Biocompatibility and Materials
ISO 10993-1: Biological Evaluation Within a Risk Management Process
ISO 10993-1 is the part of the series that frames the whole biological evaluation. It sets out how to categorize a device by the nature and duration of body contact, identify the biological endpoints that matter, use existing data, and decide what testing, if any, is still needed.
At a Glance
- Standard
- ISO 10993-1
- Subject
- Biological Evaluation Within a Risk Management Process
- Group
- Biocompatibility and Materials
- Industries
- 7 industry guides reference it
A plain-language summary of scope, not the standard itself. Buy the current edition from the publisher and check which edition your auditor or market expects.
What It Covers
Devices are categorized by the nature of body contact and the tissue contacted, such as skin, mucosa, blood or bone, and by duration of contact, grouped as limited, prolonged and long-term. The current edition, ISO 10993-1:2025, reworked that model: it dropped the separate externally communicating category and counts repeated use in contact days rather than cumulative duration. Many existing evaluations were written to the 2018 edition, so check which edition your reviewer or notified body expects. The categorization points to the endpoints the evaluation has to address.
The evaluation sits inside risk management. It starts from information on materials, manufacturing, intended use and any clinical history, adds chemical characterization where useful, and identifies gaps. Testing fills those gaps rather than running by default, and the reasoning for not testing an endpoint is documented. The outcome is a biological evaluation plan and a report that brings the evidence together and reaches a conclusion on biological safety.
The standard also expects re-evaluation when something changes: material source or formulation, processing, packaging, sterilization or intended use, or post-market data suggesting an adverse biological response. That makes it as much a change control and supplier control topic as a testing topic.
Who It Applies To
- Any device or component with direct or indirect body contact
- Teams planning biocompatibility work for a new device or indication
- Firms assessing the impact of a material, supplier or process change
- Companies with legacy devices whose biological evaluation predates current practice
What Auditors Check
Contact Categorization
A documented, justified categorization of the nature and duration of contact, including how repeated use is counted under the edition you follow.
Endpoint Rationale
Every relevant endpoint addressed by existing data, testing or a written rationale, never silently skipped.
Chemical Characterization and Toxicology
Where used, an analysis tied to the actual production materials and processing, assessed by a qualified toxicologist.
Plan Before Testing
A biological evaluation plan that predates the testing, showing tests were chosen deliberately rather than collected.
Conclusion and Approval
A biological evaluation report with a clear conclusion, approved by qualified reviewers and referenced from the design history and risk management file.
Change Triggers
Defined triggers in change control for re-evaluating biological safety, with records of each assessment.
Related Services
Submission Readiness (510(k), De Novo, PMA, Pre-Sub, 513(g))
The design, risk and V&V evidence behind a 510(k), De Novo or PMA, organized and gap-checked.
AI-Assisted QMS Gap Assessment
An AI-assisted first pass over the QMS documents you already have, with every result reviewed by an advisor.
CAPA System Remediation
Fixing a CAPA system auditors keep citing: the procedure, the records, root cause, effectiveness and backlog.
Industry Guides That Reference ISO 10993-1
Questions
Do we need to run every biocompatibility test for our device?
Not necessarily. ISO 10993-1 asks you to identify the endpoints relevant to your device's contact category and address each one, using existing data, chemical characterization, testing or a documented rationale. What's needed depends on your device, its materials and its contact, and reviewers expect the reasoning in writing.
We changed a resin supplier. Do we need new biocompatibility testing?
You need an assessment, and the answer depends on what changed. If composition, additives or processing may differ, a biological safety assessment, often supported by chemical characterization, determines whether the existing data still applies. Record the assessment and its conclusion in change control.
What's the difference between a biological evaluation plan and a test plan?
A test plan lists tests to run. A biological evaluation plan explains the device, its contact category, the endpoints, what existing information covers them and where testing or analysis is still needed. Auditors and reviewers look for that reasoning, not just a stack of test reports.
Is a biological evaluation ever finished?
It's maintained rather than closed. Changes to materials, processes, sterilization or intended use, and post-market signals of adverse biological responses, can all trigger re-evaluation over the device's life.
ISO 10993-1
Check Your Quality System Against ISO 10993-1
An AI-assisted first pass maps your existing documents against the requirements in scope, and an advisor reviews every result. Please don't send confidential documents yet: secure upload is set up after onboarding.
