How to Verify an Ultrasound Repair or Parts Provider's ISO 13485 and QMS Claims

Direct Answer: How to Verify QMS and Registration Claims

When an independent ultrasound repair depot or replacement-parts distributor claims to be "ISO 13485 certified" and "FDA registered," biomedical engineering (HTM), clinical engineering, and hospital procurement teams should not rely on a logo or marketing PDF alone. The FDA's Quality Management System Regulation (QMSR), effective February 2, 2026, incorporates ISO 13485:2016 into 21 CFR Part 820 for manufacturers subject to that regulation. Hospitals and ordinary independent servicers are not automatically made QMSR-regulated manufacturers by purchasing or performing a repair; buyers can nevertheless use ISO 13485 purchasing-control concepts as a practical supplier-qualification framework.

To verify a provider's Quality Management System (QMS) claims, treat every claim as a physical document that must be validated end-to-end through a six-step desktop verification workflow:

1. Obtain the actual certificate: Require the full, unredacted ISO 13485:2016 certificate showing the legal entity name, operating facility address(es), standard version, certificate number, issue date, and expiration date.
2. Verify accreditation via IAF CertSearch: Confirm that the issuing certification body (registrar) is accredited by a recognized accreditation body (such as ANAB, UKAS, or DAkkS) under ISO/IEC 17021-1, and verify the certificate status (active, suspended, or withdrawn) directly in the International Accreditation Forum (IAF) CertSearch database.
3. Audit the explicit scope statement: Read the exact scope text to confirm it covers depot repair, transducer/probe refurbishment, or replacement-parts distribution at the specific operating site—not merely generic "distribution" or "manufacturing of unrelated assemblies."
4. Confirm servicing applicability: Ask the provider and registrar whether Clause 7.5.4 (Servicing Activities) is included and request the supporting scope or QMS documentation. The face of a certificate may not enumerate every nonapplicable requirement.
5. Interpret "FDA Registered" claims correctly under 21 CFR Part 807: Verify the legal entity and listed operation in FDA's public database when registration is claimed. Registration duties depend on actual activities; ordinary servicing or wholesale distribution is treated differently from manufacturing, remanufacturing, repackaging, relabeling, or importing.
6. Distinguish a certified QMS from an "ISO-certified part": Recognize that ISO 13485 certifies an organization's management system processes; it never certifies or approves individual repaired ultrasound probes, beamformer boards, or spare components.

+-----------------------------------------------------------------------------------+
|                        ISO 13485 & REGISTRATION VERIFICATION                       |
+-----------------------------------------------------------------------------------+
| 1. Full Certificate -> 2. IAF Accreditation Check -> 3. Scope & Exclusion Audit   |
| 4. Site Address Match -> 5. 21 CFR 807 Registration -> 6. QMS vs Part Distinction |
+-----------------------------------------------------------------------------------+

What Does an ISO 13485 Certificate Actually Prove About an Ultrasound Provider?

ISO 13485:2016 specifies requirements for a quality management system where an organization needs to demonstrate its ability to provide medical devices and related services that consistently meet customer and applicable regulatory requirements. For an ultrasound repair depot or parts supplier, an accredited ISO 13485 certificate provides evidence that a third-party certification body audited the management system within the certificate's stated scope and sites. It is not a blanket audit of every activity the company performs.

However, healthcare technology management (HTM) leaders frequently fall into misunderstanding what the certificate guarantees:

• It proves process framework compliance, not individual part conformity: The certificate confirms that the company maintains procedures for intake, calibration, work instructions, nonconformance handling, and record retention. It does not certify that a specific GE matrix array probe, Philips acoustic module, or Siemens power supply board repaired yesterday is free of defects.
• It does not constitute regulatory clearance or approval: An ISO 13485 certificate is issued by a certification body, not by the US FDA or another regulator. It is not a 510(k) clearance, De Novo grant, PMA approval, or CE certificate for an individual repaired item.
• It is role-dependent: ISO 13485 recognizes organizations involved in different life-cycle stages—including design, production, storage, distribution, installation, and servicing. A scope limited to "warehousing and wholesale distribution of electronic components" does not establish that repair activities were included in the certification audit.

Before establishing a service contract, buyers should review the foundational principles of ISO 13485 implementation and certification and consult general guidelines on how ISO 13485 certification works to understand the registrar's audit boundaries.

How to Verify Accreditation Chains and Certificate Status via IAF CertSearch

A frequent risk in third-party medical equipment servicing is the presentation of self-issued, unaccredited, expired, or fraudulent certificates. To establish authenticity, health systems should validate the accreditation chain.

