How to Verify a Supplier’s ISO 13485 Certification for Pressotherapy Machines?

When our procurement team sources pressotherapy machines from overseas suppliers, one question keeps surfacing: Is this certificate real? A single fake ISO 13485 document can expose your brand to recalls, lawsuits, and regulatory bans. This risk is avoidable if you know where to look.

To verify a supplier’s ISO 13485 certification, request the original certificate, confirm the certification body’s accreditation through the IAF CertSearch database, check the certificate number and expiry date, verify the scope covers pressotherapy machine manufacturing, and contact the certification body directly if doubts remain.

This guide walks you through every step of the verification process. We will also cover how to audit a supplier’s quality management system ¹ and explain why ISO 13485 matters for product liability protection.

How can I verify that my supplier's ISO 13485 certificate is authentic and currently valid?

Our quality assurance team has rejected certificates that looked perfect at first glance. The logos were sharp, the dates were current, but the certification body did not exist. Fake certificates are more common than most buyers realize—industry reports suggest 20-30% of presented certificates may be invalid due to expiry or fraudulent accreditation.

To verify certificate authenticity, use the IAF CertSearch database at iafcertsearch.org to cross-check the certificate number, certification body, and accreditation status. Valid certificates must come from accreditors that are IAF MLA signatories, and all details should match exactly with database records.

Step 1: Request the Full Certificate

Ask your supplier for a high-resolution copy of the ISO 13485:2016 certificate ². The certificate must include several key elements. Check for the certification body's name and logo, the accreditation body's mark ³, the IAF MLA mark (if applicable), the unique certificate number, the standard reference (ISO 13485:2016), the scope statement, issue and expiry dates, and the supplier's legal name and address.

Step 2: Use the IAF CertSearch Database

IAF CertSearch is the exclusive global database for accredited management system certifications allowing users to validate an organization's certification(s). IAF CertSearch database ⁴ Today it contains more than 3.2 million accredited certifications, uploaded by over 2,400 certification bodies and supported by 77 accreditation bodies, making it the single most comprehensive and authoritative source of accredited certification data worldwide.

You can verify the authenticity of a certificate and ensure that the organization has been audited and certified by an accredited certification body, that certification is valid, the certification body is accredited to issue certifications for that standard, and the accreditation body is an IAF member and MLA signatory to ISO/IEC 17021-1 all in one place.

Step 3: Verify the Accreditation Chain

IAF CertSearch allows users to verify certifications across their entire supply chain, monitor certificates held by these suppliers down to the individual site level, and receive alerts for any changes affecting certification status, such as suspension, withdrawal, or expiration.

Step 4: Contact the Certification Body Directly

If any discrepancy appears, contact the certification body using contact details from their official website—not from the certificate itself. Ask them to confirm the certificate number, holder name, and current status.

Red Flags to Watch For

• Certificate from a certification body not listed in IAF CertSearch
• Missing or incorrect accreditation body logo
• No IAF MLA mark on certificates claiming international recognition
• Expiry date has passed
• Scope statement is vague or does not mention medical devices
• Certificate number returns no results in verification databases

Does the ISO 13485 scope specifically cover the manufacturing of my pressotherapy machines?

Our engineers sometimes receive certificates where the scope says "design and manufacture of medical devices"—but nothing about pressotherapy or compression therapy equipment. This gap has caused us to reject otherwise promising suppliers. The scope defines exactly what the certification covers.

A valid ISO 13485 certificate for pressotherapy machines must explicitly state manufacturing activities related to compression therapy, lymphatic drainage devices, or intermittent pneumatic compression (IPC) equipment in its scope. A generic "medical device" scope without product-specific details may not provide adequate coverage for your regulatory requirements.

Understanding Certificate Scope

ISO 13485 is an international standard that specifies the requirements for a quality management system (QMS) specifically designed for the medical device industry ⁶. It is widely recognized and utilized by organizations involved in the design, production, installation, and servicing of medical devices.

However, ISO 13485 certifies the management system—not individual products. Some pressotherapy medical devices are designed and manufactured in compliance with ISO 13485, CE Medical IIa certified and FDA approved. This means you must verify both the QMS certification and any product-specific certifications separately.

What the Scope Should Include

Pressotherapy Device Classification

Pressotherapy, or Intermittent Pneumatic Compression (IPC) therapy, is a therapeutic technique that utilizes mechanical devices to assist with the circulation of blood and lymphatic fluid in the limbs. It is commonly employed for the prevention and treatment of vascular conditions, such as deep vein thrombosis (DVT), lymphedema, and venous ulcers.

These medical applications typically place pressotherapy devices in Class IIa under EU MDR regulations ⁷. The scope statement should reflect this classification level.

How to Match Scope to Your Product

1. Identify your pressotherapy machine's intended use (medical treatment vs. aesthetic only)
2. Determine the applicable device classification in your target market
3. Request the supplier's Technical Documentation or Device Master Record
4. Compare the scope statement to your specific product requirements
5. Ask the supplier for audit reports that mention pressotherapy manufacturing lines

Common Scope Problems

• Scope covers "wellness devices" but your market requires "medical devices"
• Certificate scope does not include "design"—only manufacturing
• Multiple facility certificates exist, but your production site is not listed
• Scope excludes software validation for computerized control units

How do I audit a factory's quality management system to ensure they actually follow ISO 13485 standards?

We have visited factories with beautiful certificates hanging in the lobby—then walked onto production floors with no traceability systems, no calibration records, and no documented procedures. Certificate verification is the first step. On-site auditing is where you find the truth.

