Medical Device Packaging for Startups: The ISO 11607 Roadmap
Packaging is where medical device startups get blindsided: the device is validated, the 510(k) or CE file is coming together — and then someone asks for the packaging validation, and it doesn't exist. This guide maps what ISO 11607 requires, what it costs, how long it really takes, and the sequencing that avoids the classic six-month delay.
- For sterile devices, packaging is legally part of the device: EU MDR and FDA both expect packaging validated to ISO 11607, and auditors ask for it by name.
- ISO 11607 has two parts — Part 1 governs materials and design of the sterile barrier system, Part 2 governs validation of the forming, sealing, and assembly processes (IQ/OQ/PQ).
- The schedule killer is stability: shelf-life claims need aging evidence, and even accelerated aging (ASTM F1980) takes weeks to months — real-time aging runs in parallel for years.
- Started early, packaging validation is a manageable 6–12 month workstream; started late, it is the critical path that delays your launch.
Table of Contents
- 01Why packaging fails audits
- 02ISO 11607, decoded
- 03The sterile barrier system
- 04Process validation: IQ, OQ, PQ
- 05Test methods decoded
- 06Performance testing and aging
- 07The roadmap (interactive)
- 08Working with contract packagers
- 09Timeline and budget reality
- 10Worked example: a 9-month plan
- 11The five classic startup mistakes
- 12FAQ
Why Packaging Is Where Startups Fail Audits
A sterile medical device is not a device in a package — regulatorily, the sterile barrier system is part of the device. It maintains sterility from the sterilization step to the point of use, and it must demonstrably keep doing so for the entire labelled shelf life, through real-world shipping, handling, and storage.
That's why both the EU MDR's General Safety and Performance Requirements and FDA's expectations point to the same harmonized standard: ISO 11607 (Parts 1 and 2, current editions with amendments — verify the current status when you start, as the standard was amended in 2023 to strengthen MDR alignment). Notified bodies and FDA reviewers ask for packaging validation by name, and "our packaging supplier says it's fine" is not evidence. The evidence is a validation file you own: material qualification, sealed-process validation, integrity and strength testing, transport simulation, and aging data supporting the shelf-life claim on your label.
Startups fail here for a structural reason: packaging feels like a procurement task, so it's scheduled last — after design freeze, after sterilization contracts, right before submission. But packaging validation has weeks-to-months of unavoidable elapsed time baked in (aging, transport testing, sterilization cycles). Scheduled last, it becomes the critical path.
ISO 11607, Decoded
| Part | Governs | In practice, you must show |
|---|---|---|
|
ISO 11607-1 Materials & systems |
Requirements for materials, sterile barrier systems, and packaging systems | Materials are qualified for your sterilization method; the SBS design maintains sterility and integrity; the packaging system protects through distribution; usability — aseptic presentation — is evaluated |
|
ISO 11607-2 Process validation |
Validation requirements for forming, sealing, and assembly processes | Your (or your contract packager's) forming and sealing processes are validated via IQ/OQ/PQ, with defined process windows, monitoring, and revalidation criteria |
Two clarifications that save startups money. First: the burden is on the legal manufacturer — you — even when a converter supplies pre-validated pouches and a contract packager seals them. Their data supports your file; it doesn't replace it, and you must bridge it to your device, your loading configuration, and your sealing equipment. Second: supporting standards carry the test methods — the EN 868 series for material specifics, ASTM methods for the actual tests (next sections). You don't need to buy the whole library on day one, but your test lab will quote against these designations, so recognizing them keeps you in control of scope.
The Sterile Barrier System: Your Core Design Decision
The sterile barrier system (SBS) is the minimum packaging that maintains sterility — typically one of three formats:
- Pre-made pouches (e.g., Tyvek/film or paper/film, chevron seal) — lowest entry cost, fastest route, ideal for low volumes and first launches. Sealing is a simple heat-seal process to validate.
- Thermoformed tray with lid (rigid PETG/PP tray, Tyvek or paper lid) — best product protection and presentation, standard for instruments and implants, but adds a forming process to validate and tooling to procure.
- Header bags / form-fill-seal — efficient at volume; usually a later-stage format, not a startup's first move.
Material choice is dictated first by your sterilization method: EtO needs gas-permeable material (Tyvek or medical paper) in the barrier; gamma/E-beam tolerates all-film constructions but degrades some polymers; steam demands heat-resistant materials. Change the sterilization method later and you restart packaging validation — which is why the sterilization decision belongs before the packaging design, not after.
