12/12

CDSCO MDR 2017

Schedule 5 QMS requirements — full coverage

28/28

ISO 13485:2016

Key clauses Sections 4–8 — full coverage

17/17

FDA 21 CFR Part 11

Applicable sections — full coverage

11/12

EU MDR 2017/745

Annex IX requirements — EUDAMED API roadmap Q3 2026

CDSCO MDR 2017

Central Drugs Standard Control Organisation — Medical Devices Rules 2017

India's primary medical device regulatory framework. Schedule 5 defines the Quality Management System requirements for all licensed manufacturers. All 12 Schedule 5 requirements are covered in MDCN Studio.

Clause Requirement MDCN Studio Coverage Module
Schedule 5, Para 1 Quality Management System — documented QMS covering all manufacturing activities Document Control with QMS document hierarchy; SOP templates pre-configured for Schedule 5 Documents
Schedule 5, Para 2 Document control — version control, approval, distribution of quality documents Version-controlled document lifecycle: Draft → Review → Approved → Superseded; role-based approval gates Documents
Schedule 5, Para 3 Records control — identification, storage, protection, retention, disposal Immutable record storage with S3 Object Lock WORM; configurable retention periods; role-based access audit Documents
Schedule 5, Para 4 Management responsibility — quality policy, objectives, management review QMS Tracker for management review agenda, minutes, action items; quality objectives tracking QMS Tracker
Schedule 5, Para 5 Resource management — human resources, training, competency records Training module: role-based training assignment, completion tracking, competency assessments Training
Schedule 5, Para 6 Product realisation — planning, design, purchasing, production controls DHF, Travellers, Shipments, Supplier Management with approved vendor controls DHF · Travellers · Suppliers
Schedule 5, Para 7 Purchasing controls — supplier qualification, incoming inspection Supplier qualification workflow; approved vendor list maintenance; supplier audit scheduling Suppliers
Schedule 5, Para 8 Non-conformance control — identification, segregation, disposition NCR module: identification, root cause, disposition, CAPA linkage CAPA & NCR
Schedule 5, Para 9 Corrective and preventive action — root cause, action plan, effectiveness verification CAPA module: structured 8D workflow, action plan with owner/due date, effectiveness review gate CAPA & NCR
Schedule 5, Para 10 Internal audit — planned audits, findings, corrective actions Audit Management: annual audit schedule, checklist-based findings, CAPA linkage Audits
Schedule 5, Para 11 Complaint handling and post-market vigilance CRM module: customer complaint logging, investigation, reporting, trend analysis CRM
Form 34B Manufacturing licence inspection — document readiness for CDSCO inspector Audit-ready dashboard: one-click document package assembly for Form 34B inspection categories Documents · QMS Tracker
ISO 13485:2016

Medical Devices — Quality Management Systems (ISO 13485:2016)

The international standard for medical device QMS. Mandatory for CE marking and required by most export markets. MDCN Studio covers all 28 key clauses in Sections 4–8.

