21 CFR Part 820

21 CFR Part 820 is the section of the U.S. Code of Federal Regulations through which the Food and Drug Administration (FDA) establishes binding quality management system requirements for finished medical devices intended for commercial distribution in the United States. For decades it was known as the Quality System Regulation (QSR), organized into subparts covering management responsibility, design controls, document and change control, purchasing controls, production and process controls, acceptance activities, corrective and preventive action (CAPA), labeling and packaging, handling and storage, and records and reporting. As of February 2, 2026, the FDA replaced most of that detailed text by incorporating ISO 13485:2016 by reference and renamed the rule the Quality Management System Regulation (QMSR), aligning the FDA framework with the international standard already used under the Medical Device Single Audit Program.

On the shop floor, Part 820 governs how a device is built, inspected, and documented. Design controls require a controlled, iterative development process with design inputs, outputs, reviews, verification, validation, and a design history file (DHF). Production and process controls mandate validated processes, controlled work instructions, and acceptance activities at receiving, in-process, and final inspection. Every unit or lot is traceable through a device history record (DHR), and the device master record (DMR) holds the approved specifications, routings, and procedures. CAPA ties the system together: nonconformances, complaints, and audit findings feed root-cause investigation, documented corrective action, and effectiveness verification.

Quality, manufacturing, and regulatory teams own Part 820 compliance because FDA investigators inspect against it and issue 483 observations or warning letters when records, validations, or CAPA closure are deficient. A weak quality system can halt shipments or trigger recalls, so the regulation drives day-to-day discipline far beyond paperwork.

In a unified manufacturing platform, Part 820 requirements map directly onto core systems. The ERP and MES enforce controlled routings, electronic work instructions, and operator sign-offs; the MES captures genuine device history records as work orders move through stations, preserving lot and serial traceability. The QMS module manages document control, training records, nonconformance dispositions, and CAPA workflows, while supplier controls live in purchasing and receiving inspection. Under the QMSR, the same ISO 13485 process-and-risk-based logic that medical device makers already follow becomes the regulatory baseline, so a platform built around traceability, electronic signatures, validated processes, and closed-loop corrective action satisfies both standards from one source of truth rather than duplicate paper systems.