The obligation to document servicing instructions and procedures, analyse service data for complaint identification, and maintain service records with defined minimum content (device name, UDI/UPC, date, individual, service performed, test data) carries forward materially unchanged. §820.35(b) restates the §820.200(d) record content requirements in the QMSR framework.
§7.5.4 adds reference materials and reference measurements as explicitly named documentation elements in servicing procedures. The complaint-determination analysis obligation is now universal — all service records must be reviewed, not only MDR-reportable events. Improvement-process input from service data is now an explicit requirement, not merely implied by the §820.100 statistical-methodology reference.
Service procedures will be tested for explicit reference materials and reference measurements — not only task instructions. Auditors will ask for evidence of a systematic service record review process for complaint determination, and will test whether events in routine service data are reaching the complaint handling system. Service record minimum content will be verified against the §820.35(b) six-element checklist.
Maps to
QMSR / ISO 13485: §820.200 Servicing.
ISO 13485: §7.5.4 Servicing activities
Requirement text
If servicing of the medical device is a specified requirement, the organization shall document servicing procedures, reference materials, and reference measurements, as necessary, for performing servicing activities and verifying that product requirements are met. The organization shall analyse records of servicing activities carried out by the organization or its supplier: a) to determine if the information is to be handled as a complaint; b) as appropriate, for input to the improvement process. Records of servicing activities carried out by the organization or its supplier shall be maintained (see 4.2.5). Note — QMSR supplement (§820.35(b)): In adhering to §7.5.4, the manufacturer must record the following information, at a minimum, for servicing activities: (1) the name of the device serviced; (2) any UDI or UPC, and any other device identification(s); (3) the date of service; (4) the individual(s) who serviced the device; (5) the service performed; and (6) any test and inspection data.
Why this clause exists
Medical devices used in clinical settings require maintenance and repair over their operational life. Servicing activities — preventive maintenance, repair, calibration, software updates, component replacement — can restore a device to conformance but can also inadvertently introduce new nonconformances if performed without documented procedures and reference measurements. ISO 13485 §7.5.4 addresses both the procedural and the feedback dimensions of servicing: the documentation required to perform servicing correctly, and the obligation to analyse servicing records to detect complaint-worthy events and identify improvement opportunities.
The complaint-determination analysis obligation is operationally significant. A device returned for service may have failed in the field in a way that constitutes a reportable event or a complaint under applicable regulatory requirements. Without a systematic review of service records against complaint criteria, reportable events embedded in routine service activity will be missed. §7.5.4(a) mandates that every service record be analysed against complaint criteria — not merely those records that arrive flagged as complaints.
The improvement-process input obligation at §7.5.4(b) connects the servicing function to the CAPA and corrective action processes. Service data is a rich source of product reliability, use-error, and design-robustness information. The requirement to analyse service records as input to the improvement process ensures that this information reaches quality system processes where it can drive systematic improvement rather than remaining siloed in service operations.
QMSR §820.35(b) supplements §7.5.4 by specifying the minimum required content of servicing records. This supplement ensures that service records contain the device identification, UDI/UPC, date, personnel, service description, and test data necessary to support traceability, complaint investigation, and post-market surveillance — obligations that ISO 13485 §7.5.4 creates but does not fully specify at the record-content level.
What changed
§820.200 — Part 820 (legacy)
"(a) Where servicing is a specified requirement, each manufacturer shall establish and maintain instructions and procedures for performing and verifying that the servicing meets the specified requirements. (b) Each manufacturer shall analyze service reports with appropriate statistical methodology in accordance with § 820.100. (c) Each manufacturer who receives a service report that represents an event which must be reported to FDA under part 803 of this chapter shall automatically consider the report a complaint and shall process it in accordance with the requirements of § 820.198. (d) Service reports shall be documented and shall include: (1) The name of the device serviced; (2) Any unique device identifier (UDI) or universal product code (UPC), and any other device identification(s) and control number(s) used; (3) The date of service; (4) The individual(s) servicing the device; (5) The service performed; and (6) The test and inspection data."
§7.5.4 — ISO 13485:2016 + §820.35(b) supplement (current)
"If servicing of the medical device is a specified requirement, the organization shall document servicing procedures, reference materials, and reference measurements, as necessary, for performing servicing activities and verifying that product requirements are met. The organization shall analyse records of servicing activities carried out by the organization or its supplier: a) to determine if the information is to be handled as a complaint; b) as appropriate, for input to the improvement process. Records of servicing activities carried out by the organization or its supplier shall be maintained (see 4.2.5). §820.35(b) supplement — Records of servicing activities must include at minimum: (1) the name of the device serviced; (2) any UDI or UPC, and any other device identification(s); (3) the date of service; (4) the individual(s) who serviced the device; (5) the service performed; and (6) any test and inspection data."
Common gaps (what we see in audits)
- Service Procedures Lack Reference Materials and Reference Measurements — Servicing procedures describe what tasks to perform but do not specify the reference materials (calibration standards, replacement parts specifications, test tools) or reference measurements (acceptance tolerances, performance parameters) required to verify that product requirements are met after service. ISO 13485 §7.5.4 requires these as named documentation elements.
- No Systematic Review of Service Records for Complaint Determination — Service records are maintained but are not systematically reviewed against complaint criteria. Complaint identification relies on customers proactively labeling contacts as complaints. Events embedded in routine service — field failures discovered during preventive maintenance, performance deficits identified during repair — are not examined for complaint status. ISO 13485 §7.5.4(a) requires systematic analysis of service records for this purpose.
- Service Record Minimum Content Not Meeting §820.35(b) Requirements — Service reports do not consistently capture all six minimum required elements of QMSR §820.35(b): device name; UDI/UPC and device identification(s); date of service; individual(s) who serviced the device; service performed; test and inspection data. Records may omit UDI, test data, or individual identification.