No single certification is universally required for every aluminum die cast medical-device part. Requirements depend on the finished device, markets, legal manufacturer, supplier role, component risk, patient/user contact, outsourced processes, and contract. ISO 13485 certification may be required for a supplier whose quality-management-system scope supports medical devices, but it certifies the organization's defined QMS scope, not the aluminum part and not the finished device. Material certificates, process qualifications, inspection reports, traceability, change controls, and device-specific validation are separate evidence.
Organization evidence covers the certified QMS scope, site, activities, issue/expiry status, exclusions, and accreditation/certification body details. Component evidence covers controlled drawing/specification, material, dimensions, cleanliness, finish, inspection, deviations, and traceability. Process evidence covers validated or qualified casting, machining, chemical treatment, coating, cleaning, joining, and test methods as required. Device evidence covers risk management, biological evaluation, electrical/EMI/thermal/ingress performance, reprocessing, usability, and regulatory authorization.
Do not substitute one for another. An ISO 13485 certificate does not prove a coating survives disinfectants. A chemical analysis does not prove the assembled housing is biologically acceptable. A cytotoxicity report on a generic coupon does not authorize a changed pigment, cure, cleaning residue, or worn final device.
The device manufacturer should classify and control the supplier according to how the casting can affect safety, performance, reprocessing, and regulatory evidence. Review QMS scope, site, tooling ownership, sub-tiers, competence, equipment, process controls, validation, contamination, nonconformance, complaints, change notification, record retention, audit rights, business continuity, and regulatory cooperation.
ISO 9001 can support general process controls but should not be described as medical-device authorization. ISO 13485 may be a customer or regulatory-system expectation according to role and market; verify the current certificate rather than assuming. FDA establishment obligations or other market registrations depend on legal role and current requirements. A casting supplier should not claim blanket FDA approval for a part.
Verify certificates at onboarding and on a defined cadence. Match legal entity, address, site, activities, certificate number, dates, scope, exclusions, and issuing body to the quoted process. Confirm whether machining, finishing, cleaning, assembly, warehousing, or outsourced operations fall inside or outside scope. Record expiration, suspension, site transfer, merger, or scope change and decide whether supply can continue.
Evidence | What it supports | Buyer check |
|---|---|---|
QMS certificate | Defined organization/site/activity controls | Scope, status, body and relevance to supplied work |
Material and substance records | Specified chemistry/source and applicable restrictions | Exact specification, lot link, methods and exemptions |
Process qualification/validation | Controlled output of casting or secondary process | Worst cases, acceptance, approval and revalidation triggers |
Inspection/test report | Conformity of stated characteristics under stated method | Revision, lot/cavity, calibration, sensitivity and results |
Device regulatory evidence | Finished-device safety/performance/market authorization | Owned and integrated by the legal manufacturer |
Specify exact alloy standard/revision, chemistry, source and traceability. Substance requirements such as restricted chemicals depend on markets, device, exemptions, parts, and materials; they are not a universal "RoHS/REACH certificate" detached from the bill of materials. Define declaration format, test or supplier-data basis, revision, and change notification.
For surface processes, control complete formulation, supplier, pretreatment, layer stack, cure, colorants, masks, cleaning, residues, rework, and sub-tier. Biological or chemical evidence must match the final processed condition and contact scenario. ISO 10993 is a biological-evaluation framework, not an approval logo applied to anodizing, paint, or powder.
Decide which processes need validation because routine output cannot be fully verified without destructive, delayed, or incomplete tests. Assign protocol approval, equipment and operator qualification, worst cases, acceptance, sampling, monitoring, deviations, report, and revalidation. The legal manufacturer owns the supplier-control decision; the supplier owns faithful execution and records for the agreed process.
Agree which records accompany each lot and which remain available: material, melt/lot, cavity, tool repair, process state, machining/cleaning/finish batch, rework, inspection, deviations, packaging, and release. Traceability depth should support containment and device risk. A serial number is not automatically necessary, while an unlinked certificate offers little value.
Require prior approval for changes that can affect the device evidence: material/source, melt practice, die insert or repair, process window, machining coolant/program/fixture, abrasive, cleaner, treatment chemistry, coating formulation/pigment/cure, site, sub-tier, test method, label, or packaging. Define notification timing, comparison data, samples, revalidation, and disposition of mixed or obsolete stock.
The RFQ should state device/casting role, markets, contact, risk-linked characteristics, reprocessing, material/substance/finish, quality agreement, records, audits, traceability, deviations, complaints, and changes. Ask the supplier to return current certificate scopes, sites, sub-tiers, applicable registrations by role, process qualifications, document examples, retention, and open gaps.
Inspection capability should be evaluated against the actual drawing and method, not inferred from an equipment list. The correct certification package is the smallest complete set that supports controlled supply and the finished device's regulatory case; adding unrelated logos does not reduce risk.