IAF (International Accreditation Forum)
   |-- Accreditation Body (e.g., ANAB, UKAS, DAkkS, JAS-ANZ)
         |-- Certification Body / Registrar (e.g., NQA, BSI, TÜV SÜD, DQS)
               |-- Certified Supplier (Ultrasound Depot / Parts Provider)

The Three-Tier Accreditation Structure

1. The International Accreditation Forum (IAF): The global association of conformity assessment accreditation bodies that operates the multilateral recognition arrangement (MLA).
2. Accreditation Bodies (ABs): National bodies (such as ANAB in the United States, UKAS in the United Kingdom, or DAkkS in Germany) that audit and accredit certification bodies under ISO/IEC 17021-1 (Conformity assessment — Requirements for bodies providing audit and certification of management systems).
3. Certification Bodies (CBs / Registrars): Commercial or non-profit entities (such as NQA, BSI, DNV, or TÜV) that conduct on-site and remote audits of the provider's QMS and issue the ISO 13485 certificate.

Step-by-Step Desktop Lookup Protocol

1. Access IAF CertSearch: Navigate to the global database (iafcertsearch.org).
2. Search by Company Name or Certificate ID: Enter the exact legal entity name shown on the vendor's certificate or the unique certificate identification number.
3. Verify Registrar Status: Confirm that the issuing certification body listed on the certificate appears as an active accredited body under a recognized IAF MLA signatory accreditation body.
4. Check Current Status: Verify that the certificate is current and has not been suspended or withdrawn. Certification commonly operates on a multi-year cycle with periodic surveillance, but the buyer should verify the actual dates and status with the certification body rather than assume a universal Month 12/Month 24 schedule.

If a certificate does not appear in IAF CertSearch, contact the issuing certification body directly through their official portal to confirm authenticity. Unaccredited "certificates" issued by unverified entities provide no regulatory standing under purchasing control rules.

Auditing Certificate Scope and Servicing Applicability

The scope statement and listed sites define the public boundaries of the certified management system. Buyers should not infer that an unlisted service activity or location was audited.

Scope Wording Examples and Procurement Interpretation

Confirming the Clause 7.5.4 Servicing Boundary

Applicability under ISO 13485 depends on the organization's role and activities. For a depot that relies on its certificate as evidence for repair work, the buyer should confirm that servicing processes are actually inside the audited QMS. Do not assume that a certificate will print a clause-by-clause exclusion list; request supporting documentation or confirmation from the certification body when the public scope is ambiguous.

ISO 13485:2016 Clause 7 (Product Realization)
   ├── 7.1 Planning of Product Realization
   ├── 7.2 Customer-Related Processes
   ├── 7.3 Design and Development
   ├── 7.4 Purchasing
   ├── 7.5 Production and Service Provision
   │     ├── 7.5.1 Control of Production & Service Provision
   │     ├── 7.5.3 Installation Activities
   │     └── 7.5.4 Servicing Activities  <-- CONFIRM FOR DEPOT REPAIR
   └── 7.6 Control of Monitoring & Measuring Equipment

If the scope or supporting QMS documentation does not cover servicing, the certificate should not be treated as evidence that the repair process was audited. Traceability expectations should be defined for the item and activity rather than inferred from a badge. When qualifying critical repair partners, buyers should cross-reference the site's supplier audit checklist for ISO 13485 and QMSR and depot repair QMS guide.

Certified QMS vs. "ISO-Certified Part": Avoiding an Imprecise Claim

A persistent marketing claim in the third-party ultrasound parts market is the assertion that a replacement beamformer board, acoustic lens, transducer strain relief, or power supply is an "ISO-certified part."

Why "ISO-Certified Part" Needs Clarification

1. ISO Standards Do Not Certify Products: ISO (the International Organization for Standardization) develops international standards for management systems, testing methods, and risk management. ISO does not test, grade, clear, or certify individual physical products.
2. QMS Certification Audits Systems, Not Physical Inventory: An ISO 13485 audit verifies that an organization documents its processes, calibrates test equipment, trains technicians, maintains component lot traceability, and executes nonconformance procedures. It does not inspect individual pulled or repaired circuit boards in warehouse racks.
3. Product Authorization Is a Separate Question: Where a device requires FDA clearance/approval or EU conformity assessment, those pathways are separate from QMS certification. A repaired spare part should be evaluated against its identity, authorized work, compatibility, and unit-specific acceptance evidence rather than described as "ISO-approved."

