On this page
Post-market surveillance is the part of risk management that too many medical device companies treat as an afterthought — and it’s the part regulators increasingly scrutinize first. ISO 14971 frames risk management as a lifecycle activity, not a pre-launch checkbox. The moment a device reaches real patients in real conditions, new information starts flowing back — and post-market surveillance is the discipline that captures it, feeds it into your risk management file, and keeps your device safe long after it ships. Here’s why ISO 14971 makes post-market surveillance non-negotiable, what it involves, and how to run it without drowning in disconnected spreadsheets.
What post-market surveillance is — and why ISO 14971 requires it
Post-market surveillance (PMS) is the systematic process of monitoring a device once it’s on the market: gathering real-world data on how it performs, analyzing that data for emerging risks, and acting on what you find. ISO 14971:2019 builds this in directly. Its clause on production and post-production activities requires manufacturers to establish a system for collecting and reviewing information after release, and to feed that information back into the risk management process. In other words, the risk management file isn’t “done” at launch — PMS is what keeps it alive.
Regulators reinforce the same expectation. The EU MDR mandates a documented PMS plan and periodic safety reporting, and the FDA requires ongoing adverse-event reporting and, in some cases, formal postmarket surveillance studies. Under all of them, the throughline is identical: continued monitoring is a condition of staying on the market.
Why pre-market testing isn’t enough
Pre-market evaluation happens under controlled conditions, with trained users and defined protocols. The real world is messier. Devices get used by broader patient populations, by clinicians with varied experience, in environments no test plan fully anticipates. That gap is exactly where unanticipated risks live — use errors, rare failure modes, interactions that only appear at scale. Post-market surveillance is the only mechanism that sees them, because it observes the device where it actually operates.
What post-market surveillance actually involves
Effective PMS is a closed loop, not a filing exercise. It has four working parts:
- Data collection. Pull from every available signal — complaints and adverse-event reports, service and repair records, user feedback, and published clinical literature.
- Data analysis. Look for trends, anomalies, and clusters that hint at a risk the pre-market file didn’t capture. One complaint is noise; a pattern is a signal.
- Risk assessment updates. Revise the risk management file when the data warrants it — new hazards, changed probabilities, or risk controls that aren’t performing as assumed.
- Corrective action. Act on what you find: design changes, updated instructions for use, additional user training, or field actions — tracked through CAPA and risk controls to closure.
How PMS feeds back into your ISO 14971 risk management
The reason PMS matters so much under ISO 14971 is that it’s the standard’s feedback loop made real. Data comes in from the field; you evaluate whether it changes your understanding of the device’s risks; you update the risk management file and, if needed, the risk controls; and you verify those controls still reduce risk to acceptable levels. Miss that loop and your risk file becomes a snapshot frozen at launch — which is precisely what an auditor or notified body is trained to catch. (For the framework PMS plugs into, see our guide to ISO 14971 risk management for medical devices.)
This is also where PMS intersects your broader quality system. Post-market data flows through complaint handling, feeds CAPA, and updates controlled documents — which is why keeping these connected, rather than scattered, is what makes the loop actually close.
Building post-market surveillance into a connected QMS
PMS breaks down when its pieces live in separate places — complaints in one spreadsheet, CAPA in another, the risk file in a document nobody has opened since the audit. The fix is a quality system where post-market data, risk management, document control, and corrective action are part of one connected whole.
That’s how TLM is built for medical device companies: complaint and feedback capture, CAPA, medical device document control, and risk records live together and stay linked, so a signal from the field can be traced through analysis, into a risk-file update, and out to a corrective action — with the audit trail assembled as you go. Compliance with ISO 13485 and ISO 14971 stops being a periodic scramble and becomes a byproduct of how the system runs.
Frequently asked questions
What is post-market surveillance in medical devices?
Post-market surveillance (PMS) is the systematic process of monitoring a medical device after it reaches the market — collecting real-world data from complaints, adverse events, service records, and user feedback, analyzing it for emerging risks, and feeding what you learn back into risk management and corrective action.
Why is post-market surveillance required under ISO 14971?
ISO 14971 treats risk management as a lifecycle activity. Its clause on production and post-production activities requires manufacturers to collect and review information after release and feed it back into the risk management file — so PMS is what keeps that file current instead of frozen at launch.
What’s the difference between post-market surveillance and vigilance reporting?
Vigilance (adverse-event or MDR reporting) is the regulatory duty to report specific serious incidents to authorities. Post-market surveillance is the broader, ongoing process of proactively gathering and analyzing all field data to detect risks — vigilance reporting is one input into it, not a substitute for it.
How does post-market surveillance connect to CAPA and risk management?
PMS is the front of a closed loop: field data is analyzed, the risk management file is updated when warranted, and corrective actions are opened and tracked to closure through CAPA. Keeping complaints, CAPA, risk records, and controlled documents connected is what makes that loop actually close.
Who is responsible for post-market surveillance?
The manufacturer holds ultimate responsibility, typically coordinated by quality and regulatory functions with input from clinical, engineering, and complaint-handling teams. Under the EU MDR, a documented PMS plan and a person responsible for regulatory compliance are explicitly required.