Company · Quality and standards

Certificates and IEC 62304 practice.

Silurus Software holds ISO 9001:2015 and ISO/IEC 27001:2022 certificates from NQA for the development of software products and leadership consultancy. Its engineers develop medical device software inside the client's ISO 13485 quality management system, under its procedures and design controls, and specialise in IEC 62304, ISO 14971 and medical device cybersecurity.

ISO 9001
Quality management
ISO 27001
Information security
ISO 13485
Inside the client's QMS
Lead engineers
20+ years in MedTech
Status

Certificates and medical device practice.

ISO 9001 and ISO 27001

Silurus Software holds an ISO 9001:2015 certificate for its quality management system (NQA, 171041, valid until 28 March 2027) and an ISO/IEC 27001:2022 certificate for its information security management system (NQA, 728872, valid until 25 August 2029).

ISO 13485 and IEC 62304 specialists

Our engineers specialise in ISO 13485 design controls, IEC 62304 lifecycle work and ISO 14971 risk management. We also advise manufacturers on their software processes and on cybersecurity under IEC 81001-5-1.

Inside the client's ISO 13485 QMS

Our engineers develop medical device software inside the client's certified ISO 13485 QMS, under its procedures, its design controls and its release gates.

Certificates

Certificate scope statement.

The certificates belong to the legal entity Silurus Software Kft. Each one can be checked with the certification body by its number.

StandardScopeCertification bodyCertificate numberValid until
ISO 9001:2015, quality management systemDevelopment of software products. The provision of leadership consultancy servicesNQA (UKAS accredited)17104128 March 2027
ISO/IEC 27001:2022, information security management systemDevelopment of software products. The provision of leadership consultancy servicesNQA (UKAS accredited)72887225 August 2029

Certified legal entity: Silurus Software Kft., Budapest, Hungary.

How we work

IEC 62304 lifecycle work inside the client's ISO 13485 QMS.

Your auditor assesses your quality system, and our work runs inside it. You control Silurus Software as a supplier under ISO 13485 clause 7.4. Our IEC 62304 lifecycle work runs inside your ISO 13485 QMS, and our regulatory specialists and FDA consultants advise on that system as a service of its own.

Silurus Software engineers work under the client's procedures, in the client's templates and tools, and through the client's review workflow. Each document we write is reviewed and approved in the client's document control, and the ones the client's procedures name enter the design and development file and the technical documentation.

The work products are software development plans, software requirements, architecture and detailed design, software risk analysis, verification protocols and reports, traceability matrices, SOUP records, SBOM and threat models. They are written to the client's procedures and go through the client's review before they enter the file.

Client procedures

The client QMS procedures our work runs under.

01

Software development planning

The software development plan is written or extended under the client's design and development planning procedure (ISO 13485 clause 7.3.2, IEC 62304 clause 5.1).

02

Design controls and reviews

Requirements, architecture and detailed design pass the client's design review and approval steps (ISO 13485 clause 7.3).

03

Risk management

Software hazard analysis and risk control measures enter the client's ISO 14971 risk management file. The risk management process stays the client's.

04

Document and record control

Documents are written in the client's templates and reviewed, approved and archived in the client's document control system (ISO 13485 clauses 4.2.4 and 4.2.5).

05

Change control and problem resolution

Changes and defects follow the client's change control, configuration management and problem resolution procedures (IEC 62304 clauses 6, 8 and 9, ISO 13485 clause 7.3.9).

06

Release gates

A software release passes the client's release gate (IEC 62304 clause 5.8). The release decision is the manufacturer's.

Standards

Standards we work to.

StandardSubjectOur work under it
IEC 62304Medical device software lifecycleSoftware development plan, requirements, architecture, detailed design, unit and integration verification, SOUP records, maintenance and release records.
ISO 14971Risk management for medical devicesSoftware hazard analysis, risk control measures and their verification, entered in the client's risk management file. The software safety class under IEC 62304 clause 4.3 is the manufacturer's decision, with our software hazard analysis as its input.
IEC 62366-1Usability engineeringUser interface specification and software input to the client's usability engineering file.
IEC 81001-5-1Security in the health software lifecycleThreat model, security requirements, SBOM, vulnerability handling and security testing.
IEC 60601-1, clause 14Programmable electrical medical systemsSoftware documentation for the PEMS requirements of the device.
EU MDR 2017/745Annex I section 17, Annex IISoftware sections of the technical documentation, prepared with the manufacturer.
FDA premarket guidanceDevice software functions, cybersecurityDocumentation to the FDA guidance on the content of premarket submissions for device software functions and to the FDA premarket cybersecurity guidance, including the section 524B documents, for the manufacturer's submission.
ISO 13485Medical device QMS of the clientDevelopment inside the client's QMS, under its procedures and design controls. Since 2 February 2026 the FDA QMSR (21 CFR Part 820) incorporates ISO 13485:2016 by reference.

The standards are named as our work references them.

Experience

More than 20 years of medical device software development.

