Medical casting procurement fails in a specific and predictable way. The foundry is competent, the parts are dimensionally right, and eighteen months later a notified body asks the device maker for evidence that the process has been validated and unchanged since approval. The evidence does not exist, because nobody at the foundry was ever told that this part was different from a pump housing.
ISO 13485 is the standard that forces that evidence to exist. Understanding what it actually requires tells you what to ask for, and which claims to distrust.
Why a general foundry certificate does not transfer
Most Chinese foundries that serve medical customers hold ISO 9001, and a smaller number hold IATF 16949 for their automotive lines. Neither substitutes for ISO 13485. The gaps are structural rather than cosmetic:
| Requirement | ISO 9001 | IATF 16949 | ISO 13485 |
|---|---|---|---|
| Formal risk management over lifecycle | Risk-based thinking, no method | FMEA required for product and process | Risk management throughout, documented |
| Traceability | Not required to unit level | Lot traceability | Traceability to the extent defined for the device |
| Validation of special processes | Partial | Required | Required, with revalidation triggers |
| Change notification to customer | Not required | Required for PPAP-relevant changes | Required before implementation |
| Cleanliness and contamination control | Not addressed | Not addressed | Addressed where applicable |
The row that matters most in practice is the last change-control row. A medical buyer’s exposure is not usually a bad first shipment; it is a silent process change in shipment four that invalidates the validation file.
Read the scope, then read it again
An ISO 13485 certificate carries a scope statement like any other. Two things to check in it:
- Does the scope name casting? A certificate covering “machining and assembly of surgical instruments” does not cover the casting that precedes it, even if the same company does both.
- Does the scope name the material family? Stainless and titanium implant-adjacent work sits under very different controls from a brass instrument body.
Where the scope does not cover casting, the honest arrangement is that the foundry pours to a specification you control and you, the device maker, own the validation. That can work. It just has to be a decision rather than an assumption.

The four documents that decide whether a medical casting is sourced safely
1. Material certificate with lot traceability
For medical work the material certificate has to tie to the specific lot, and the lot has to tie to the parts. EN 10204 3.1 is the usual vehicle. What differs from general engineering is that the traceability chain must survive into your device record, which means the heat number has to be recorded on the packing list, not just on the certificate PDF sitting in an email.
2. Process validation record for special processes
Casting, heat treatment, passivation and cleaning are special processes. Ask for the validation record for each: what parameters were established, over what range, with what acceptance criteria, and what triggers revalidation. A foundry that cannot produce a furnace validation record for heat treatment is not doing medical work regardless of the certificate on the wall.
3. Cleanliness and contamination control statement
Medical components often carry limits on particulate, oils and machining residue. This is usually specified by you, not by the standard, so the requirement has to be written into the purchase order with a test method attached. Asking for “clean parts” produces a promise; asking for a particulate count against a named method produces a number.
4. A written change notification clause
This is a contract term, not a document, and it is the highest-value item on the list. No change to material source, process route, subcontractor, tooling or inspection method without prior written approval from you. Include it in the PO and reference it in the quality agreement.
Subcontracting: the failure mode nobody audits
Medical castings are small-volume and high-mix. A foundry that cannot fill a furnace with your part alone will combine heats, and a foundry that is busy will subcontract. Both are normal. Neither is acceptable if it happens without your knowledge.
Under a medical quality system, special processes performed by an external provider must be controlled as if they were internal, which means the subcontractor has to be approved, and their process validated. Ask directly:
- Which operations in my process route are performed outside your plant?
- Who performs them, and are they approved under your quality system?
- Will my parts be poured in a heat dedicated to my order, or combined with other work?
- If combined, which other part numbers share the heat, and is any of that work non-medical?
The third and fourth questions are the ones that get vague answers, and the vagueness is the information. A foundry that shares heats across medical and non-medical work is not automatically disqualified, but you need to know, because it sets your cleaning and cross-contamination requirements.
What an ISO 13485 foundry should be able to show you in a week
| Item | Why it matters |
|---|---|
| Certificate with scope naming casting | Establishes the system exists at that process |
| Latest notified body audit summary, redacted | Shows whether findings are open |
| Process validation for heat treatment and passivation | The special processes you cannot inspect your way out of |
| Approved subcontractor list with scopes | Reveals the hidden part of the process route |
| A redacted control plan for a comparable part | Tests whether the system is live or documentary |
| Sample lot traceability record | Proves the chain from heat to carton exists |
A supplier with a working system produces this in days, because it is the output of normal operation. A supplier assembling the pack from scratch takes weeks and sends polished PDFs that do not quite answer the question.
Realistic expectations for a Chinese medical casting supplier
China has a genuine base of ISO 13485 certified investment casting plants serving surgical instrument and dental customers, concentrated in the Jiangsu and Zhejiang clusters. They exist, they are audited by international bodies, and they export to Europe and North America under their customers’ device files.
What they generally will not do is take on a first medical project with no device maker behind it. The validation work is charged to someone, and a first order of 500 pieces rarely covers it. Expect a tooling and validation charge on the first lot, and expect the foundry to want your device documentation before they accept the scope. That hesitation is a good sign, not a bad one.
The five questions to send first
- What is the exact wording of your ISO 13485 scope, and does it name investment casting?
- Which certification body issued it, and when was your last surveillance audit?
- Which operations in a typical stainless instrument part are subcontracted?
- Can you share a redacted validation record for your heat treatment furnace?
- How do you handle change notification for an approved medical part?
Question five is the one that separates the real medical suppliers from the ones who would like to be. The answer you want names a written procedure and a customer approval step. The answer you get from everyone else is “we would tell you”.
Related verification pages
Tell us the device class first
Class I instruments and Class II implant-adjacent housings demand very different evidence. Send the device class, the material and the surface requirement, and we will tell you which parts of the document set we can support in-house and which would need a certified subcontractor.
Prefer email? cfwc@163.com · WhatsApp +86 159 4126 7000