Unless your device physically demands a tray, start with a validated pre-made pouch from an established medical converter. You inherit mature material documentation, skip forming validation entirely, and can move to a thermoformed tray at scale — when volume justifies tooling and your revenue funds it. Prototype tray iterations, when you get there, are exactly where fast printed tooling earns its keep.
Process Validation: IQ, OQ, PQ Without the Mystique
ISO 11607-2 asks a simple question in formal clothing: can your sealing (and forming) process produce intact sterile barriers, every time, across the real variation of production? The answer is built in three stages:
- IQ — Installation Qualification. The equipment is installed correctly: calibrated instruments, verified utilities, documented settings. Mostly paperwork plus calibration certificates.
- OQ — Operational Qualification. The process window is established: seal temperature, pressure, and dwell are challenged at their worst-case limits, and samples from the window edges must still pass integrity and strength testing. This defines the limits your production must then stay inside.
- PQ — Performance Qualification. The process proves itself under real production conditions: typically three independent runs with actual product (or validated equivalents), normal operators, normal variation — all passing.
The tests behind pass/fail are standardized and your lab will quote them by number: seal strength per ASTM F88 (with acceptance criteria you justify — commonly around 1.5 N/15 mm minimum for peelable medical seals, but set yours from your own risk analysis), and integrity via dye penetration (ASTM F1929), bubble emission (ASTM F2096), or visual inspection (ASTM F1886) as appropriate to your format. Using a contract packager? They hold the IQ/OQ backbone; you still own the PQ bridge to your device and the rationale in your file.
Test Methods Decoded: What Your Lab Will Quote
Test labs quote by standard designation, and the difference between a controlled validation budget and an inflated one is knowing what each method does, when it applies, and roughly what it costs. The working set for a startup:
| Method | What it tests | When you need it | Indicative cost (€) |
|---|---|---|---|
|
ASTM F88 Seal peel strength |
Force to peel the seal, per 15 mm strip, at defined angle/speed | OQ window edges, PQ runs, post-aging, post-transport | 300–800 per sample set |
|
ASTM F1929 Dye penetration |
Channel leaks in porous-material seals (Tyvek/paper) via dye wicking | Integrity gate for pouches and Tyvek-lidded trays, every test point | 200–500 per set |
|
ASTM F2096 Bubble emission |
Gross leaks in the whole package under internal pressurization | Whole-package integrity, esp. after transport simulation | 200–500 per set |
|
ASTM F1886 Visual inspection |
Seal appearance: channels, folds, incomplete seals, by trained inspection | Cheap first gate at every stage; never sufficient alone | Minimal / internal |
|
ASTM F1980 Accelerated aging |
Time-compressed shelf-life evidence via elevated temperature (Q10 model) | Every shelf-life claim, sized to the claim | 2,000–8,000 incl. chamber + post-tests |
|
ASTM D4169 / ISTA Distribution simulation |
Compression, vibration, drop, climate on the shipping configuration | Once per packaging system (worst case), re-run on major changes | 3,000–10,000 per configuration |
Three budget-control rules. Sequence cheap before expensive: visual (F1886) screens everything; dye or bubble catches integrity failures before you spend on strength panels. Test worst case, claim family: one properly justified worst-case configuration (largest/heaviest device, biggest pouch) can cover a family of similar packs — write the rationale, or pay per SKU. Fix acceptance criteria before testing starts: a lab report against undefined criteria is data, not evidence — your protocol states the pass/fail values (e.g., minimum peel force from your risk analysis) before samples ship.
You will hear a minimum peel strength of ~1.5 N/15 mm cited as "the requirement" for peelable medical seals. It is a widely used convention, not a number printed in ISO 11607 — the standard requires you to define and justify acceptance criteria. Adopt the convention if your risk analysis supports it, but own the rationale in your file.
Performance Testing and Aging: The Schedule Killer
A validated seal on day zero is half the story. You must show the packaging system survives distribution and time:
Transport simulation. Packaged product goes through a standardized distribution challenge — ASTM D4169 or ISTA protocols: compression, vibration, drops, climate conditioning — and the SBS must come out intact. Plan for the worst-case shipping configuration, and expect the outer packaging design (not just the SBS) to determine pass or fail.
