Typical startup journey:

Build prototype → attract investors → run pilots → prepare certification

And then…

“Now let’s build the QMS.”

This is where things start getting difficult.

Regulators are not evaluating how exciting your product is.

They are evaluating how decisions were made while building it.

Auditors tend to ask very basic questions:

• Where did this requirement come from?

• Who approved this design change?

• Why was this risk considered acceptable?

• How do you know this test result was reviewed?

If the answers sound like:

• “We discussed it in a meeting”

• “It’s somewhere in Slack”

• “The engineer remembers”

…then the audit is already going in the wrong direction.

Medical devices are not approved based on performance alone.

They are approved based on controlled development.

You cannot recreate development history later.

You can only capture it while it happens.

This is where many startups struggle.

They document the product, but not the decisions behind the product.

They can show what the device does.

But they cannot show why it was designed that way, who made the decision, and whether the decision was properly reviewed and approved.

Regulators are essentially reviewing decision traceability.

If you are building a medical device today, start capturing decisions from day one.

Not during certification month.

Not when you hire a QA manager.

Not when someone says “we should probably think about regulatory.”

A simple rule that works surprisingly well:

Whenever a key development decision is made, record:

• What was decided

• Who made the decision

• Why the decision was made

• Who approved it

That’s it.

A spreadsheet works.
A document works.

A simple tracking system works.

The important thing is that the history exists.

At SmartEye, we often see startups trying to reconstruct development history just weeks before an audit.

It rarely works.

A good QMS doesn't just store documents.

It captures how decisions were made during development.

And that is exactly what auditors want to see.

If you're building a medical device startup, we created a simple startup audit readiness checklist showing what should exist before your first audit.

Happy to share it.

#MedicalDevices #ISO13485 #SaMD #MedTechStartups #QualityManagement