Clause Requirement MDCN Studio Coverage Module
§4.1General QMS requirements — processes, sequence, interactionsQMS process map; inter-module workflow linkages (audit finding → CAPA auto-creation)QMS Tracker
§4.2.1General documentation requirements — QMS hierarchyDocument hierarchy: QMS Manual → Procedures → Work Instructions → RecordsDocuments
§4.2.3Control of documents — approval, review, update, distributionVersion control with mandatory approval workflow; supersession control; controlled distribution listDocuments
§4.2.4Control of records — legibility, identification, storage, retrievalWORM-locked record storage; indexed retrieval; role-based access; retention scheduleDocuments
§5.1Management commitment — quality policy, management reviewQMS Tracker: quality policy management; management review with attendance and action trackingQMS Tracker
§5.6Management review — inputs, outputs, actionsStructured management review template: required inputs (audit results, CAPA status, complaints) and outputsQMS Tracker
§6.2Human resources — competence, training, awarenessTraining module: competency requirements per role, training plan, completion recordsTraining
§6.3Infrastructure — maintenance recordsMaintenance log within Travellers module; equipment calibration recordsTravellers
§7.1Planning of product realisationProject module: device development project planning with QMS document linkagesProjects
§7.2Customer-related processes — requirement review, communicationCRM: customer requirements capture, review records, complaint managementCRM
§7.3Design and development — planning, inputs, outputs, review, V&VDHF: full design control lifecycle from input to validation; design review gate managementDHF
§7.3.2Design and development planningDHF project plan with stage gates, responsible parties, and document deliverable requirementsDHF
§7.3.3Design inputsDesign input records with traceability to regulatory requirements and user needsDHF
§7.3.6Design verificationVerification protocol and report management; test result records with approver e-signatureDHF
§7.3.7Design validationClinical/usability validation protocol and report; human factors recordsDHF
§7.4Purchasing — supplier evaluation, selection, monitoringSupplier qualification: evaluation criteria, scoring, approval, monitoring scheduleSuppliers
§7.5.1Production and service provision — controlled conditionsTraveller module: step-by-step production instruction sign-off; in-process inspection recordsTravellers
§7.5.3Identification and traceabilityBatch/lot tracking in Travellers and Shipments; device identification recordsTravellers · Shipments
§7.5.8Handling, storage, distribution recordsShipments: dispatch records, storage condition records, distribution logShipments
§7.6Control of monitoring and measuring equipmentCalibration records in Travellers; calibration schedule; out-of-calibration CAPA triggerTravellers · CAPA
§8.2.1Feedback — customer complaint and post-market dataCRM complaint tracking; trend analysis; MDR report draftingCRM
§8.2.2Internal auditAudit Management: annual schedule, checklist-based audits, findings, closureAudits
§8.3Control of non-conforming productNCR module: identification, segregation flag, disposition decision, CAPA linkageCAPA & NCR
§8.4Analysis of data — trends, supplier performance, product conformityQMS Tracker dashboard: CAPA trend charts, audit finding trends, supplier performance scoresQMS Tracker
§8.5Improvement — CAPA, preventive actionCAPA module: structured root cause analysis, action planning, effectiveness verificationCAPA & NCR
FDA 21 CFR Part 11

FDA — Electronic Records; Electronic Signatures (21 CFR Part 11)

The FDA's regulation on electronic records and signatures. Required for any manufacturer selling into the US market or seeking FDA clearance. MDCN Studio covers all 17 applicable sections.

Section Requirement MDCN Studio Coverage Module
§11.10(a)Validation of closed systemsSystem-level validation documentation (IQ/OQ/PQ) maintained by MDCycloNova; available on requestPlatform
§11.10(b)Ability to generate accurate copies of recordsExport function for all records in PDF; raw data export (CSV/JSON)All Modules
§11.10(c)Protection of records — accuracy and readiness for inspectionS3 Object Lock WORM storage prevents modification or deletion; immutable record flag on all compliance recordsDocuments
§11.10(d)Limiting access to authorised individualsRole-based access control (RBAC); module-level permission gates; session timeout; MFA via CognitoUsers · Teams
§11.10(e)Audit trail — secure, computer-generated, time-stampedAutomatic audit trail for every create/update/delete/approve action; tamper-evident; cannot be disabledAll Modules
§11.10(f)Operational system checks — enforcing event sequencingWorkflow enforcement: documents cannot be approved without review; CAPA cannot close without effectiveness checkDocuments · CAPA
§11.10(g)Authority checks — only authorised individuals can signRole-based signature authority matrix; configured per document type and record classDocuments · Teams
§11.10(h)Device checks — valid source of data entrySession-bound authentication; server-side input validation; all inputs logged with session IDPlatform
§11.10(i)Personnel training requirements for system useSystem training records; role-based training assignment; mandatory training gate before system accessTraining
§11.10(j)Audit trail availability for FDA inspectionAudit trail export function; FDA inspection mode (read-only view of full record history)All Modules
§11.10(k)Operational controls — documentation of record changesEvery field change logged with: prior value, new value, user ID, timestamp, reason for changeAudit Trail
§11.50Signature manifestations — name, date/time, meaningE-signature modal displays: signer printed name, date and time of signature, meaning/purposeDocuments · CAPA
§11.70Signature/record linking — signatures linked to recordsCryptographic binding of e-signature to specific record version; re-signing required if record modified post-signatureAll Signed Records
§11.100Electronic signatures unique to one individualCognito-managed unique user IDs; no shared accounts enforced; account sharing detectionUsers
§11.100(b)Electronic signatures not reused or reassignedUser ID retirement on offboarding; retired IDs not reassigned; offboarding audit trailUsers · Teams
§11.200(a)Non-biometric e-signatures — two distinct ID componentsUsername + password as first component; session-specific signature PIN or re-authentication as secondAuth · E-Signature
§11.200(a)(2)Continued sessions — one component for subsequent signingsSession-bound signature: first signing requires re-authentication; subsequent within session use session tokenAuth · E-Signature
EU MDR 2017/745