Stability / aging. Your labelled shelf life needs evidence. The accepted approach: accelerated aging per ASTM F1980 (elevated temperature, commonly 50–55 °C, using the Q10 model — roughly, each 10 °C above reference halves the required time) to support the claim at launch, with real-time aging running in parallel to confirm it. The arithmetic that surprises founders: a 3-year claim at 55 °C/Q10=2 still needs on the order of 17–20 weeks in the chamber — before testing the aged samples. This is the single longest fixed lead time in the entire roadmap, which is why aging starts as early as the design allows, not after everything else is done.
Accelerated aging supports the shelf-life claim at market entry; it doesn't end the obligation. Real-time samples age on the shelf for the full claimed period, tested at intervals — budget for storing and testing them years after launch.
The Roadmap: Six Stages From Zero to Validated
Tap each stage. Durations assume a startup using a pre-made pouch and a contract packager — the fastest sensible route. Stages 4 and 5 overlap deliberately: aging chambers run while transport testing proceeds.
Indicative sequencing for planning purposes. Your notified body, test lab, and sterilization provider set the binding requirements — engage them before locking the plan.
Working With Contract Packagers: The Responsibility Split
Most startups should outsource sealing to a contract packager — and most audit findings around outsourced packaging trace to the same confusion about who owns what. The split, in one table:
| Element | Contract packager typically holds | You (legal manufacturer) always hold |
|---|---|---|
| Equipment qualification | IQ/OQ of their sealing equipment, calibration records | Assessment that their qualification covers your process window |
| Process validation | Generic process capability data, their quality system | PQ bridge: runs with your device, your configuration, your acceptance criteria |
| Materials | Converter documentation pass-through | Material qualification rationale for your sterilization method and shelf life |
| Shelf-life claim | Nothing — they cannot own this | Aging program, claim justification, real-time follow-up |
| Change control | Notifying you of their changes (contractual!) | Evaluating every change for revalidation impact |
| The technical file | Supplying documents on request | The file itself, the rationale, the audit answers |
Three contract clauses that prevent the classic failures: a change-notification obligation (their material or equipment change is your revalidation trigger — you must hear about it before it ships), a documentation-access right (audit-time access to their IQ/OQ records, not just certificates), and defined quality acceptance criteria in the quality agreement matching your protocol values — so their release testing and your file speak the same numbers. A packager who resists these clauses is telling you something important early, while switching is still cheap.
Timeline and Budget Reality
Planning ranges for a first sterile device, pouch-based, contract-packed — assuming no failures and no redesigns (budget contingency for both):
| Workstream | Elapsed time | External cost (€) |
|---|---|---|
| SBS design + material qualification (leveraging converter data) | 4–8 weeks | 2,000–8,000 |
| Process validation (IQ/OQ/PQ, contract packager + your bridge) | 6–12 weeks | 8,000–25,000 |
| Transport simulation (ASTM D4169 / ISTA) | 3–6 weeks | 4,000–12,000 |
| Accelerated aging + post-aging testing (per shelf-life claim) | 12–26 weeks | 6,000–20,000 |
| Documentation, protocols, reports | parallel | internal / consultant 5,000–15,000 |
Realistic total: €25,000–80,000 and 6–12 months elapsed, with aging dominating the calendar. The spread is mostly claim length (a 1-year initial claim is dramatically faster than 3 years — a common startup strategy is launching with a shorter claim and extending it as real-time data accrues) and how much converter/packager documentation you can legitimately leverage.
Worked Example: A 9-Month Plan That Held
A single-use instrument startup, EtO-sterilized, targeting CE marking with a 2-year initial shelf-life claim. Their packaging plan, as it actually ran:
Months 1–2: Sterilization method locked (EtO — dictating a breathable barrier), pre-made Tyvek/film chevron pouch selected from an established converter, shelf-life claim deliberately set at 2 years (not the 5 the marketing team wanted) to keep the chamber time at ~13 weeks. Contract packager chosen; quality agreement signed with change-notification and documentation-access clauses.
Months 2–4: Material qualification by bridging converter data to their EtO cycle — one confirmation sterilization run on samples, €3,100. OQ leveraged the packager's equipment files; the startup's protocol added their pouch size at window edges: F88 + F1929 on 4 corner conditions, €2,400.
Month 4 — the critical move: the packaging spec froze and accelerated aging started immediately (55 °C, Q10=2, sized for 2 years ≈ 13 weeks), while everything else continued in parallel. This single sequencing decision is why the plan held.
