Memphis, Tennessee
ISO 13485 consulting for the Memphis device cluster.
More FDA-registered device establishments per manufacturer than any metro we cover, a cluster with its own trade council, and a state regulator with a sharps standard of its own.
We work in the Kansas City metro. Engagements here run remotely, with on-site visits at the points where being in the building changes the outcome — gap analysis, internal audit, and the certification audits themselves. We do not maintain an office in this market and would rather say so than imply otherwise.
Why Memphis is a device town before it is a manufacturing town
Memphis has roughly 684 manufacturing establishments under 100 employees (US Census County Business Patterns, 2023), which is modest. What is not modest is how many of them are in devices: the metro carries an unusually high ratio of FDA-registered device establishments to manufacturers for a base that size.
That concentration is orthopedic. Medtronic runs spine and orthopedic operations on Airways Boulevard. Smith+Nephew employs around 2,300 people in the area. MicroPort Orthopedics is headquartered in Arlington, in Shelby County. Globus Medical maintains an FDA-registered Memphis facility following its combination with NuVasive.
It is worth being straight about direction of travel, because the cheerful version of this page would not be accurate. Smith+Nephew announced roughly 150 Memphis job cuts in December 2024, primarily in manufacturing. Stryker chose not to renew its East Memphis office lease in April 2026, while retaining more than 400 people in the area. The cluster is real and it is consolidating at the same time — which, for suppliers, tends to mean tighter qualification requirements rather than fewer.
Industry in Memphis
- Medtronic Spine and orthopedic operations on Airways Boulevard; part of a $250M Medtronic and CEVA commitment announced in 2021
- Smith+Nephew Around 2,300 people in the Memphis area; the company still describes Memphis as a commercial and manufacturing hub
- MicroPort Orthopedics Headquartered in Arlington, Shelby County
- Globus Medical Maintains an FDA-registered Memphis facility following the NuVasive combination
- Greater Memphis Medical Device Council Active local trade body whose roster includes Stryker, Olympus, Bioventus and the University of Memphis
QMSR changed what compliance means here
FDA's Quality Management System Regulation took effect on 2 February 2026, amending 21 CFR Part 820 to incorporate ISO 13485:2016 by reference. Technical amendments published in December 2025 updated cross-references across 179 sections without moving the date or adding requirements.
For an established Memphis manufacturer already certified to ISO 13485, the change was smaller than the noise around it suggested. For one running a QSR-shaped system that never adopted the standard, the gap is real — and it concentrates in risk management, which is considerably more central to ISO 13485 than it was to the old regulation.
FDA also transitioned to inspection process 7382.850 on the same date. If your last inspection predates February 2026, the one after it will not look the same.
Tennessee runs its own OSHA plan, with a device-relevant twist
Tennessee operates an OSHA-approved State Plan — TOSHA — administered by the Tennessee Department of Labor and Workforce Development, with a field office in Memphis. It covers most private-sector and all state and local government workers.
TOSHA maintains several general industry standards that are specific to Tennessee, including Sharps Injury Prevention, Hazard Communication, Toxic Chemicals and Handling, and Electrical Hazards.
The sharps standard is worth knowing about on a device site. It is a state requirement rather than a federal one, and it sits alongside — not inside — your device quality system. Companies that treat safety and quality as one integrated programme tend to catch it; companies that treat ISO 13485 as the whole compliance picture sometimes do not.
The supplier question in a consolidating cluster
The Greater Memphis Medical Device Council is an active local trade body with a member roster including Stryker, Olympus, Smith+Nephew, Bioventus, Grace Medical, Innovia Medical and the University of Memphis. It is a genuinely useful place to understand what the primes here are asking of their suppliers.
What they are asking is getting more specific. When a device company consolidates manufacturing, the suppliers that survive the reshuffle are usually the ones whose quality evidence is easiest to audit — not necessarily the cheapest.
For a Memphis supplier, that usually means process validation for anything that cannot be verified afterwards, batch-level traceability, controlled change, and a corrective action process that produces records rather than reassurance. Much of it can live inside an existing ISO 9001 system if it is built deliberately.
