Blog

The QMS Gaps We Fix Most at Device Start-Ups in New Zealand

A medical device start-up can have a strong product and still struggle with an audit. The problem is often not the device itself. The problem is often the Quality Management System (QMS) behind it. Many start-ups struggle to build a QMS and end up copying templates that don't match their real processes.

Neha Dvivedi · 4 novembre 2026

As a result, these device startup QMS gaps become harder to fix as the company grows. New Zealand start-ups also dream of entering Australia, the EU or the US. However, an expert ISO consultant can change the game for New Zealand organisations by helping them build a QMS that supports their ambitions. They prepare the business for ISO 13485 certification.

Why Medical Device Start-Ups Must Fix QMS Gaps Early

A small QMS gap can become a major problem as certification or market entry approaches. Start-ups in New Zealand may then need to recreate records, repeat testing or document decisions that were never properly recorded.

Customers and business partners in medical device supply chains also commonly request ISO 13485 certification. It supports an organisation’s access to international markets and strengthens confidence in the company’s quality controls.

ISO 13485 consultancy services in New Zealand help start-ups identify gaps before they become expensive problems.

6 Common QMS Gaps in Medical Device Start-Ups in New Zealand

1. Untraceable or Undocumented Design Controls - Some start-ups document their design work but cannot clearly link user needs to design inputs and outputs. They may struggle to conduct proper design reviews, while testing records may not clearly show which devices were tested or why.

An adequate design control procedure is important because it shows how the device was developed in a controlled way.

2. Risk Management Separated from QMS - A risk management file is not a one-time task. However, start-ups need to conduct a risk assessment during development and update it consistently as the device changes.

Design changes, complaints and supplier changes can introduce new risks. As a result, these events should feed into the risk management process.

3. Weak document and record control - When a start-up maintains several versions of the same procedure, it can create confusion. Shared records may lack a clear approval trail, and employees may unknowingly use outdated documents. This can raise a basic audit question: Which document is approved?

4. CAPA and complaint handling are not operational - The organisation has an existing CAPA procedure, but the team doesn't use it effectively. The team treats customer complaints without proper investigation. A good management system focuses on identifying root causes and implementing appropriate corrective actions.

5. Weak Supplier Controls - Start-ups often depend on external manufacturers, laboratories, and component suppliers. At the same time, supplier selection may rely mainly on price, availability, or personal relationships.

It is important for the company to understand why a supplier was approved and how its performance is monitored.

6. Gaps in Internal audits and management reviews - Start-ups treat internal audits and management reviews as activities to complete just before certification. As a result, this delays the real purpose of these activities.

Internal audits should identify weaknesses before an external auditor does. Management review should help leaders understand QMS performance and decide what needs attention.

Quick Compliance Check

Start-ups in New Zealand need to ask these questions from their team:

 Can we trace design inputs to outputs?

 Is our risk file updated after important changes?

 Can we identify the current approved document?

 Are complaints and CAPAs investigated properly?

 Are critical suppliers formally evaluated?

 Have we completed an internal audit and management review?

How MSCi Helps Start-Ups Close QMS Gaps?

MSCi begins with a gap analysis to understand the organisation's applicable requirements. We then build a right-sized QMS around the company’s actual processes.

Our support can include documentation, implementation guidance, staff training, internal audits, and preparation for certification audits. We don't aim to create hundreds of procedures. The aim is to create a lean QMS that a small team can understand and maintain.

MSCi states that it has supported more than 1,000 clients worldwide and has served organisations across more than 30 countries.

Frequently Asked Questions (FAQs)

1. How long does it take a start-up to get ISO 13485 certified?

There is no fixed timeline. It depends on the device, QMS maturity, product development stage, and team capacity. A start-up with existing records may move faster than a company building its QMS from scratch. Early gap analysis can reduce rework and delays.

2. Do NZ medical device start-ups need ISO 13485?

Not every medical device supplied in New Zealand must hold ISO 13485 certification. ISO 13485 becomes particularly valuable when a start-up is pursuing international markets or customer requirements.

3. Can start-ups build their QMS themselves with templates?

Yes. Templates can provide a useful starting point for a small team. The risk comes when teams copy templates without matching them to the company's actual processes.

What this covers

See how this looks as a working system

Reading about a requirement and seeing the documentation that satisfies it are different things. In a short demo we open the actual manual, procedures and records set for ISO 13485, show you how each clause is answered and where your existing way of working already fits. You will know what implementation involves before you commit to it.