Months 4–6: PQ — three production-condition runs with real devices at the packager, all passing; transport simulation per ASTM D4169 on the worst-case shipper (12 units), one failure in compression traced to the outer carton, fixed with a divider redesign and re-run: €9,800 total including the retest.
Months 7–8: Aged samples out of chamber; post-aging F88/F1929 passed. File compiled: protocols, reports, rationale, revalidation triggers written into the QMS. Month 9: packaging section submitted with the technical file — off the critical path by six weeks. Total external spend: ≈€34,000.
The counterfactual is the common story: same startup starting packaging at month 6 instead of month 1 discovers the 13-week chamber time after everything else is done — and launches five months late. The plan above contains no magic; it contains an early start and one parallel track.
The Five Classic Startup Mistakes
- Starting packaging after design freeze. Packaging validation has fixed elapsed time; started last, it delays launch. Start the SBS decision alongside sterilization selection.
- Choosing sterilization after packaging. The sterilization method dictates permissible materials. Get the sterilization contract direction first.
- Treating supplier certificates as validation. Converter and packager data supports your file — the legal manufacturer's validation rationale, PQ bridge, and shelf-life claim are yours alone.
- Claiming more shelf life than you need. Every extra claimed year is weeks in the aging chamber and cost in testing. Launch with the claim your commercial plan actually requires; extend later on real-time data.
- No revalidation triggers. Material change, new sealing equipment, new packager, design change — each has validation consequences. Write the triggers into your quality system on day one, or discover them in an audit finding.
Frequently Asked Questions
What is ISO 11607 and is it mandatory?
ISO 11607 is the standard for packaging of terminally sterilized medical devices — Part 1 covers materials and sterile barrier system requirements, Part 2 covers validation of forming, sealing, and assembly processes. It is the harmonized/recognized route to meeting EU MDR and FDA packaging expectations, and in practice auditors and reviewers ask for conformity to it by name.
What is a sterile barrier system (SBS)?
The minimum packaging configuration that maintains sterility from sterilization to the point of use and allows aseptic presentation — typically a pouch, a thermoformed tray with lid, or a header bag. Protective outer packaging around it completes the packaging system.
How long does ISO 11607 packaging validation take?
For a pouch-based startup route with a contract packager: typically 6–12 months elapsed, dominated by accelerated aging (a 3-year shelf-life claim at 55 °C commonly needs on the order of 17–20 weeks in the chamber before post-aging testing). Started early and run in parallel with other workstreams, it stays off the critical path.
How much does medical device packaging validation cost?
Realistic external costs for a first pouch-based device: roughly €25,000–80,000 covering material qualification, IQ/OQ/PQ, transport simulation, aging, and testing — plus contingency for failures. Tray-based formats add tooling and forming validation.
What is accelerated aging per ASTM F1980?
A method for generating shelf-life evidence faster by storing packaged product at elevated temperature and applying the Q10 model (commonly Q10=2: reaction rates assumed to double per 10 °C). It supports the claim at launch, while real-time aging runs in parallel for the full claimed period to confirm it.
What is IQ, OQ, PQ in packaging validation?
The three stages of process validation under ISO 11607-2: Installation Qualification (equipment installed and calibrated correctly), Operational Qualification (the process window challenged at worst-case limits, with samples passing strength and integrity testing), and Performance Qualification (typically three production-condition runs with real product, all passing).
What seal strength does ISO 11607 require?
ISO 11607 does not print a number — it requires the manufacturer to define and justify acceptance criteria. A minimum peel strength around 1.5 N/15 mm (ASTM F88) is a widely used industry convention for peelable medical seals; adopt it only with a rationale from your own risk analysis, documented in your protocol before testing.
What does EU MDR require for medical device packaging?
The MDR's General Safety and Performance Requirements demand that packaging maintain sterility through the labelled shelf life and enable aseptic presentation — demonstrated in practice by conformity to ISO 11607 (materials and design per Part 1, validated processes per Part 2), with the evidence held in the technical file that notified bodies review.
Can I rely on my packaging supplier's validation?
Only as supporting evidence. Converter material files and a contract packager's IQ/OQ substantially reduce your work, but the legal manufacturer owns the validation rationale, the PQ bridge to the specific device and configuration, and the shelf-life claim.