MDSAP Consultancy

Your MDSAP certification,
guided by lead auditors.

From initial assessment to certificate maintenance: we integrate ANVISA, FDA, Health Canada, TGA and PMDA requirements within a single QMS architecture. A risk-based methodology aligned with ISO 13485:2016, ISO 14971:2019 and ISO 19011:2026.

See what we deliver
  • 🇧🇷 ANVISA
  • 🇺🇸 FDA
  • 🇨🇦 Health Canada
  • 🇦🇺 TGA
  • 🇯🇵 PMDA
Why MDSAP?

One audit. Five authorities. Global access.

MDSAP allows a single QMS audit to be recognised by the five international regulatory authorities participating in the programme. It reduces the audit burden, operational cost and time to market, while raising QMS maturity to a truly global standard.

  • 1 auditinstead of 5 separate audits
  • 5 marketsBR · USA · CAN · AUS · JP
  • Unified QMSone multi-jurisdictional architecture
Service portfolio

What we deliver.

Six complementary areas covering the MDSAP lifecycle: from initial assessment to continuing training for internal and lead auditors.

Tailored consultancy

We act as a technical extension of Quality and Regulatory teams, with solutions tailored to QMS maturity, portfolio complexity and target markets.

  • QMS assessment and gap analysis
  • Multi-jurisdictional compliance strategy
  • Technical support for Technical Files, ISO 14971, validation and supplier qualification

QMS internal auditing

We apply the complete official MDSAP methodology, covering all seven processes, their tasks and linked items under ISO 19011:2026. Findings categorised by severity, with a structured action plan and CAPA.

  • Complete MDSAP Audit Approach assessment
  • Grade 1-5 nonconformities
  • Reporting in the format expected by AOs

Internal Auditor Training (in-house)

Training delivered at the client's premises, using real scenarios from its operational context: products, critical processes, suppliers and audit history.

  • Content tailored to the risk class
  • Role-play simulations with technical feedback
  • Interpretation of ISO 13485 + the 5 MDSAP jurisdictions

Lead Auditor Training (in-house)

Advanced training for professionals who will coordinate audit teams and take responsibility for governance of the QMS audit programme.

  • ISO 19011:2026 + MDSAP Companion Document
  • Audit team leadership and management
  • Case studies involving recurrent findings

Lead Auditor Training (public course)

An open-enrolment format, ideal for individuals or small teams seeking recognised MDSAP QMS auditing training. Immersion in a focused environment, with networking across companies.

  • Theory sessions, workshops and assessment
  • An industry-recognised certificate
  • Cost-effective for small teams
MDSAP Audit Approach

The programme's 7 audited processes.

MDSAP auditing is structured around seven interconnected processes. A thorough understanding of them distinguishes a QMS that passes from one with findings.

ID MDSAP Process Regulatory scope
P1 Management Definition of policies, quality objectives, strategic planning and management review.
P2 Device registration and listing Meeting registration requirements for each applicable regulatory authority.
P3 Measurement, analysis and improvement Process monitoring, internal audits, data analysis and corrective actions.
P4 Adverse events and recalls Post-market surveillance, complaint handling and regulatory field actions.
P5 Design and development Design control from concept to production transfer, with risk management.
P6 Production and service controls Manufacturing process validation, traceability, identification and product control.
P7 Purchasing Supplier qualification, control of critical inputs and performance evaluation.

Consultancy Recognised in 5 Countries

We manage MDSAP consultancy from assessment to certificate maintenance, integrating the five regulatory authorities' requirements within a single QMS architecture.

Brazilian Health Regulatory Agency. We structure the QMS to meet RDC 665/2022 (GMP) and RDC 751/2022 (Classification and Registration), with traceable documentation architecture and change governance.

Principal RegulationRDC 665/2022
Quality SystemISO 13485
ClassificationClasses I, II, III and IV
RegistrationRDC 751/2022

Food and Drug Administration. We implement QMSR (aligned with ISO 13485:2016) with Design Controls, Document Control, CAPA and Production/Process Controls. A 510(k), PMA or De Novo submission strategy according to risk class.

Principal RegulationQMSR (21 CFR 820)
Quality SystemISO 13485
ClassificationClasses I, II and III
Approval510(k) / PMA / De Novo

Health Canada through CMDR (SOR/98-282). We manage obtaining and maintaining the Medical Device Licence for Classes II, III and IV, with significant change management and annual reports to Health Canada.

