ISO 13485 Clause 7.5.6 Validation of Processes Explained (2026 Guide for Medical Device Companies)
ISO 13485 Clause 7.5.6 requires medical device manufacturers to validate any process where the output cannot be fully verified by inspection or testing. This includes processes like sterilisation, software, and special manufacturing steps. Validation must demonstrate that the process consistently produces results meeting predetermined specifications.
If you cannot verify it, you must validate it.
What Clause 7.5.6 Actually Means
Clause 7.5.6 applies to processes where defects may not be detectable after the process is complete.
Typical examples include:
- Sterilisation processes
- Welding or bonding
- Software-controlled processes
- Cleanroom manufacturing steps
In these cases, testing the final product is not enough. You must prove the process itself is reliable.
When Process Validation Is Required
You must validate a process when:
- Output cannot be fully verified later
- Testing is destructive or impractical
- Process variability directly affects product safety or performance
Example:
You cannot test every sterile product without destroying it. Therefore, the sterilisation process must be validated.
Key Requirements of Clause 7.5.6
1. Defined Validation Criteria
You must define:
- Acceptance criteria
- Process parameters
- Product specifications
2. Qualification of Equipment and Personnel
- Equipment must be qualified (IQ, OQ, PQ)
- Operators must be trained and competent
3. Use of Approved Methods and Procedures
- Validation protocols must be documented
- Methods must be scientifically justified
4. Records and Evidence
- Validation results must be recorded
- Reports must demonstrate compliance
5. Revalidation
You must revalidate when:
- Processes change
- Equipment changes
- Materials change
- Issues or deviations occur
Real Audit Findings in Process Validation
Finding 1: No Justification for “No Validation Required”
Issue: Process assumed to be verifiable without evidence.
Fix:
- Perform documented assessment of verification vs validation
- Justify decision with technical rationale
Finding 2: Validation Protocols Are Weak
Issue: Protocols lack acceptance criteria or defined parameters.
Fix:
- Define measurable acceptance criteria
- Document all critical process parameters
Finding 3: No Revalidation After Change
Issue: Process changed but validation not repeated.
Fix:
- Link change control to validation requirements
- Trigger revalidation automatically
Finding 4: Poor Traceability
Issue: Validation not linked to product or risk.
Fix:
- Link validation to risk management and design controls
- Ensure traceability from process to product requirements
How Process Validation Connects to Risk Management
Process validation is not standalone. It directly supports risk control.
If a process affects product safety, it must be:
- Identified in the risk management file
- Controlled through validated processes
Related:
How to Build a Strong Process Validation System
Step 1: Identify All Special Processes
- Map manufacturing processes
- Identify where verification is not sufficient
Step 2: Define Validation Strategy
- IQ (Installation Qualification)
- OQ (Operational Qualification)
- PQ (Performance Qualification)
Step 3: Write Strong Validation Protocols
- Define scope, parameters, and acceptance criteria
- Include worst-case conditions
Step 4: Execute and Document
- Collect objective evidence
- Ensure repeatability
Step 5: Maintain and Revalidate
- Link validation to change control
- Monitor ongoing performance
Common Mistakes to Avoid
- Treating validation as a one-time activity
- Using generic protocols without process-specific detail
- Not linking validation to risk management
- Failing to define acceptance criteria clearly
These are some of the most common audit triggers.
Process Validation vs Verification
Verification: Inspecting the output
Validation: Proving the process works
If you rely only on verification where validation is required, you are noncompliant.
When to Get Support
You should strengthen your process validation approach if:
- You have audit findings related to manufacturing or sterilisation
- Your validation documentation is weak or inconsistent
- You are scaling production or introducing new processes
Next steps:
Final Thought
Clause 7.5.6 is about control where inspection is not enough.
If your process cannot be fully verified, your system must prove it works—consistently, repeatedly, and with evidence.
This is where many medical device companies fail audits. The ones that pass treat validation as a core part of product safety, not just documentation.