European Union Medical Device Regulation (EU MDR 2017/745)

The EU's medical device regulatory framework applicable since May 2021. Annex IX defines quality system requirements for Class IIa, IIb, and III devices. MDCN Studio covers 11 of 12 Annex IX requirements — EUDAMED direct submission API is roadmap Q3 2026.

Clause Requirement MDCN Studio Coverage Module
Annex IX, 2.1Quality management system — organisational structure, responsibilitiesQMS Tracker: organisational quality function documentation; management responsibility assignmentQMS Tracker · Teams
Annex IX, 2.2Resource management — qualified personnel, trainingTraining module: role qualification records, competency matrix, training historyTraining
Annex IX, 2.3Document and record controlFull document control with version history, approval audit trail, WORM record protectionDocuments
Annex IX, 2.4Clinical evaluation and post-market clinical follow-upDHF: clinical evaluation document management; post-market surveillance data in CRMDHF · CRM
Annex IX, 2.5Vigilance and post-market surveillanceCRM complaint module with EU MDR vigilance report templates; trend analysisCRM · CAPA
Annex IX, 2.6Risk management throughout lifecycleRisk Management: ISO 14971-aligned, linked to DHF and post-market dataRisks
Annex IX, 2.7Design and development controlsDesign History File (DHF): full §7.3 design control lifecycleDHF
Annex IX, 2.8Production and service controlsTravellers: production record management; in-process and final inspection recordsTravellers
Annex IX, 2.9Purchasing and supplier controlsSupplier management: qualification, monitoring, incoming inspectionSuppliers
Annex IX, 2.10Identification and traceability — UDI requirementsShipments: UDI/batch tracking fields; device identification records. Note: EUDAMED direct API is roadmap Q3 2026Shipments
Annex IX, 2.11Corrective and preventive actionCAPA module: structured CAPA workflow with root cause, action plan, effectiveness verificationCAPA & NCR
Annex IX, 2.12Improvement — measurement, analysis, improvement processesQMS Tracker: KPI dashboard, trend analysis, management review inputsQMS Tracker

Module × Regulation Coverage Matrix

Which MDCN Studio modules satisfy which regulatory frameworks.

Module CDSCO MDR 2017 ISO 13485:2016 21 CFR Part 11 EU MDR 2017/745
DHF
Documents & SOPs
CAPA & NCR
Audits
Risk Management
Suppliers
Training
Travellers / BHR
Shipments
QMS Tracker
CRM
User Management
AI Assistant

Download Compliance Brief

Get a detailed document covering MDCN Studio's regulatory coverage, validation approach, and e-signature methodology — ready to share with your RA Head or auditor.

Request Compliance Brief