closure within defined timeframes. OpenRegulatory's ISO 13485 KPI framework sets a goal of root cause analysis completion within 1 week and action plan completion within 1 month.
Best practice: Establish tiered timelines based on risk:
- Critical CAPAs (patient safety impact): 30 days
- Major CAPAs (product quality impact): 60 days
- Minor CAPAs (process improvement): 90 days
CAPA Effectiveness Rate
Formula: CAPA Effectiveness = (CAPAs with verified effectiveness / Total CAPAs assessed) × 100
This is the most important CAPA metric. It measures whether corrective actions actually prevented recurrence.
Target: ≥85% effectiveness rate. Effectiveness verification should occur 6–12 months after implementation.
Common failure mode: Companies close CAPAs as "effective" without conducting genuine effectiveness checks. Auditors increasingly expect objective evidence — not just a sign-off — that the root cause was eliminated.
CAPA Recurrence Rate
Formula: CAPA Recurrence Rate = (Recurring nonconformances / Total nonconformances) × 100
A high recurrence rate indicates that root cause analysis was inadequate or corrective actions were insufficient.
Target: Below 5%. Any recurrence of a previously addressed issue should trigger an escalation and re-investigation.
Nonconformance Report (NCR) Rate
Formula: NCR Rate = (Total NCRs raised / Total units produced) × 100
Target: Below 0.5% for medical device manufacturing.
ISO 13485 Mapping: Clause 8.3 requires documented procedures for handling nonconforming product, including identification, documentation, evaluation, segregation, and disposition.
Complaint Resolution Time
Formula: Average Complaint Resolution Time = Sum of (complaint closure date − complaint receipt date) / Total complaints closed
Target: Median resolution time under 30 calendar days for quality-related complaints. Regulatory-reportable complaints (MDR, vigilance) must be reported within legally mandated timelines (e.g., 30 days for FDA MDR, per 21 CFR 803).
ISO 13485 Mapping: Clause 8.2.1 (Customer feedback) and Clause 8.2.2 (Complaint handling) under EU MDR Article 87.
Design and Development KPIs
Quality in medical devices begins at the design stage. The following KPIs track whether your design controls process is producing safe, effective products.
Design Change Order Cycle Time
Formula: Average DCO Cycle Time = Sum of (DCO closure date − DCO initiation date) / Total DCOs closed
Target: Under 45 calendar days for standard design changes. Emergency changes should close within 5 business days.
Design Verification/Validation Pass Rate
Formula: V&V Pass Rate = (Tests/protocols passing on first execution / Total tests/protocols executed) × 100
Target: ≥85% first-pass rate. Lower rates indicate inadequate design input specifications or incomplete risk analysis.
ISO 13485 Mapping: Clause 7.3.6 (Design and development verification) and Clause 7.3.7 (Design and development validation).
Design Transfer Deficiency Rate
Formula: Design Transfer Deficiency Rate = (Issues identified during design transfer / Total design outputs transferred) × 100
Target: Below 5%. High rates suggest that design outputs (DMR) are incomplete or manufacturing processes were not adequately validated prior to transfer.
Supplier Quality KPIs
Incoming Material Acceptance Rate
Formula: Incoming Acceptance Rate = (Lots accepted on first inspection / Total lots received) × 100
Target: ≥97% for critical components, ≥95% for non-critical components.
Supplier Corrective Action Request (SCAR) Closure Rate
Formula: SCAR On-Time Closure = (SCARs closed within target timeframe / Total SCARs issued) × 100
Target: ≥85% closure within 30 days.
ISO 13485 Mapping: Clause 7.4 (Purchasing) requires evaluation and selection of suppliers based on their ability to supply product that meets requirements. Clause 7.4.3 requires verification of purchased product.
Supplier Audit Compliance Score
Formula: Supplier Score = (Audit criteria met / Total audit criteria) × 100
Target: ≥85% for approved suppliers. Suppliers scoring below 70% should be placed on probation with a defined improvement timeline.
