~/paradise $ cd quality → quality systems & regulatory
SHEET2 OF 2
REV2026.08
AUDITSOPEN
RFQ →

Quality · compliance · regulatory

Quality is part of
the design.

An audit finding is a design decision you made eighteen months ago and forgot to write down. I build the system that remembers — document control, risk files, validation records — so the audit is a formality and the product is genuinely safe.

~/quality — posture.json
frameworks9001 · 13485 · 820
riskISO 14971
safetyIEC 60601-1
softwareIEC 62304
submissions510(k) · DoC
audits_ledinternal + supplier
systems built6
audits30+
findingsclosed

01 — Standards matrix

1 lead · 2 advise · 3 network
FrameworkGap auditDocumentationImplementationAudit support
ISO 9001:2015Quality management systemsleadleadleadlead
ISO 13485:2016Medical devices — QMSleadleadleadlead
21 CFR 820FDA Quality System Regulationleadleadadviselead
ISO 14971:2019Risk managementleadleadleadlead
IEC 60601-1Medical electrical safetyleadleadadvisenetwork
IEC 62304Medical device software lifecycleleadleadleadadvise
OSHA 1910GHS / SDS authoringDOT hazmatUL / CSA liaisonITAR-aware

02 — The machinery

eight things an auditor will ask for
01

Document control

Numbering, revision history, approval routing. One source of truth, not six folders named final.

02

CAPA

Root cause that finds the cause, corrective action that closes, and evidence it stayed closed.

03

NCR & deviations

Disposition, rework, scrap and concession — recorded in a way that survives a five-year lookback.

04

DHF / DHR

Design history and device records assembled as you go, not reconstructed the week before an audit.

05

Supplier qualification

Approved vendor list, incoming inspection, and the audit questions I actually ask on the floor.

06

Training & competence

Role-based matrices tied to live procedures, so a revision automatically flags who needs retraining.

07

Internal audit

A real schedule with real findings. Better my finding than a notified body's.

08

Management review

Inputs, metrics and decisions minuted properly — an hour that produces evidence, not a slide deck.

03 — Validation

proving it, on paper
StageWhat it provesOutput
IQInstalled as specified — utilities, calibration, environmentprotocol
OQOperates across the full range, including the edges and the alarmsreport
PQPerforms in your process, with your people, over a real runreport
EfficacyDoes the claim hold — temperature, cycle, kill, throughputstudy
EMCPre-scan before the lab, so the lab visit is a formalitypre-scan

04 — Filings

submissions & declarations
510(k) premarketPredicate strategy, substantial equivalence
LEAD
Technical fileEU MDR structure, GSPR checklist
ADVISE
Declaration of ConformityDirectives, standards, signatory file
LEAD
SDS authoringGHS classification, 16-section format
LEAD
Hazmat classificationDOT / IATA shipping, packaging spec
ADVISE

05 — How to start

three ways in
Model Q11 week

Gap audit

I read your procedures against the standard you claim and hand you the findings list before someone else writes it.

Fixed fee
Model Q28–16 weeks

QMS build

From nothing, or from the binder nobody has opened since 2019, to a system that passes a real audit.

Scoped per phase
Model Q3Ongoing

Retained quality

Internal audits, CAPA review, supplier visits and the management review nobody wants to chair.

Monthly retainer