ISO 10993 Biocompatibility Testing For Medical Devices

Biocompatibility testing under ISO 10993 starts with a biological risk question, not a fixed shopping list of assays. A manufacturer should determine what touches the patient or user, for how long and through which materials or manufacturing residues. Only then can a laboratory quote a defensible test programme. ISO 10993-1:2025, the sixth edition, addresses biological safety within an ISO 14971 risk-management process. An evaluation may combine existing evidence, chemistry, toxicological assessment and targeted tests; a certificate or a single passing assay does not establish safety for every use.

1. Fix the device and exposure before selecting tests

Record intended use, patient population, direct or indirect contact, contact tissue (intact skin, mucosa, compromised tissue or blood), duration and repeated/cumulative exposure. Include accessories and parts in the fluid path. Consider reasonably foreseeable exposure and potential degradation. The contact/exposure classification is an input to biological risk assessment, not an automatic order for every test appearing in a matrix.

A biological evaluation plan (BEP) should state biological hazards, available evidence, gaps, the rationale for evaluating or excluding each effect, acceptance criteria and responsibilities. Use the regulator-recognised edition and any jurisdiction-specific qualifications rather than assuming the newest ISO publication is automatically accepted everywhere.

2. Testing matrix: evaluate effects, then decide the evidence route

The following is a triage matrix, not a universal mandatory-test schedule. Final selection depends on the finished device, duration, materials, exposure and jurisdiction.

A cytotoxicity result is only one component of a complete evaluation. For the methods and interpretation of that particular assay, see cytotoxicity testing for medical devices.

3. Laboratory selection: ask about evidence acceptance, not just price

Ask the laboratory before purchasing any tests:

1. Which exact method and edition will be used, and which biological effects will the resulting data support?
2. Is the particular method on its ISO/IEC 17025 accreditation scope? For an FDA ASCA route, is it within the laboratory's current, method-specific ASCA scope and is its status active?
3. Who writes the BEP and biological evaluation report (BER), who performs toxicological assessment, and who resolves gaps? A raw laboratory report is not the entire BER.
4. What are sample quantities, extraction ratios, controls, deviations, turnaround assumptions and retest charges?
5. Will the deliverable identify sample traceability, methods, raw findings, deviations, acceptance criteria and the test article's final processing state?

ASCA is an optional FDA programme, not an internationally mandatory laboratory licence. General accreditation alone does not prove an individual method is in scope. Check withdrawals and exclusions at the time of testing; a laboratory's marketing claim is not evidence of regulatory acceptance. A broader guide to choosing a provider belongs on the product testing lab page.

4. Sample planning: represent the market-ready device

Agree the specimen definition in writing before dispatch:

1. Identify finished-device variant, material supplier and lot, drawing/revision, contact surface and surface-area calculation.
2. Record manufacturing, cleaning, coatings, packaging, ageing where relevant and final sterilisation (including method, cycles and residues).
3. Document specimen count, mass/area, extraction solvents, time/temperature, polar/non-polar rationale and controls under the relevant ISO 10993-12 preparation approach.
4. Define worst-case variants and whether a family can be grouped; justify grouping with material and exposure comparisons, not commercial product names alone.
5. Preserve chain of custody, storage/shipping conditions and a reserve quantity for clarification or retesting.

If production units differ from prototypes, document comparability; testing raw resin does not by itself establish the safety of a coated, processed, sterilised final device. Ask the laboratory to approve the extraction design for chemistry and for biological assays separately.

5. Acceptance dossier: which records make results reusable?

To use data in a biological evaluation, retain a traceable dossier: BEP and rationale, device/contact categorisation, material bill and supplier declarations, finished-device process and sterilisation history, sample identity and chain of custody, full signed reports with method editions and deviations, chemical findings and toxicological assumptions, gap closure, and a signed BER tied to risk management. Record which adverse biological effects were evaluated and why a fresh test was or was not needed.

Evaluate whether reports address the same intended use, manufacturing state, exposure and standard/regulatory expectations. A pass/fail statement without extraction conditions, adequate method details or sample identification may not resolve the evidence gap. The FDA explains report content and test-article preparation in its official reporting guidance.

6. Reuse or retest: a documented change-control decision

No automatic rule says that every change needs the entire ISO 10993 suite, or that old reports remain valid forever. A bridge requires documented scientific and regulatory justification. If a critical difference cannot be bridged, obtain further evidence.

7. A failed assay: investigate before repeating it

First, isolate the failed endpoint and verify the report's controls, sample identity, extraction design and deviations. Next, examine whether the result indicates a material, coating, processing, residual or degradation hazard. Then determine patient exposure and toxicological significance; implement design/process controls where needed. Finally, update the BEP/BER and repeat only justified assays on representative finished devices. Do not erase a failure by testing a different non-representative sample or by ordering the same assay unchanged.

8. Regulatory boundaries and the booking brief

US: FDA's September 2023 ISO 10993-1 guidance gives risk-based recommendations; its recognised-standard database lists ISO 10993-1:2025 with partial recognition and a transition for the 2018 edition. Verify the current recognition limitations and FDA's applicable endpoint guidance rather than using an ISO annex table alone. FDA ASCA is voluntary and method-scoped. EU: MDR 2017/745 Annex I, notably 10.1–10.2, addresses biological compatibility and residues; an ISO report supports evidence but is not itself CE certification, and applicability/harmonisation must be checked separately. For the broader route see CE certification for medical devices in the EU.

Before requesting a quotation, give the laboratory intended use, contact type and duration, market(s), finished-device drawings/materials, process/sterilisation details, family variants, existing reports and the unresolved effects matrix. Ask for an itemised testing-and-evidence plan with explicit exclusions, method versions, specimen requirements and the owner of the BER.

Frequently asked questions

Does every medical device need all three basic tests?

No. Cytotoxicity, sensitisation and irritation are common effects to evaluate, but whether new tests are needed must be justified from the particular device's contact, exposure, existing data and regulator-specific expectations.

Can a material supplier's ISO 10993 report replace final-device tests?

Not automatically. Supplier data may support a bridge, but coatings, processing, geometry, sterilisation and exposure can introduce risks not represented in the supplier specimen.

Is an ISO/IEC 17025 laboratory automatically an FDA ASCA laboratory?

No. Scope-specific ISO/IEC 17025 accreditation and FDA ASCA accreditation are distinct. Check active ASCA status, covered method, exclusions and testing date when choosing that voluntary route.

Does ISO 10993-1:2025 invalidate all reports made to the 2018 edition?

No automatic blanket invalidation follows from ISO publication alone. Perform a documented gap and target-market recognition review; for FDA submissions the published transition/recognition details matter.

What should happen after failed cytotoxicity or unexpected extractables?

Check sample preparation and method validity, identify the root cause and realistic exposure, reduce risk where necessary, then justify targeted verification. Do not treat a simple repeat as proof of safety.

Official sources

• ISO: current ISO 10993-1 edition
• FDA: biocompatibility evaluation guidance (2023)
• FDA: recognised-standard editions and limitations
• EU: Regulation (EU) 2017/745
• FDA: voluntary ASCA programme
• FDA: test-report content and specimen preparation