Conduct a risk-based supplier audit by reviewing QMS documentation, inspecting production processes, verifying training records, examining CAPA procedures, and assessing supplier management controls per ISO 13485 Clause 7.4. Focus on design history files, process validation records, and complaint handling systems specific to your pressotherapy machines.

Types of ISO 13485 Audits

The different types of audits for medical devices under ISO 13485 include ISO 13485 Internal Audits, which are systematic, independent evaluations conducted by the organization according to Clause 8.2.4 to assess QMS conformity with ISO 13485:2016 and internal procedures. ISO 13485 Supplier Audits are risk-based evaluations of external suppliers performed to verify compliance with ISO 13485 Clause 7.4.1.

Second-party audits are conducted by parties interested in the organization (i.e., a prospect or a customer). For example, a manufacturer that outsources the sterilization process might perform an audit to qualify the sterilization provider. Second-party audits are often conducted to comply with ISO 13485 clause 7.4.1.

Supplier Audit Checklist for Pressotherapy Manufacturers

What to Look For On-Site

Key elements of ISO 13485 supplier audits include review of the supplier's QMS documentation, certifications, DHRs, process validation, change control, complaint handling, and Corrective and Preventive Action (CAPA) systems ⁸. Supplier audit results must be documented and used to update risk ratings, supplier scorecards, and the Approved Supplier List (ASL).

For pressotherapy machines specifically, verify these production elements:

• Air chamber assembly processes and leak testing
• Control unit calibration and software validation
• Pressure sensor accuracy verification
• Compression suit material inspection procedures
• Final product functional testing protocols

Remote vs. On-Site Audits

The audit typically requires 2 days for the onsite audit and reporting for a medium-sized factory with 50-300 employees. Remote audits can supplement but should not replace initial on-site verification for high-risk suppliers.

Risk-Based Audit Frequency

The purchasing controls section of your internal audit checklist helps you verify that the processes you have in place to check the products, materials, and services that your suppliers offer are effective and compliant. The purchasing controls section is important for all medical device companies but is especially important for those that outsource design and development or production.

Why is ISO 13485 certification critical for protecting my brand from product liability risks?

When our legal team reviews supplier agreements, they always ask: What happens if a pressotherapy machine injures someone? The answer depends heavily on whether we can prove due diligence in supplier qualification. ISO 13485 certification provides documented evidence of quality controls throughout the supply chain.

ISO 13485 certification protects your brand by establishing documented quality processes, traceability systems, and risk management procedures that demonstrate due diligence in supplier selection. If a product liability claim arises, certified suppliers can provide objective evidence of compliance with internationally recognized safety standards, reducing your exposure to negligence claims.

The Liability Connection

If a device causes injury to the user and is proven to be faulty, the patient could sue the manufacturer. But if you can show compliance with ISO 13485, you can prove that you met your requirements when manufacturing the product.

For brand owners importing pressotherapy machines, this liability extends up the supply chain. Your due diligence in verifying supplier certifications becomes critical evidence in legal proceedings.

How ISO 13485 Reduces Risk

ISO 13485 compliance reduces risks and improves reliability across design, production, and distribution stages. It builds customer and stakeholder trust through demonstrated commitment to quality. It minimizes potential recalls and compliance issues, protecting brand reputation.

The FDA QMSR Connection

Following February 2, 2026, manufacturers seeking to market devices in the US must comply with the FDA's new Quality Management System Regulations (QMSR) ⁹, which incorporate ISO 13485:2016 by reference.

The change will bring FDA medical device quality requirements in line with the international consensus. The harmonisation includes the adoption of terms such as 'top management', and the strengthening of requirements for traceability and risk management.

This regulatory alignment means ISO 13485 verification is no longer just good practice—it becomes essential for US market access.

Documentation That Protects You

Maintain records proving your due diligence:

1. Original supplier certificates with verification date stamps
2. IAF CertSearch printouts confirming certificate validity
3. Supplier audit reports with corrective action follow-up
4. Incoming inspection records for each shipment
5. Supplier quality agreements with defined responsibilities
6. Training records for staff conducting verifications

When Problems Occur

ISO 13485 minimizes potential recalls and compliance issues, protecting brand reputation. However, problems can still happen. If they do, your documented supplier qualification process demonstrates:

• You selected suppliers based on objective quality criteria
• You verified certificates through official channels
• You audited manufacturing processes
• You maintained ongoing surveillance
• You responded appropriately to quality signals

This paper trail separates a defensible quality system from negligent sourcing practices.

Conclusion

Verifying a supplier's ISO 13485 certification requires checking the certificate authenticity, confirming scope coverage, auditing actual practices, and understanding the liability protection it provides. Take time to validate certificates through IAF CertSearch, verify scope matches your pressotherapy products, and conduct risk-based supplier audits. Your brand reputation depends on this due diligence.

Footnotes

1. Defines what a quality management system is according to ISO standards. ↩︎

2. Provides official information on the ISO 13485:2016 standard for medical devices. ↩︎

3. Explains the meaning and use of an accreditation body’s mark. ↩︎

4. Direct link to the official global database for verifying accredited certifications. ↩︎

5. Provides the official list and information about IAF Multilateral Recognition Arrangement signatories. ↩︎

6. Provides an overview of the medical device industry and its regulation by the FDA. ↩︎

7. Direct access to the official European Union Medical Device Regulation text. ↩︎

8. Explains the requirements and importance of CAPA systems in the medical device industry. ↩︎

9. Provides official information on the FDA’s new Quality Management System Regulations. ↩︎