Device Master Record

What it is

Device Master Record (DMR) is the complete, controlled set of specifications and procedures that tells your company how to manufacture, inspect, package/label, install, and service a finished device. Under legacy U.S. QSR it is defined at 21 CFR 820.181; under FDA’s updated QMSR, the analogous requirement is the ISO 13485:2016 §4.2.3 “medical device file”. The DMR drives consistent build and release and must stay synchronized with design outputs, risk files, and labeling.

Regulatory framework

• United States: QSR DMR content and control (21 CFR 820.181; related DHR §820.184; DHF §820.30(j)). FDA’s QMSR aligns with ISO 13485; firms must maintain equivalent device files covering production and service controls (QMSR; ISO 13485 §4.2.3, §7).
• European Union: No “DMR” term in MDR. The equivalent is technical documentation covering manufacturing/inspection/labeling (MDR Annex II §3–§4; Annex I Ch. III for labeling; Annex XI for production controls).
• Standards linkage: ISO 13485 (documented procedures, records), ISO 14971 (risk controls traced into specs), IEC 62366-1 (usability), relevant product/sterilization/packaging standards.

Key elements / What it covers

• Device specifications: Drawings, materials, software versions, component specs, and acceptance criteria.
• Production process specs: Work instructions, equipment and environmental requirements, process parameters, and validated states.
• Quality assurance: Incoming/in-process/final acceptance procedures, sampling plans, release criteria, and test methods.
• Packaging & labeling: Label content/UDI placement, IFU, packaging materials, sealing and integrity specs, shelf-life rationale.
• Installation & servicing: Procedures and checks for installed/serviced devices where applicable.

Process — how it works

• 1) Derive from design outputs: Convert verified/validated design outputs into controlled manufacturing specs with clear acceptance criteria (21 CFR 820.30; ISO 13485 §7.3).
• 2) Validate key processes: Perform and document process validation, sterilization/cleaning validation, software/tooling validation as needed (21 CFR 820.75; ISO 13485 §7.5.6).
• 3) Assemble the DMR / device file: Compile all specifications, procedures, and forms; index for traceability to risks (ISO 14971) and standards.
• 4) Control & train: Release via document control; train personnel; ensure only current versions are in use (21 CFR 820.40; ISO 13485 §4.2.4–§6.2).
• 5) Produce & record: Build product per DMR; capture build evidence in the Device History Record (DHR) or ISO production records (21 CFR 820.184; ISO 13485 §7.5.1).
• 6) Maintain & improve: Update after changes, CAPA, complaints, or PMS/PMCF signals; keep labels/UDI and databases aligned.

Common pitfalls

• Unclear acceptance criteria in specs, causing subjective release decisions.
• Process changes executed on the floor before formal DMR update and re-validation.
• Label/UDI versions in production that do not match approved masters.
• Missing linkage between risk controls (ISO 14971) and work instructions/tests.
• Outdated equipment qualifications and calibration records tied to DMR steps.

Quick checks / Tips

• Can an experienced operator build and release the device using only the DMR and referenced WIs/forms?
• Does each specification point to objective acceptance criteria and the test method?
• Are validations current for sterilization, special processes, and software tools?
• Do DHRs show full conformity to the latest DMR revision for every lot/serial?