When a vendor advertises "ISO-certified parts," procurement teams should require clarification: request the vendor's ISO 13485 certificate scope for the facility, alongside the specific receiving inspection, bench testing, and real-machine validation test records for the part number being purchased.

Interpreting "FDA Registered" Claims Under 21 CFR Part 807

Many third-party service providers feature the FDA logo alongside claims of being an "FDA Registered Facility." Procurement officers must understand the legal boundary of establishment registration under 21 CFR Part 807 to evaluate these claims accurately.

Who Must Register Under 21 CFR Part 807?

Under 21 CFR § 807.20, medical device establishment registration and device listing requirements apply to specific establishment types:

• Domestic & Foreign Manufacturers: Entities that fabricate finished devices.
• Contract Manufacturers & Sterilizers: Entities that manufacture or sterilize devices to another entity's specifications.
• Remanufacturers: Entities that process, condition, renovate, repackage, or restore a finished device in a manner that significantly changes its performance, safety specifications, or intended use.
• Repackagers and Relabelers: Entities that package or label finished devices.
• Initial Importers: Entities importing foreign-manufactured devices into the US.

The Servicer and Wholesale Distributor Exemption

Under 21 CFR Part 807, registration and listing are role- and activity-specific. An entity limited to ordinary servicing or wholesale distribution generally is not registered as a manufacturer merely because it repairs or sells an item. Manufacturing, remanufacturing, repackaging, relabeling, specification development, and importing can change the analysis.

+-----------------------------------------------------------------------------------------+
|                          FDA ESTABLISHMENT REGISTRATION MATRIX                          |
+-----------------------------------+-----------------------------------------------------+
| Establishment Type                | 21 CFR Part 807 Registration Obligation            |
+-----------------------------------+-----------------------------------------------------+
| Device Manufacturer               | MANDATORY (Must register & list devices)           |
| Remanufacturer                    | MANDATORY (Changes performance/safety specs)        |
| Contract Manufacturer / Assembler | MANDATORY (Manufactures to specification)           |
| Wholesale Parts Distributor       | EXEMPT (If only distributing without repackaging)   |
| Third-Party Servicer / Repairer   | EXEMPT (If maintaining original specifications)     |
+-----------------------------------+-----------------------------------------------------+

The "21 CFR 807.39 Disclaimer" Requirement

Under 21 CFR § 807.39, registration of a device establishment or assignment of a registration number does not denote approval, clearance, or endorsement of the establishment or its products by the FDA. Any representation that creates an impression of official approval based on establishment registration is misleading.

If an independent ultrasound repair provider claims FDA registration, procurement should verify the record in the FDA Establishment Registration Database and check the listed establishment operations. A company performing remanufacturing can incur manufacturer registration, listing, QMSR, reporting, and premarket obligations depending on the activity; registration alone does not prove compliance or predict an inspection schedule.

Desktop-Verification Worksheet for Procurement and QA

To standardize supplier qualification under ISO 13485 Clause 7.4.1, procurement teams should complete the following verification worksheet prior to contract execution or purchase order issuance.

Supplier Quality Credential Verification Worksheet

===================================================================================
ULTRASOUND REPAIR & PARTS PROVIDER QMS DESKTOP VERIFICATION WORKSHEET
===================================================================================
Vendor Legal Entity Name: _________________________________________________________
Facility Operating Address: ______________________________________________________
Target Service / Part Scope: [ ] Probe Repair  [ ] Board Repair  [ ] Parts Sales
===================================================================================

CHECKPOINT 1: ISO 13485 CERTIFICATE AUTHENTICITY
[ ] Unredacted Certificate Provided? (Yes / No)
[ ] Issuing Certification Body (Registrar): ______________________________________
[ ] Certificate Number: ___________________________________________________________
[ ] Issue Date: _______________ Expiration Date: _________________________________
[ ] IAF CertSearch Status Verified? (Active / Suspended / Not Found)
    Verification URL / Reference: _________________________________________________
[ ] Accreditation Body Name (e.g., ANAB, UKAS): ___________________________________

CHECKPOINT 2: SCOPE & CLAUSE EXCLUSION AUDIT
[ ] Does Scope text name "Repair", "Refurbishment", or "Servicing"? (Yes / No)
[ ] Address on Certificate matches physical repair facility address? (Yes / No)
[ ] Section 7 Exclusions checked?
    - Clause 7.5.4 (Servicing Activities) Excluded? (YES = FAIL FOR REPAIR VENDORS)
    - Clause 7.5.9 (Traceability) Excluded? (YES = FAIL FOR REPAIR VENDORS)

