Design Control

Design control is a systematic, structured approach to managing the design and development process for medical devices, required in the US by FDA's Quality Management System Regulation (21 CFR 820) and set out in the international quality management standard ISO 13485, to ensure that a finished device meets user needs and its intended uses safely and effectively. It encompasses the full design lifecycle, from initial planning and input requirements through verification, validation, and transfer to manufacturing. Design controls provide documented evidence that the device was developed in a controlled and traceable manner. Since February 2, 2026, 21 CFR 820 has incorporated ISO 13485:2016 by reference, so the US design control requirements, formerly in 21 CFR 820.30, now sit in the standard's clause 7.3, which calls the process design and development.

Medical devices directly affect patient safety, and failures in the design process can result in devices that do not perform as intended, cause injury, or fail to meet regulatory requirements. Design controls provide a framework that reduces the risk of these failures by requiring documented planning, risk analysis, and verification at each stage. Regulators check that design controls were followed: FDA examines design records during facility inspections, including preapproval inspections for premarket approval (PMA) applications, and the verification and validation results supply much of the testing evidence in premarket submissions. Without adequate design controls, a manufacturer cannot demonstrate that their device is safe and effective, and regulatory submissions may be rejected. Design controls also reduce development costs by catching design problems early, before they propagate into manufacturing and post market surveillance issues.

The design control process follows a structured series of activities, often depicted as the "waterfall" or "V" model of development. Design planning establishes the development activities, responsibilities, timelines, and review points. Design input captures the user needs, intended uses, performance requirements, safety requirements, and applicable regulatory standards that the device must meet. These inputs are documented and reviewed for completeness and lack of ambiguity.

Design output consists of the specifications, drawings, software code, manufacturing procedures, and other documentation that define the device and its production. Design output must be expressed in terms that can be verified against design input. Design review is a formal, documented evaluation of design results at defined stages, conducted by a multidisciplinary team. ISO 13485 requires representatives of the functions concerned with the stage being reviewed and other specialist personnel; FDA's former Quality System regulation also required someone without direct responsibility for that stage, and FDA still describes such independent review as an important contribution.

Design verification confirms that design outputs meet design inputs through testing, inspection, analysis, or demonstration. For example, verifying that a surgical instrument meets its specified material strength requirement. Design validation confirms that the finished device meets user needs and intended uses under actual or simulated use conditions. Validation is performed on representative product, such as initial production units or their equivalents, and typically includes testing with representative users in realistic environments, such as usability testing with clinicians performing representative tasks, along with clinical or performance evaluation that meets the applicable regulatory requirements.

Design transfer encompasses the activities that move the validated design into production, ensuring that the manufacturing process can reliably produce devices that meet the design specifications. Design changes made at any stage are documented and evaluated for their impact on previously completed design activities.

Design controls are mandatory for manufacturers of devices under the EU Medical Device Regulation (MDR) and under other jurisdictions that reference ISO 13485, and in the US for Class II and Class III devices and certain Class I devices, such as those automated with computer software (21 CFR 820.10(c)); most other Class I devices are exempt. They apply throughout the design and development lifecycle, from concept through production transfer, and must be maintained for any design changes made after the device is on the market. Design controls are not limited to hardware devices; they apply equally to software as a medical device (SaMD), combination products, and in vitro diagnostic devices. They are not applicable to basic research that is not yet directed at developing a specific device.

A common error is treating design controls as a documentation exercise performed after the fact rather than as a living process integrated into development activities. Incomplete or vague design inputs lead to design outputs that cannot be adequately verified, creating gaps that are discovered only during validation or post market use. Confusing verification with validation is another frequent mistake; verification checks whether the device was built correctly (meets specifications), while validation checks whether the correct device was built (meets user needs). Failing to include human factors engineering and usability testing in the validation process can result in devices that meet technical specifications but are unusable or error prone in clinical settings. Finally, inadequate design review, either through infrequent reviews or reviews conducted without appropriate multidisciplinary expertise, misses design problems that become costly to fix later.

A medical device company developing a connected insulin pump establishes design controls at project initiation. Design inputs include a maximum delivery error of plus or minus 5%, an alarm response time of less than 2 seconds, cybersecurity requirements per FDA premarket guidance, and usability requirements for patients with limited dexterity. During design verification, bench testing confirms that 500 pumps meet the delivery accuracy specification. Design validation includes a simulated use study with 30 patients, including elderly users and users with neuropathy, in which 29 of the 30 participants (97%) completed every critical task without a use error, and the one use error was analyzed for its root cause and residual risk. A design review committee comprising engineers, clinicians, human factors specialists, and a regulatory affairs professional reviews the validation results and approves transfer to manufacturing.