Software certification in accordance with IEC 62304
TÜV SÜD is now offering its clients a new service – the certification of Medical Device software in accordance with the criteria of the IEC 62304 standard. Certification covers both stand-alone software and software embedded into a Medical Device. Clients wishing to become certified in accordance with the IEC 62304 standard must hold a valid TÜV SÜD certificate in accordance with ISO 13485. If assessment is completed with a positive result, the client obtains a certificate and can use the respective TÜV SÜD certification mark on its software in the future.
The service covers the review of quality management system documentation and product-specific life-cycle documentation in accordance with the IEC 62304 standard. The basis of assessment is the software life-cycle documentation in accordance with the IEC 62304 standard, building on a quality management system in accordance with ISO 13485.
Initial certification of a product requires review of the quality management system documentation in accordance with the IEC 62304 standard, and assessment of life-cycle documentation of the relevant software product (stand-alone software or embedded software).
Clients can use a change report form to notify the certification body of software changes. Following a change review, the number of the software revision is updated on the certificate. Minor bug fixes that do not result in a change in use or a change in the accompanying documentation need not be reported, and thus should not be identified in the revision number on the certificate. Recertification in accordance with the IEC 62304 standard, which is normally combined with recertification in accordance with the ISO 13485 standard, requires review of the changes in the life-cycle documentation in accordance with the IEC 62304 standard and assessment of the software changes for each ISO 13485 certificate to be renewed.
Prior to extending the validity of an IEC 62304 certificate, the quality management system documentation – including the changes in accordance with IEC 62304 – must be reassessed during recertification in accordance with the ISO 13485 standard. The same applies to any software changes.
The validity of an IEC 62304 certificate depends on the validity of the assigned ISO 13485 certificate issued by TÜV SÜD, and is thus set at a maximum of three years.
The TÜV SÜD octagon
As well as holding the certificate, the software manufacturer is authorised to affix the respective TÜV SÜD octagon to its software product. The software manufacturer may use the TÜV SÜD octagon on the product itself and in the product documentation and – in the case of stand-alone software – may integrate the octagon into the on-screen display.