20+Years of medical device software development, lead engineers
1999Year our CTO began in medical imaging and radiotherapy software
8+Years inside a client's ISO 13485 QMS
MDR · FDAAudit cycles supported by our QA and DevOps team

Our lead engineers have developed medical device software for more than 20 years and are experts in ISO 13485 and ISO 14971 practice, the design controls, design reviews, risk files and audits that the two standards turn into daily engineering work.

Péter Török, Founder and CTO of Silurus Software, has worked in medical imaging and radiotherapy software since 1999. He was software development director at Siemens Healthcare in Erlangen for the syngo.via imaging platform, head of healthcare at evosoft, and head of R&D at Mediso Medical Imaging Systems in Budapest.

For a European medical technology manufacturer, a QA and DevOps team of ten Silurus Software specialists has supported the software portfolio through several of the manufacturer's audit cycles for the EU MDR and the US market over several years.

IEC 62304ISO 14971ISO 13485 client QMSEU MDRFDAClass IIa and IIb devices
Responsibility

Who is responsible for what.

The split follows EU MDR Articles 10 and 15 and is written down in the supplier agreement under ISO 13485 clauses 4.1.5 and 7.4. The engagement models are described on the How we work page.

The manufacturer

  • Legal manufacturer under EU MDR and towards the FDA
  • Owner of the ISO 13485 QMS and its certificate
  • Names the person responsible for regulatory compliance (PRRC)
  • Regulatory strategy, clinical evaluation and submissions
  • Controls Silurus Software as a supplier (ISO 13485 clause 7.4)
  • Design review approval and the release decision

Silurus Software

  • The software lifecycle work named in the contract, under IEC 62304
  • The deliverables of each work package, in the client's templates
  • Software risk analysis as input to the client's ISO 14971 file
  • Verification evidence and traceability for the software it builds
  • Software sections of the technical documentation, prepared with the manufacturer
Certificate statement

Silurus Software Kft. holds ISO 9001 and ISO 27001 certificates, and develops medical device software inside the client's ISO 13485 quality management system, under its procedures and design controls.

Memberships and partners

Memberships, partners and ratings

  • Medical Valley EMN, the medical technology cluster in Erlangen, Germany: member. Our partner page
  • PRIMUS, the Hungarian association of private healthcare providers: supporting member
  • ELTE Faculty of Informatics, Budapest: official research partner
  • LOGOS, EU Horizon Europe staff exchange: Silurus Software is a partner in LOGOS, which starts in 2027 and is led by the University of Bologna. Partners include the University of Pisa, the University of Amsterdam and Masaryk University, Brno. The project funds exchanges of researchers and engineers between universities and industrial partners.
  • Dun & Bradstreet: awarded AAA, Highest Creditworthiness, in 2025
  • Female Business Leader of the Year 2025 and The Pioneer Award 2026: awarded to Dr. Linda Szántó, CEO of Silurus Software, for the company's business activity
  • ISO 13485:2016 internal auditor training: completed with exam by Dr. Linda Szántó, CEO, in March 2026
FAQ

Questions buyers ask about our certificates.

01

How does Silurus Software work under ISO 13485?

Our engineers develop medical device software inside the client's certified ISO 13485 quality management system, under its procedures, design controls and release gates. That QMS is the one an auditor or notified body assesses. Our engineers specialise in ISO 13485 and IEC 62304, and we also advise manufacturers on their software processes, gap analyses and cybersecurity.

02

Which certificates does Silurus Software hold?

ISO 9001:2015 (NQA, certificate 171041, valid until 28 March 2027) and ISO/IEC 27001:2022 (NQA, certificate 728872, valid until 25 August 2029), both for the development of software products and leadership consultancy.

03

Does your ISO 9001 certificate cover medical device development?

ISO 9001 covers the quality management system of Silurus Software. For a medical device the manufacturer's ISO 13485 QMS applies, and our work runs inside it.

04

Can your team work under our ISO 13485 QMS and procedures?

Yes, this is our working model for medical device projects. Our engineers use your procedures, templates and tools, take part in your design reviews and file their records in your document control system. One European manufacturer has worked with our engineers this way over several years.

05

Who is the legal manufacturer when Silurus Software develops the software?

You are. The manufacturer stays the legal manufacturer, owns the QMS, names the PRRC and makes the release decision. Silurus Software is responsible for the software lifecycle work it is contracted for.

06

Which standards does Silurus Software work to?

IEC 62304, ISO 14971, IEC 62366-1, IEC 81001-5-1, the software clauses of IEC 60601-1, EU MDR 2017/745 and the current FDA premarket software and cybersecurity guidance, inside the client's ISO 13485 QMS.

07

Has Silurus Software supported audits?

A QA and DevOps team of ten Silurus Software specialists has supported a European manufacturer's software portfolio through several of the manufacturer's audit cycles for the EU MDR and the US market over several years. The client name is withheld under our confidentiality agreement.

Talk to us

Questions on our certificates or on your QMS?

A short technical call with our engineering leads covers your procedures, the work package and how our engineers would work under them.