ISO 10993 is the international standard series that governs biocompatibility evaluation for medical devices. FDA’s 2016 guidance, Use of International Standard ISO 10993-1: Biological Evaluation of Medical Devices — Part 1: Evaluation and Testing Within a Risk Management Process, established that FDA expects manufacturers to follow ISO 10993-1 for all biocompatibility evaluations. Deviations from this standard require explicit justification.

This guide covers what ISO 10993 requires, how to select the right tests, how FDA’s risk-based approach works in practice, and how to manage biocompatibility data in a quality management system.

Why biocompatibility testing matters for device clearance

A 510(k) submission for a device with patient contact must include a biocompatibility evaluation. FDA reviewers assess whether the submitted biocompatibility data adequately addresses the risks for the device’s contact type and duration. Inadequate biocompatibility data is one of the most common reasons for 510(k) additional information (AI) requests — it delays clearance and adds cost to the development program.

For PMA submissions, biocompatibility data forms part of the safety and effectiveness dossier. FDA may request additional testing or a re-evaluation if the submitted data does not cover all relevant endpoints for the device’s intended use.

ISO 10993-1: the risk-based framework

ISO 10993-1 is the foundational part of the series. It requires that biocompatibility evaluation follow a risk management process that considers:

• The nature of the materials in the device
• The type of body contact (surface, external communicating, or implant)
• The duration of contact (limited: less than 24 hours; prolonged: 24 hours to 30 days; permanent: greater than 30 days)
• The area of body contacted (skin, mucous membrane, breached or compromised surface, blood path, tissue/bone/dentin, circulating blood)
• The existing toxicological data on the materials from literature, supplier data sheets, or prior clinical use

The risk-based approach means that biocompatibility evaluation does not automatically require laboratory testing. If sufficient existing data — material composition data, supplier biocompatibility testing, literature toxicology, or clinical history — demonstrates that the device materials are safe for their intended contact, that data may be sufficient. Testing is required only to fill gaps where existing data is inadequate.

ISO 10993 parts and their applications

ISO 10993 is a multi-part standard. The most commonly applied parts are:

• ISO 10993-1: Evaluation and testing within a risk management process (the framework standard)
• ISO 10993-4: Selection of tests for interactions with blood (hemocompatibility)
• ISO 10993-5: Tests for in vitro cytotoxicity
• ISO 10993-6: Tests for local effects after implantation
• ISO 10993-10: Tests for skin sensitization and irritation
• ISO 10993-11: Tests for systemic toxicity
• ISO 10993-12: Sample preparation and reference materials (applies to all testing)
• ISO 10993-13 and 10993-14: Identification and quantification of degradation products from polymers and ceramics
• ISO 10993-17: Toxicological risk assessment of leachable substances
• ISO 10993-18: Chemical characterization of medical device materials (extractables and leachables)

Contact classification: the starting point for every evaluation

The contact classification determines which biocompatibility endpoints must be addressed. ISO 10993-1 Annex A provides a matrix of required endpoints based on contact type and duration.

For a device with permanent blood contact (a cardiovascular implant, for example), the matrix requires evaluation of cytotoxicity, sensitization, hemocompatibility, pyrogenicity, implantation effects, subchronic toxicity, genotoxicity, chronic toxicity, and carcinogenicity. For a device with limited skin contact (an adhesive electrode used for less than 24 hours), the required endpoints are cytotoxicity and sensitization only.

Getting the contact classification wrong — underclassifying the contact duration, for example, or not recognizing that a secondary component contacts blood — means the biocompatibility evaluation covers the wrong set of endpoints. FDA reviewers identify classification errors, and they result in additional information requests that restart the review clock.

Chemical characterization under ISO 10993-18

FDA’s 2016 guidance placed significant emphasis on chemical characterization as the starting point for biocompatibility evaluation. ISO 10993-18 requires that the chemical composition of device materials be characterized through analytical chemistry methods, and that the potential leachables — chemicals that may migrate from the device into the patient or patient’s tissues — be identified and quantified.

Chemical characterization involves:

• Identification of all materials in the device through the supply chain
• Extraction studies that simulate the conditions of clinical use (the extraction solvent, temperature, and duration are chosen to reflect worst-case patient exposure)
• Analytical chemistry (HPLC-MS, GC-MS, ICP-MS for metals) to identify and quantify extractables
• Comparison of identified leachables to toxicological threshold values

When chemical characterization shows that the leachable concentrations are below toxicological thresholds for all endpoints, a biocompatibility judgment may be possible without biological testing for those endpoints. When concentrations exceed thresholds or data is insufficient, targeted biological testing is required to fill the gaps.

