Supplier Qualification for Translation Vendors Under ISO 13485: What Auditors Look For

An English instruction for use gets revised and the corrected version goes out, while the Vietnamese, Spanish, and Mandarin translations keep circulating with the superseded content, because nothing in the process tied those language versions to the source revision. Across the device projects we run, that version-control gap produces more audit exposure than mistranslated terminology does. A supplier whose quality system links every translated file to the source version it came from closes that exposure.

That is the practical case for treating medical device translation under ISO 13485 as a supplier-qualification decision. When a manufacturer outsources translation, the regulatory responsibility stays with the manufacturer, and a wrong translated instruction for use or label lands in the manufacturer’s audit against its own quality system. Clause 7.4 sets that requirement, and the certifications a vendor already holds determine how much of the qualification work falls to your team.

Why translation counts as a qualified supplier

ISO 13485 Clause 7.4 requires documented control of suppliers whose work affects device quality, with the depth of control proportional to risk. Regulators treat translation as exactly that kind of work. A mistranslated contraindication, dosage instruction, or warning is a safety issue, so notified bodies and FDA auditors consider translation an outsourced process the manufacturer remains accountable for under ISO 13485, alongside the parallel requirements in FDA’s QMSR (21 CFR Part 820, which incorporates ISO 13485 by reference) and EU MDR Article 10.

In practice this means a device manufacturer cannot simply buy translation and move on. It has to qualify the translation supplier, monitor performance, keep purchasing records, and be able to show an auditor objective evidence that the supplier is controlled. The question every quality team faces is how much qualification is enough, and that answer depends heavily on what the supplier can already demonstrate.

What auditors actually examine

A supplier audit for a translation vendor centers on evidence, not assurances. The areas that come up repeatedly:

Documented qualification and risk classification. Auditors expect to see that the manufacturer classified the translation supplier by risk and qualified it against defined criteria instead of adding it informally. A critical supplier warrants a questionnaire, document review, and possibly an audit; a certificate from a recognized standard can carry significant weight in that file.

Control of the supplier’s own process. ISO 13485 expects a supplier to control its own supply chain. For a translation vendor that means qualified linguists, a defined review step, terminology management, and traceable records of who did what, so the manufacturer can show the work was performed under a controlled process rather than ad hoc.

Traceability and change control. Auditors look for a record trail: which source version a translation came from, what happened when the source changed, and how updated versions retired old ones. Translation without version control is a common source of audit findings, because outdated translated documents keep circulating after the English is corrected.

Personnel qualification. Human error drives quality failures, so auditors assess whether the people doing the work are qualified and trained for it. For translation, that is linguist competence in the subject matter and the language pair, with documentation to prove it.

How a vendor’s certification reduces your qualification burden

Here is the part that matters to a quality team’s workload. When a translation vendor’s own quality system is certified to ISO 13485, the manufacturer can lean on that in its own supplier qualification, shortening the evaluation and reducing the resources spent qualifying and controlling the supplier. Working with a translation supplier whose quality system is certified to ISO 13485 can also lower the risk of non-conformities during the manufacturer’s own notified-body audit, because the outsourced process is already under a recognized quality system.

Certification to ISO 13485 is voluntary for a language services supplier and demanding to maintain, so most do not hold it. Dynamic Language’s Global Management System is certified to the applicable standards, including ISO 13485 and ISO 17100 (Translation Services), which defines the translation process itself, the qualified linguists, the mandatory revision step, and the records. The pairing matters: ISO 13485 governs the quality system a device manufacturer is accountable for, and ISO 17100 governs how the translation work is actually performed. Together they give a quality team a supplier whose process is documented and independently audited on both fronts.

What to ask a translation vendor before you qualify them

Which certifications do you hold, and can I have the certificates? For device work, ISO 13485 and ISO 17100 are the two that speak directly to a supplier-qualification file. Ask for the certificates with current audit dates, verifiable through the issuing body.

How do you qualify and document your linguists? The answer should describe defined competence criteria and records, since that is what an auditor will expect to see behind the supplier’s work.

What is your version-control process when a source document changes? This surfaces whether the vendor manages your content across revisions or simply produces files, which is the difference between a controlled process and a future audit finding.

Can you support a supplier audit or questionnaire? A vendor accustomed to device clients will expect this and have the documentation ready, which itself is a signal of fit.

Frequently asked questions

Does a translation vendor need to be certified to ISO 13485? It is not legally required; certification to ISO 13485 is voluntary for an outsourced service supplier. But because the device manufacturer remains accountable for the translation under its own quality system, many device companies require or strongly prefer suppliers who hold it, since it reduces their qualification and audit burden.

What does ISO 13485 say about outsourced translation? Clause 7.4 requires the manufacturer to control suppliers whose work affects device quality, proportional to risk. Regulators treat translation as such an outsourced process, so it must be qualified, monitored, and documented like any other critical supplier.

How is ISO 13485 different from ISO 17100 for translation? ISO 13485 is the medical device quality management standard that governs the system a manufacturer is accountable for, including outsourced work. ISO 17100 is the translation-services standard that governs how the translation itself is produced. A vendor certified to both covers the quality system and the craft, each independently audited.

Does using a certified translation vendor help in an audit? It can. Qualifying a supplier whose quality system is already certified to ISO 13485 lets a manufacturer shorten its own qualification process and can reduce non-conformities during a notified-body audit, because the outsourced process is under a recognized quality system.

What documents should we keep for translation supplier qualification? A risk classification of the supplier, qualification criteria and the evidence against them (including certificates), performance monitoring records, purchasing records, and traceability linking each translation to its source version.

Which regulations govern translation supplier control for medical devices? ISO 13485 Clause 7.4, FDA’s QMSR (21 CFR Part 820, which incorporates ISO 13485 by reference), and EU MDR Article 10 all require documented supplier controls for outsourced processes that affect device quality.

Before your next qualification cycle

If your team is adding or re-evaluating a translation supplier for regulated device content, the certifications that supplier holds directly affect how much qualification work falls to you. Dynamic Language can provide its ISO 13485 and ISO 17100 certificates and supporting documentation for your supplier file, and walk your quality team through how the process maps to Clause 7.4. Talk to a Specialist.