MDSAP: The Single-Audit Program Explained

MDSAP — the Medical Device Single Audit Program — replaces multiple country-specific audits with one audit recognized by five regulators: the US FDA, Canada Health, Brazil ANVISA, Japan MHLW/PMDA, and Australia TGA. For medical device manufacturers and their distributors, MDSAP is the single most efficient compliance lever available: one audit, five markets. This guide explains how the program works, what it covers, and how manufacturers and importers use it.

How the Single Audit Works

MDSAP runs a single audit against a unified set of requirements: the ISO 13485 quality management system standard as the backbone, plus the participating regulators’ country-specific requirements (the US FDA’s QSR/21 CFR 820 elements, Canada’s Medical Devices Regulations, Brazil’s ANVISA requirements, Japan’s QMS Ministerial Ordinance, and Australia’s TGA framework). The audit is performed by an accredited auditing organization (AO) under contract to the International Medical Device Regulators Forum (IMDRF), and the audit report is shared with the participating regulators. The practical structure: a full audit every three years with annual surveillance audits in between, and the audit’s scope covers the manufacturer’s QMS processes — management, design, production, purchasing, corrective action, and the rest of the ISO 13485 map. The audit’s currency for the manufacturer: passing MDSAP satisfies the audit requirements of all five participating regulators — for Canada, MDSAP is the mandatory route for most device classes; for the others it reduces or substitutes the regulatory audit burden. The program’s official documentation and participating-regulator details are published through the FDA’s MDSAP pages and the IMDRF — the FDA’s MDSAP program page is the authoritative entry point.

What the Audit Covers: The 7 Process Areas

The MDSAP audit examines the manufacturer’s QMS across seven process areas: management responsibility, design and development, production and process controls, purchasing and supplier management, corrective and preventive action (CAPA), customer feedback and complaint handling, and document control and records. Each area is assessed against both ISO 13485 and the applicable country requirements — the auditor scores findings as major or minor, and a major finding triggers a corrective action timeline. For a medical equipment manufacturer like Sanyang (operating tables, surgical lights, hospital beds), the audit’s practical weight sits in design controls (the design history file for each device), production controls (the traceability from materials to finished device), and CAPA (the closed-loop handling of complaints and nonconformances). The preparation effort for a first MDSAP audit is typically 6–12 months of QMS work for a manufacturer coming from an ISO 13485 baseline, because the country-specific elements add requirements beyond the standard.

Why Distributors and Importers Should Care

The MDSAP relevance for distributors is indirect but real: a manufacturer holding a current MDSAP certificate carries the audit file that distributors’ own regulatory work builds on — the technical file, the QMS evidence and the country-specific documentation are all verifiable through the MDSAP audit record. In practice, distributors evaluating suppliers for Canada-bound programs should treat MDSAP certification as a near-requirement (Canada mandates MDSAP for most device classes); for other markets it is the strongest available evidence of QMS maturity. The verification step for a distributor: check the MDSAP certificate’s currency and the auditing organization’s accreditation, and confirm the certificate’s scope covers the device categories being purchased. A manufacturer that runs ISO 13485 and MDSAP (Sanyang’s certification base is CE and ISO 13485, with the QMS documentation structured for audit-readiness) can produce the audit trail on request, and the compliance and certifications hub lists the certificate set — the compliance hub covers the certificate set and the about page documents the QMS background.

MDSAP vs ISO 13485: The Practical Difference

The relationship is additive, not alternative: ISO 13485 is the QMS baseline, MDSAP is the audit that proves the baseline against five regulators’ requirements at once. A manufacturer can hold ISO 13485 without MDSAP (a smaller market footprint), but a manufacturer selling into any of the five participating markets should run MDSAP because it consolidates the audit burden — the alternative is separate audits per market, each with its own schedule and findings. For the manufacturer, the MDSAP audit’s value is also internal: the unified audit forces the QMS to meet the strictest applicable requirement, which raises the quality floor for every market. The decision rule: sell into Canada — MDSAP is mandatory for most classes; sell into the US, Brazil, Japan or Australia — MDSAP substitutes or streamlines the regulatory audit; sell only into markets outside the five — ISO 13485 remains the baseline with the local registration on top.

FAQ

What is MDSAP?

The Medical Device Single Audit Program: one audit recognized by five regulators (FDA, Health Canada, ANVISA, MHLW/PMDA, TGA) that replaces multiple country-specific audits for medical device manufacturers.

What does the MDSAP audit cover?

The QMS across seven process areas — management, design, production, purchasing, CAPA, complaints, document control — assessed against ISO 13485 plus the five regulators’ country-specific requirements.

Is MDSAP mandatory?

For Canada, yes for most device classes; for the other four participating markets it substitutes or streamlines the regulatory audit burden.

How often does the audit run?

A full audit every three years with annual surveillance audits in between.

MDSAP is the audit consolidation play: one audit, five markets, and the strictest applicable requirement as the quality floor. Related reading: the compliance hub and the manufacturer background.

Before ordering, run the five certificate checks in our CE MDR vs MDD recheck list.

Regional buying patterns differ by regulator and channel; our Latin America medical equipment market guide maps the five agencies and the tender cycles.

For a structured 15-criteria scorecard when comparing medical equipment manufacturers, see medical equipment supplier evaluation.