Key biological tests and what they measure

Cytotoxicity (ISO 10993-5)

Cytotoxicity testing evaluates whether device materials or their extracts cause cell death or inhibit cell growth in cell culture. It is the most basic biological screening test and is required for virtually all devices with patient contact. An extract of the device is applied to a cell monolayer, and cell viability is assessed at defined time points. Cytotoxicity failure is a hard stop — it indicates the presence of leachables at levels that are directly toxic to cells.

Sensitization (ISO 10993-10)

Sensitization testing evaluates whether device materials can cause an allergic hypersensitivity reaction. The standard model is the guinea pig maximization test (GPMT) or the Buehler test, though the murine local lymph node assay (LLNA) is increasingly used as a more refined and animal-welfare-considerate alternative. Sensitization is an endpoint required for virtually all devices with patient contact.

Hemocompatibility (ISO 10993-4)

Hemocompatibility is required for devices that contact blood. It evaluates effects on red blood cells (hemolysis), platelets (thrombogenicity), the coagulation cascade, complement activation, and white blood cells. In vitro hemolysis testing and thrombogenicity testing are the most common hemocompatibility tests for initial evaluation.

Systemic toxicity (ISO 10993-11)

Systemic toxicity tests assess the effect of device materials on the whole organism following single or repeated exposure. For permanent implants with large material mass or high extractable potential, subchronic and chronic toxicity studies in animal models may be required to address the systemic exposure endpoints.

Genotoxicity (ISO 10993-3)

Genotoxicity testing evaluates whether device materials or their leachables can cause genetic damage — mutations, chromosomal aberrations, or DNA strand breaks. A standard genotoxicity test battery covers three endpoints: bacterial reverse mutation (Ames test), chromosomal aberration or micronucleus, and in vitro mammalian gene mutation. Genotoxicity is required for devices with prolonged or permanent contact.

Implantation (ISO 10993-6)

Local effects after implantation are evaluated by implanting test material at a site in an animal model and assessing the local tissue response at defined time points. The results are compared to a control material implanted at the same site. This test addresses the local biocompatibility of implantable device materials where systemic or in vitro testing cannot fully characterize the implant-tissue interaction.

FDA’s 2016 guidance: what changed

FDA’s 2016 guidance on ISO 10993-1 made several important clarifications for submitters:

• Chemical characterization under ISO 10993-18 is now expected as the starting point — biological testing without prior chemical characterization is generally insufficient
• Toxicological risk assessment (ISO 10993-17) must be performed to determine whether identified leachables pose a risk, using tolerable intake (TI) values and patient exposure estimates
• Final packaging and processing conditions (sterilization, for example) must be reflected in the test samples — testing unsterilized samples for a device that will be EO-sterilized is not acceptable
• Test reports must clearly describe sample preparation per ISO 10993-12

Managing biocompatibility in the QMS

Biocompatibility evaluation is part of the device design record and must be maintained under design control. The biocompatibility evaluation report — including the risk management rationale, chemical characterization data, test reports, and biocompatibility conclusions — is a controlled document that must be version-managed and linked to the specific device design.

When device materials change, a biocompatibility impact assessment is required under the change control process. The assessment determines whether the existing biocompatibility evaluation remains valid or whether additional testing or re-evaluation is needed. This evaluation must be documented and approved before the material change is implemented in production.

Adverse events and adverse event investigations that involve tissue reactions, sensitization events, or cytotoxic responses in the field may require feedback into the biocompatibility risk assessment. The post-market surveillance system must be connected to the design controls and risk management process so that post-market biocompatibility signals trigger appropriate re-evaluation.

Cloudtheapp’s QMS platform connects Design Controls, Risk Management, Document Control, and Post-Market Surveillance in a single system — so biocompatibility data, material change control, and audit trail requirements are managed together rather than in disconnected spreadsheets or standalone files. The platform covers 60+ quality, safety, and compliance applications and is validated for FDA 21 CFR Part 11 compliance.

To see how Cloudtheapp manages design controls and biocompatibility documentation for medical device teams, request a demo.

Summary

Biocompatibility testing under ISO 10993 follows a risk-based approach that starts with contact classification and chemical characterization, and uses targeted biological testing only to fill the gaps where existing data is insufficient. The 2016 FDA guidance reinforced that chemical characterization comes before biological testing — not after. Biocompatibility evaluation lives in the device design record, must be maintained under change control, and must be re-evaluated whenever materials change. Post-market adverse events are a feedback loop back into the risk assessment. A QMS that connects all of these elements makes biocompatibility management systematic rather than reactive.

This post created by and appeared first on Cloudtheapp