CHECKPOINT 3: FDA REGISTRATION & LEGAL STATUS
[ ] Claiming FDA Registration? (Yes / No)
[ ] FDA Owner/Operator Number or FEI: ____________________________________________
[ ] AccessData Search Result: (Manufacturer / Remanufacturer / Exempt Servicer)
[ ] Understands 21 CFR 807.39 (Registration != Approval)? (Confirmed)

CHECKPOINT 4: PRODUCT-LEVEL QUALITY EVIDENCE
[ ] Serialized real-machine test records provided per repair? (Yes / No)
[ ] 48-hour burn-in / temperature stability data for repaired boards? (Yes / No)
[ ] Traceability of replacement electronic components maintained? (Yes / No)
[ ] Decontamination disclosure protocol established? (Yes / No)

VERIFICATION DECISION: [ ] APPROVED  [ ] CONDITIONAL  [ ] REJECTED
Auditor Signature: _______________________________ Date: ________________________
===================================================================================

Example Evidence Path: Applying the Checklist to a Real Provider

To demonstrate how procurement and biomedical teams can apply this worksheet to an independent service provider, consider the publicly documented quality framework of Rongtao Medical.

Provider Context and Independence

Guangzhou Rongtao Medical Technology Co., Ltd. (founded 2013, Guangzhou, China) operates as an independent multi-brand ultrasound repair and replacement-parts provider servicing global markets. Rongtao Medical is an independent third-party provider and is not an OEM, nor is it an OEM-authorized service representative for GE, Philips, Siemens, Canon/Toshiba, Mindray, or other brands.

Reviewing Published QMS Documentation

Healthcare buyers evaluating independent repair partners can review provider-published credentials against the desktop worksheet:

1. Published ISO Scope Claim: On the official Rongtao Medical quality page, the company publishes ISO 13485:2016 and ISO 9001:2015 management-system credentials and states that its ISO 13485 scope covers "ultrasound board repair and tested replacement-parts sales." Treat this as a provider-published claim until the certificate and status are independently verified.
2. Applying Worksheet Checkpoint 1 (Acquisition of Records): Rongtao's Quality page provides downloadable certificate PDFs as well as summary scope text. Download the current document, match the entity and sites, note the certification body and dates shown, and verify status through IAF CertSearch or the certification body's official channel. A PDF hosted by the vendor is the starting document, not independent confirmation of current status.
3. Evaluating Regulatory Context: Rongtao identifies itself as an independent third-party provider rather than an OEM-authorized service organization. Buyers should separately determine whether the quoted activity is distribution, servicing, or potential remanufacturing and should not treat registration or QMS certification as FDA approval.
4. Technical Evidence Records: Buyers can use the Rongtao ISO/QMS probe-evidence report as a request checklist, then obtain job-specific intake, work, applicable test, compatible-host verification, release, and warranty records for the quoted probe. A report page is not a substitute for the unit-linked records.

By applying this structured evidence path, buyers maintain clear boundaries: provider-published quality statements are validated through primary certificate lookup, while technical service parameters are confirmed in the case-specific quality agreement.

Frequently Asked Questions (FAQ)

Does ISO 13485 certification mean a repaired ultrasound probe or board is regulator-approved?

No. ISO 13485 certification concerns the management system within stated scope and sites. It does not mean the repaired probe, beamformer board, or power supply has received FDA clearance, CE marking, or product approval. Evaluate the individual item using job-specific records and an acceptance process appropriate to the equipment and risk.

How can I check if an ISO 13485 certificate is real and current?

Obtain the unredacted certificate from the vendor showing the registrar's name and certificate number. Search for the company name or certificate ID in the global IAF CertSearch database. If the record is missing, verify the certificate directly with the issuing accredited certification body (e.g., NQA, BSI, or TÜV).

Is an independent ultrasound repair provider required to be FDA-registered?

Registration depends on the provider's legal entity, location, and actual operations. Ordinary servicing that does not become remanufacturing is treated differently from manufacturing/remanufacturing; distribution and importing also have distinct roles. If a provider claims registration, verify the public record and listed operation without treating the number as approval.

What should I do if a vendor's ISO 13485 certificate excludes Clause 7.5.4?

If the certificate or supporting QMS documentation explicitly excludes servicing, do not use that certificate as evidence that repair operations were audited. Ask for a certificate whose scope covers the work, confirmation from the certification body, or other proportionate supplier-audit evidence.