Post-Market Surveillance KPIs
Complaint Rate per 10,000 Units Shipped
Formula: Complaint Rate = (Total complaints received / Units shipped) × 10,000
Target: Varies by device type, but most established Class II devices target below 5 complaints per 10,000 units.
ISO 13485 Mapping: Clause 8.2.1 and Clause 8.4 (Analysis of data) require trending and analysis of customer feedback.
Adverse Event Reporting Timeliness
Formula: On-Time Reporting Rate = (Reports submitted within regulatory deadline / Total reportable events) × 100
Target: 100%. This is a regulatory requirement, not a stretch goal. Missed deadlines trigger FDA Warning Letters and EU vigilance enforcement.
Recall Rate
Formula: Recall Rate = (Number of product recalls / Total product families marketed) × 100
Target: Zero. One recall is one too many. Trending upward even at low rates signals systemic quality issues.
Quality System Compliance KPIs
Internal Audit Finding Closure Rate
Formula: Audit Finding Closure Rate = (Audit findings closed on time / Total audit findings) × 100
Target: ≥95% closure within 30/60/90 days depending on severity (critical/major/minor).
ISO 13485 Mapping: Clause 8.2.4 (Internal audit) — QMSR 2026 now gives FDA authority to inspect management reviews, internal audits, and supplier audit reports directly.
Training Completion Rate
Formula: Training Completion = (Training tasks completed on time / Total training tasks assigned) × 100
Target: 100% for GMP-critical training. Any gap is a regulatory finding waiting to happen.
Document Control Cycle Time
Formula: Average Document Approval Time = Sum of (approval date − initiation date) / Total documents approved
Target: Under 10 business days for SOPs, under 5 business days for work instructions.
Building a Quality KPI Dashboard
The Core KPI Set
For most medical device manufacturers, the core quality KPI set includes:
- First Pass Yield — process-level quality
- CAPA Effectiveness Rate — quality system health
- Cost of Poor Quality (COPQ) — financial impact of quality failures
- Customer Complaint Rate — post-market signal
- Audit Finding Closure Rate — compliance and continuous improvement
These five metrics, taken together, provide a complete picture of quality performance from the process level to the customer level. They are the vital signs of the quality management system.
Dashboard Design Principles
A quality KPI dashboard should answer four questions:
- What metrics matter most? Start with the core KPIs above. Add supporting metrics that provide diagnostic context (e.g., if FPY is a core KPI, add FPY by production line and by shift).
- Who needs to see what? Operators need real-time process metrics. Quality managers need trend data. Executives need aggregated performance and financial impact.
- What are the thresholds? Define green/yellow/red thresholds for every KPI. A metric without thresholds is just a number.
- What action does each metric trigger? Every red threshold should have a defined escalation path and response procedure.
Management Review Integration
Under QMSR 2026 and ISO 13485 Clause 5.6 (Management Review), quality KPIs must be reviewed by top management at planned intervals. The management review must evaluate:
- Audit results and regulatory inspection findings
- Customer feedback and complaint trends
- Process performance and product conformity
- Status of corrective and preventive actions
- Follow-up actions from previous management reviews
- Changes that could affect the quality management system
- Recommendations for improvement
The ISO 13485 KPI framework from OpenRegulatory recommends tracking "percentage of action items defined in previous management reviews that have been completed" with a goal of 100%.
KPI Framework Comparison: Leading vs. Lagging Indicators
| Indicator Type | Examples | Purpose | Limitation |
|---|---|---|---|
| Leading | Training completion rate, Process capability (Cpk), Calibration on-time rate, Supplier score trends | Predict and prevent problems before they occur | May not correlate perfectly with outcomes |
| Lagging | Complaint rate, Recall rate, NCR rate, CAPA recurrence rate, FPY | Confirm whether problems occurred | Cannot prevent the problem already happened |
The most effective quality programs balance both. If you only benchmark lagging metrics — complaints, failures, lost-time incidents — you react late. Process capability, first-pass yield, training effectiveness, and audit closure time are leading indicators that help you course-correct before harm or scrap accumulates.