How we work with companies here
We are based in the Kansas City metro and serve Memphis remotely, with on-site visits for gap analysis, internal audit and the certification audits. Memphis is a straightforward trip and we schedule around your audit calendar rather than ours.
Device work suits a remote-first split. Design history file review, CAPA design, risk file work and procedure drafting are better done asynchronously; the parts that need a room are the walkthrough and the audits.
The consultant who scopes the work does the work. No handoff to a junior implementer after the sale.
What an engagement covers
- QMSR and ISO 13485 gap assessment Where your system stands against ISO 13485:2016 as incorporated into 21 CFR Part 820, with the risk management gap called out separately because that is usually where it sits.
- Risk management under ISO 14971 Treated as a living file connected to design change and CAPA. The area where QSR-shaped systems most often fall short of the standard.
- CAPA and complaint handling Sourced from complaints, service records, returns and audit findings, with trending. An inadequate CAPA system remains one of the most commonly cited findings in device inspections.
- Process validation For any process whose output cannot be verified by later inspection — sterilisation, coating, bonding, cleaning. Including operator qualification and revalidation triggers.
- Supplier controls for the orthopedic supply chain Evaluation and re-evaluation criteria proportionate to risk, and the flow-down evidence primes here actually ask for.
- Internal audit and management review Auditor-grade internal audits and a facilitated management review that produces recorded decisions rather than a slide deck.
- Integrated safety and quality Where it makes sense, aligning ISO 13485 with TOSHA obligations including the Tennessee sharps standard, rather than running two disconnected programmes.
Questions we get from companies in this market
We supply a Memphis orthopedic manufacturer. Do we need ISO 13485?
Sometimes, but less often than it is sold. What primes here generally require is specific evidence — validation of processes that cannot be verified afterwards, batch traceability, controlled change, and a corrective action loop with records. A well-built ISO 9001 system can carry most of that. Ask your customer what they actually require in writing before committing to a second certification, and get a second opinion if the answer is vague.
Our last FDA inspection was before February 2026. What changes?
FDA transitioned to inspection process 7382.850 on 2 February 2026, alongside QMSR taking effect. The substance being inspected is now ISO 13485:2016 as incorporated into Part 820. If your system was built to the old QSR and never adopted the standard, the most likely gaps are in risk management and in the connection between risk, design change and CAPA.
Is the Memphis device cluster shrinking?
It is consolidating rather than disappearing, and we would rather say that than sell you an optimistic story. Smith+Nephew cut around 150 manufacturing jobs in late 2024 and Stryker gave up office space in 2026 while keeping over 400 people here. Meanwhile Medtronic's Airways Boulevard operation and a broad supplier base remain. For suppliers the practical effect of consolidation is usually tighter qualification, not less demand.
Does Tennessee's state OSHA plan affect our quality system?
Not directly, but it affects your compliance picture. TOSHA is an approved State Plan with several standards unique to Tennessee, including Sharps Injury Prevention. That sits alongside ISO 13485 rather than inside it. Companies running quality and safety as one programme usually catch it; companies treating ISO 13485 as the whole picture sometimes miss it entirely until an inspection.
Can you run our internal audits rather than build the system?
Yes, and for established manufacturers that is often the more useful engagement. Internal audit must be objective — auditors cannot audit their own work — which is difficult inside a small quality team. Using an external auditor for internal audits is permitted and common. It is certification that must be independent, not internal audit. See internal audits.
What will certification actually cost?
Audit days are set against the number of people within your certification scope under a published table, then adjusted for factors like design responsibility and site count. We walk that arithmetic openly rather than quoting a number before scope exists — the certification cost breakdown shows the table and the adjustments so you can check any quote you receive.
Other standards we support in Memphis
Other standards in Memphis
This page is about ISO 13485, which is what this metro's industry asks for most often. We cover these here too.
- ISO 9001 in Memphis Memphis is known for orthopedic devices. That cluster is contracting rather than growing, which changes which certificate is worth owning here.