Every framework Xyreg checks against
39 regulatory standards, global market rules and data-security frameworks. Core standards apply from concept; market and device frameworks are assigned automatically as you set target markets and device attributes.
Core quality, risk & safety standards
The foundational standards applied to every programme from concept onward.
Baseline Regulatory Standard Check
16Early cross-standard sanity check performed in Concept & Planning to confirm target markets, device classification, applicable core standards, and the absence of obvious platform-level gaps before design work starts.
ISO 13485:2016 — Quality Management System
65Complete set of 65 ISO 13485:2016 requirements for medical device quality management systems.
ISO 14971 — Risk Management Process
21Enterprise-level risk management process: organisational process definition, management responsibilities, and personnel qualification.
ISO 14971:2019 — Risk Management (Device)
18Device-specific risk management: risk management plan, hazard identification, risk analysis, evaluation, control measures, residual risk assessment, review, and post-production monitoring.
IEC 62366-1 — Usability Engineering
15Application of usability engineering to medical devices per IEC 62366-1:2015+A1:2020.
ISO 15223-1 — Symbols for Medical Devices
9Symbols to be used with information supplied by the manufacturer of medical devices per ISO 15223-1:2021.
ISO 20417 — Information Supplied by Manufacturer
11Requirements for information supplied by the manufacturer with medical devices per ISO 20417:2021.
Electrical, software & biocompatibility
Auto-assigned from device attributes — active, software-driven or patient-contacting.
IEC 60601-1:2012 — General Safety and Essential Performance
100General requirements for basic safety and essential performance of medical electrical equipment. Covers electrical, mechanical, radiation and temperature hazards, PEMS, construction and ME systems.
IEC 60601-1-2:2014 — EMC Requirements and Tests
27Electromagnetic compatibility requirements and tests for medical electrical equipment and systems. Covers emissions, immunity, risk management for EMC, and accompanying documents.
IEC 60601-1-6 — Usability Engineering
11Collateral standard for usability engineering of medical electrical equipment. Covers use specification, hazard-related use scenarios, formative and summative evaluation.
IEC 62304 — Software Life Cycle Processes
29Software life cycle processes for medical device software. Covers development, maintenance, risk management, configuration management, and problem resolution.
ISO 10993 — Biological Evaluation
14Biological evaluation of medical devices — evaluation and testing within a risk management process per ISO 10993-1:2018.
IEC 20957 — Stationary Training Equipment
31Safety requirements for stationary training equipment. Covers general safety, stability, strength/durability, labelling, instructions, and display accuracy.
European Union & Europe
EU MDR technical documentation and the wider European market set.
MDR Annex I — General Safety and Performance Requirements
20MDR Annex I General Safety and Performance Requirements — official requirements (Chapter I: 20 items).
MDR Annex II — Technical Documentation
10Technical documentation requirements under EU MDR Annex II for comprehensive device documentation.
MDR Annex III — Clinical Evaluation and PMCF
8Conformity assessment procedures under EU MDR Annex III for device certification and CE marking.
PPWR Compliance Checklist
24Packaging and Packaging Waste Regulation (EU 2025/40) compliance checklist covering material restrictions, labelling, and ecodesign requirements for medical device packaging.
DiGA Fast-Track (BfArM §139e SGB V)
57Comprehensive readiness checklist for listing a Digital Health Application (DiGA) in the BfArM directory under §139e SGB V, structured from the BfArM Fast-Track Guide and DiGAV.
Swiss MepV / Medizinprodukteverordnung
8Swiss Medical Devices Ordinance (MepV) aligned with EU MDR, covering conformity assessment and market surveillance requirements for Switzerland.
UK MDR 2002 (MHRA)
10UK Medical Devices Regulations 2002 (as amended) under MHRA covering UKCA marking, conformity assessment, and post-market surveillance for the UK market.
United States (FDA)
Quality system regulation for the US market, including the 2026 QMSR transition.
FDA QMSR — Quality Management System Regulation
88FDA QMSR (effective 2 Feb 2026) incorporates ISO 13485:2016 by reference with retained Part 820 sections (820.1, 820.3, 820.7, 820.10, 820.35, 820.45). Replaces the standalone 21 CFR Part 820 QSR. Internal audits, supplier audits, and management reviews are now subject to FDA inspection.
FDA 21 CFR Part 820 — Quality System Regulation
56Comprehensive FDA 21 CFR Part 820 Quality System Regulation compliance checklist covering all subparts and requirements for medical device manufacturers.
Global market access
Auto-assigned when you add a target market to a device.
Australian Therapeutic Goods Act 1989
9TGA regulatory framework for medical devices including conformity assessment, essential principles, and post-market requirements for the Australian market.
Brazil ANVISA RDC 751/2022
9ANVISA Resolution RDC 751/2022 establishing requirements for registration, labelling, and good manufacturing practices for medical devices in Brazil.
Canadian Medical Device Regulations (SOR/98-282)
10Health Canada Medical Device Regulations SOR/98-282 covering device classification, licensing, and quality system requirements for the Canadian market.
China NMPA Medical Device Regulations
10NMPA regulatory framework for medical devices including registration, classification, and quality management system requirements for the Chinese market.
India CDSCO Medical Device Rules 2017
9Central Drugs Standard Control Organisation Medical Device Rules 2017 covering registration, import licensing, and clinical investigation requirements for India.
Japan PAL / PMD Act (PMDA)
9Japanese Pharmaceutical and Medical Device Act covering approval, QMS, and post-market surveillance requirements administered by PMDA.
South Korea MFDS Medical Device Industry Act
9Korean Ministry of Food and Drug Safety Medical Device Act covering device classification, technical documentation, and GMP requirements for South Korea.
Data, security & AI
Information security, privacy and AI governance frameworks alongside the device standards.
GDPR (Regulation 2016/679)
36EU General Data Protection Regulation — audit-ready clause set covering principles, data subject rights, controller/processor obligations, international transfers, and enforcement-relevant articles.
SOC 2
Trust Services Criteria for security, availability, processing integrity, confidentiality and privacy of a service organisation.
ISO/IEC 27001 — Information Security Management
Requirements for establishing, implementing, maintaining and continually improving an information security management system.
HIPAA
US Health Insurance Portability and Accountability Act privacy and security rules for protected health information.
HITRUST CSF
Certifiable framework harmonising HIPAA, ISO 27001, NIST and other authorities into a single control set for healthcare data.
ISO/IEC 42001 — AI Management System
Requirements for an artificial intelligence management system, governing responsible development and use of AI.
NIST AI Risk Management Framework
Voluntary framework for managing risks in the design, development, use and evaluation of AI systems.
US Data Privacy (USDP)
Consolidated US state data privacy requirements for handling personal information across jurisdictions.
Custom & reimbursement
Frameworks you define yourself, plus market-access and reimbursement checklists.
Reimbursement List
A custom checklist for tracking reimbursement and market-access requirements specific to your device and target payers.
Custom Frameworks
Build, validate and mandate your own corporate compliance checklists and SOP templates, then run gap analysis against them like any built-in standard.
Need a framework that isn't listed?
Build your own controlled checklist with the Custom Framework Studio, or talk to us about adding a standard to the catalogue.
