Sterilization Validation and Sterile Packaging for Medical Devices (ISO 11135, 11137, 11607)

For a sterile medical device, sterility is not a test result you inspect in at the end. It is a property you design, validate and then keep under control. Sterilization and sterile barrier packaging are two of the most frequently audited areas in medical device manufacturing, and weak evidence here leads straight to 510(k) deficiencies, notified body questions and, in the worst case, recalls. This guide explains how sterilization validation works under ISO 11135, ISO 11137 and ISO 17665, how packaging validation under ISO 11607 fits in, and how to keep the validated state after launch.

What sterilization validation has to prove

Sterilization is a “special process”: its result cannot be fully verified by inspecting or testing the finished product, so the process itself must be validated. ISO 13485 requires validation of sterilization processes and sterile barrier systems (clause 7.5.7), and records of the sterilization process parameters for each batch (clause 7.5.5). Under the US QMSR, which incorporates ISO 13485 by reference, the same expectations apply. In the EU, Annex I of the MDR requires that devices supplied sterile are manufactured and sterilised by an appropriate, validated method.

The target for most terminally sterilised devices is a sterility assurance level (SAL) of 10^-6, meaning a probability of not more than one in a million that a single unit is non-sterile. Validation shows, with documented evidence, that your chosen process reliably delivers that level to every product load you will run.

Choosing the sterilization method

Method	Core standard	Typical fit	Watch out for
Ethylene oxide (EO)	ISO 11135	Heat- and moisture-sensitive devices, complex geometries, many single-use devices	Residuals (ISO 10993-7), aeration time, environmental and regulatory scrutiny of EO facilities
Gamma, electron beam, X-ray	ISO 11137-1, -2, -3	Many polymers, single-use disposables, high volume	Material degradation (discolouration, embrittlement), dose mapping and dose setting
Moist heat (steam)	ISO 17665	Heat-stable, moisture-tolerant devices and reusable instruments	Air removal, load configuration, drying
Other methods (for example vaporised hydrogen peroxide, nitrogen dioxide)	ISO 14937 and method-specific standards	Niche or sensitive products	More validation work to justify, fewer established precedents

Choose the method early, ideally during design and development, because material selection, packaging and even product geometry depend on it. Changing the method late is expensive, since it reopens biocompatibility, material compatibility, packaging and shelf-life evidence.

The validation building blocks

Product and process definition

Start by defining the product family, the sterilization load, the maximum bulk density, the packaging configuration and the most difficult-to-sterilise location in the device. A product family approach is acceptable where products are shown to be equivalent from a sterilization standpoint, but the rationale must be documented.

Bioburden

Bioburden is the population of viable microorganisms on the product before sterilization. ISO 11737-1 describes how to determine it, and it underpins dose setting for radiation and the choice of the cycle for EO. Routine bioburden monitoring, with alert and action levels, shows you whether the manufacturing environment is drifting.

Installation, operational and performance qualification

The sterilizer itself is qualified (IQ and OQ), then performance qualification (PQ) demonstrates the process on actual product loads. This follows the same logic as process validation in general. For EO, PQ typically includes microbiological performance qualification with biological indicators and physical performance qualification measuring temperature, humidity and gas concentration. For radiation, it centres on dose mapping to find the minimum and maximum dose positions in the load.

Method-specific evidence

• EO: half-cycle or fractional-cycle approaches using biological indicators, plus residual testing for ethylene oxide and ethylene chlorohydrin against ISO 10993-7 limits.
• Radiation: sterilization dose established using a method such as VD_max (ISO 11137-2), with periodic dose audits to confirm the dose remains valid as bioburden changes. Confirm the product tolerates the maximum dose.
• Moist heat: cycle development showing the required temperature and time are achieved at the coldest point, with biological indicators such as Geobacillus stearothermophilus.

Product release and routine control

Define how each lot is released: review of cycle parameters, dosimetry or biological indicator results, and the criteria for parametric release if you use it. Record the decision in the device history or batch record.