Comparison: Quality KPI Frameworks by Company Stage
| KPI Area | Startup (Pre-Commercial) | Growth (First Product Shipped) | Mature (Multiple Products) |
|---|---|---|---|
| Manufacturing | FPY, Process validation status | FPY, Scrap rate, Rework rate, OEE | FPY by line, DPMO by product, SPC Cpk |
| CAPA | CAPA closure timeliness | CAPA closure + effectiveness | CAPA effectiveness + recurrence rate |
| Complaints | Complaint procedure compliance | Complaint rate, Resolution time | Complaint rate per 10K units, Vigilance timeliness |
| Supplier | Supplier qualification status | Incoming acceptance rate | SCAR closure, Supplier audit score, Risk-tiered monitoring |
| Design | Design control procedure adherence | V&V pass rate, DCO cycle time | Design transfer deficiency rate, DHF completeness |
| Financial | CoQ tracking initiated | CoQ as % of revenue, COPQ trend | CoQ by category, Benchmark vs. industry (6.8-9.4%) |
| Review Frequency | Monthly | Bi-weekly (ops), Monthly (exec) | Real-time (shop floor), Weekly (ops), Monthly (exec) |
FAQ
What is the single most important quality KPI for medical device companies?
First Pass Yield (FPY) is the most universally applicable quality KPI. It directly measures whether your manufacturing processes are producing conforming product on the first attempt. For companies with mature CAPA systems, CAPA Effectiveness Rate is equally important because it measures whether your quality system is learning from failures.
How many quality KPIs should a medical device company track?
Three to five core KPIs, with supporting sub-metrics for diagnostic depth. Too many KPIs dilute focus; too few leave blind spots. The core set should cover process quality, product quality, quality system health, financial impact, and post-market signal.
What does ISO 13485 specifically require for quality metrics?
ISO 13485 Clause 5.6 (Management Review) requires top management to review quality data at planned intervals. Clause 8.4 (Analysis of Data) requires collecting and analyzing data to demonstrate the suitability and effectiveness of the QMS and to evaluate where improvements can be made. The standard does not prescribe specific metrics — that is left to the manufacturer's risk-based judgment.
How does QMSR 2026 change quality KPI expectations?
QMSR incorporates ISO 13485 by reference and gives FDA authority to inspect management reviews, internal audits, and supplier audit reports directly. Under the old QSR, companies could delegate quality oversight to a management representative. Under QMSR, "top management" is explicitly required to be engaged — quality metrics must reach executive-level visibility. Companies are now tying quality KPIs directly to executive scorecards.
What is a good CAPA effectiveness rate target?
≥85% is a practical target. This means that for every 100 CAPAs assessed for effectiveness, at least 85 should demonstrate that the root cause was eliminated and the problem did not recur. Effectiveness should be verified 6–12 months after implementation, not at the time of closure.
How do I calculate Cost of Quality as a KPI?
CoQ = Cost of Good Quality (Prevention + Appraisal) + Cost of Poor Quality (Internal Failure + External Failure). Express this as a percentage of revenue. The medical device industry benchmark is 6.8% to 9.4% of sales (McKinsey). Companies with mature quality systems and integrated eQMS platforms report CoQ below 5%.
What is the difference between leading and lagging quality indicators?
Leading indicators predict future quality performance (training completion, process capability, calibration compliance). Lagging indicators measure past outcomes (complaint rate, recall rate, scrap rate). Effective quality programs balance both — leading indicators help prevent problems, while lagging indicators confirm whether prevention efforts are working.
How often should quality KPIs be reviewed?
Production-level metrics (FPY, scrap rate) should be reviewed daily or weekly. Quality system metrics (CAPA effectiveness, audit finding closure) should be reviewed monthly. Financial quality metrics (CoQ) should be reviewed quarterly. All metrics should be formally reviewed during management review, which ISO 13485 requires at planned intervals (typically quarterly or semi-annually).