Principal RegulationCMDR (SOR/98-282)
Quality SystemISO 13485
ClassificationClasses I, II, III and IV
ApprovalMedical Device Licence

MHLW and PMDA. We structure the QMS under MHLW Ordinance No. 169 and prepare technical documentation for Shonin approval (high risk) or Todokede (low risk), with a strategy adapted to each device class.

Principal RegulationMHLW Ordinance 169
Quality SystemISO 13485
ClassificationClasses I, II, III and IV
ApprovalShonin / Todokede

Therapeutic Goods Administration through the TG Act 1989. We manage conformity assessment and ARTG (Australian Register of Therapeutic Goods) inclusion, with integration into the PRAC post-market surveillance process.

Principal RegulationTG Act 1989
Quality SystemISO 13485
ClassificationClasses I, IIa, IIb, III and AIMD
ApprovalARTG Inclusion
Methodology

How we work.

Technical rigour, a structured approach and a pragmatic perspective. Short delivery cycles, clear governance and auditable milestones.

Risk-based approach

We apply ISO 13485:2016 and ISO 14971:2019 risk-based thinking to every decision: prioritising nonconformities, audit depth and remediation effort. Risk runs through product, process and system.

Regulation integrated into operations

We do not treat requirements as an additional layer of paperwork. We redesign workflows, controls and evidence so regulatory compliance follows naturally from correct operations. This reduces compliance costs and removes weak points.

Focus on auditable results

We measure success through concrete outcomes: fewer nonconformities, successful certification and recertification audits, certificate maintenance over multi-year cycles and readiness for unannounced audits.

For our clients

What changes in your operation.

Reduced regulatory risk

Early assessment and structured gap remediation mitigate major nonconformities, field actions, sales suspensions and loss of certificates.

International compliance

A truly multi-jurisdictional QMS, able to respond with equal robustness to ANVISA, FDA, Health Canada, TGA and PMDA requirements.

Audit preparation

A model calibrated through practical experience in real audits. It increases the likelihood of successful certification and recertification, while reducing the number and severity of findings.

Optimised internal processes

The MDSAP journey drives operational improvement: revealing inefficiencies, eliminating documentary rework, harmonising workflows and strengthening quality culture.

FAQ

Frequently Asked Questions

Questions we receive before starting MDSAP consultancy.

How long does a complete MDSAP implementation take?

It depends on the maturity of the existing QMS. On average, 6 to 12 months from initial assessment to the certification audit by an Auditing Organisation, including documentation alignment, practical implementation, training and internal validation audits.

Do you support all risk classes and device types?

Yes. We provide consultancy for Class I to IV devices, including implantables, software as a medical device (SaMD), IVDs and combination products. Implementation depth is adjusted to product risk and market strategy.

Can consultancy be modular or only a complete project?

It can be modular. We provide specific support as needed (gap analysis, Technical Files, ISO 14971, supplier qualification, mock audits), or manage the full project from assessment to certification. The scope depends on your current stage and internal capacity.

Do you work on site or only remotely?

Both. For stages requiring physical presence (interviews, production walkthroughs, internal audits and mock audits), we work on site. Other areas - documentation design, critical review and theory training - work remotely without loss of quality.

Which AO's certification audits do you prepare clients for?

Any Auditing Organisation recognised by the MDSAP programme (BSI, DEKRA, DQS, Intertek, NSF-ISR, SGS, TÜV Rheinland, TÜV SÜD, UL and others). Our implementation methodology is AO-agnostic and based on the official MDSAP Audit Approach document.

Why now?

Five regulatory markets.
One MDSAP certification.

Companies that treat ANVISA, FDA, Health Canada, TGA and PMDA as separate projects spend 5 times more and face 5 audit cycles. MDSAP reduces this to a single architecture - but it only works if the QMS is designed for it from the outset.

1 → 5 Audit, 5 markets
P1 → P7 7 audited processes
ISO 13485 programme foundation

Or leave your details and we will get back to you:

We have received your details.

Our team will contact you shortly. Thank you!

Without structured MDSAP With HSC consultancy
5 separate audits, 5 time cycles 1 audit recognised by all 5 authorities
Documentation fragmented by jurisdiction A unified, traceable, multi-jurisdictional QMS
Combined costs of each certification Reduced operational cost and shorter time to market
Risk of differing findings between AOs A QMS calibrated to the official MDSAP methodology