Sterile barrier systems and packaging under ISO 11607

A sterile product must stay sterile until the point of use. ISO 11607-1 covers requirements for materials, sterile barrier systems and packaging systems; ISO 11607-2 covers validation of forming, sealing and assembly processes. Packaging validation normally has two halves:

• Design and performance testing (11607-1): shows the packaging protects the product through sterilization, distribution and storage. Typical tests include seal strength (for example ASTM F88), gross leak and integrity checks (for example ASTM F2096 or ASTM F1929), distribution simulation (for example ISTA or ASTM D4169) and accelerated aging (for example ASTM F1980) to support the claimed shelf life.
• Process validation (11607-2): shows the sealing and forming process is capable and controlled. Critical parameters such as temperature, pressure and dwell time are challenged through IQ, OQ and PQ, and seal quality is monitored in routine production.

Sample sizes should be justified statistically. For guidance on building defensible plans, see our article on sampling plan generation.

Shelf life and real-time aging

Accelerated aging gives early evidence, but regulators expect it to be confirmed by real-time aging. Plan both from the start: accelerated studies to support the initial claim, and real-time studies running in parallel to confirm it. Shelf-life evidence must cover both the sterile barrier (seal integrity, strength) and the device itself (functional performance, material properties).

Keeping the validated state

• Requalification: repeat or review sterilization validation on a defined schedule, and whenever the product, load, packaging, equipment or facility changes.
• Change control: a seemingly small change, such as a new adhesive, a thicker component or a different pallet pattern, can alter sterilant penetration or dose distribution. Route changes through design change control and assess the sterilization impact.
• Supplier control: contract sterilizers are suppliers and need qualification, quality agreements and audits. See supplier controls and purchasing.
• Trend monitoring: track bioburden, biological indicator failures, seal strength and sterility-related complaints, and feed the results into CAPA.

What regulators expect to see in a submission

In a US 510(k) or PMA, FDA expects a sterilization summary: the method, SAL, the standard followed, validation approach, residual information for EO, packaging description and shelf-life evidence. FDA’s recognised consensus standards and the device-specific guidance help you choose the right level of detail. Under the EU MDR, the sterilization and packaging validation reports sit in the technical documentation under Annex II, and notified bodies review them for Class Is and higher devices. Biological safety evidence, including residuals, links to the biological evaluation under ISO 10993.

Common mistakes

• Validating on a convenient product configuration instead of the hardest-to-sterilise one.
• Treating bioburden as a one-time test rather than a monitored parameter.
• Claiming a shelf life without real-time data or a plan to collect it.
• Changing packaging or load pattern without assessing the sterilization impact.
• Leaving the contract sterilizer outside the supplier quality system.
• Skipping the link between sterilization residuals and the biological evaluation.

Frequently asked questions

What does SAL 10-6 mean?

A sterility assurance level of 10^-6 means there is no more than a one in a million probability that a single sterilised unit contains a viable microorganism. It is the usual target for devices labelled sterile that contact sterile tissue or the vascular system.

Do I need to revalidate sterilization every year?

Standards expect periodic review and requalification, and the interval should be justified by your risk and process data. Radiation dose audits are typically performed on a fixed schedule, and any change to the product, packaging, load or equipment should trigger an assessment of whether revalidation is needed.

Is accelerated aging enough to support shelf life?

Accelerated aging is accepted to support an initial shelf-life claim, but you should confirm it with real-time aging. Regulators and notified bodies expect real-time studies to be started and completed according to a documented plan.

Can a contract sterilizer do the validation for me?

A contract sterilizer usually performs the sterilizer qualification and the cycle work, but the device manufacturer remains responsible for the product-specific validation, the release decision and the evidence in the submission. Define the split of responsibilities in a quality agreement.

Standards are revised regularly and regulators update their recognised-standard lists. Confirm current editions, clause numbers and any device-specific requirements before relying on this guide in a submission.

Related reading

• Process validation: IQ, OQ and PQ: the general validation framework that sterilization follows.
• Biocompatibility and ISO 10993: residuals and biological safety.
• Sampling plan generation: confidence and reliability for packaging tests.
• FDA device labeling requirements: sterile labeling and expiry information.

Talk to the AptSkill team

Want practical training in validation, quality systems or technical documentation? Send us your role and goal.