Most medical device projects hit the same wall at roughly the same moment. The design works. The prototypes hold up. The team has run its own bench measurements for months and has a folder full of results. Then a regulatory consultant asks which accredited laboratory generated the data, and the answer is nobody — it was measured in-house on a borrowed oscilloscope. That is useful engineering evidence. It is not, on its own, evidence a reviewer will accept in a submission.
Outside testing is not a formality you bolt on at the end. It is a line item that can run from $40,000 to well over $250,000 depending on device class and patient contact, it consumes three to nine months, and it needs devices built to the final design and the final process.
What "accredited" actually means
The word gets used loosely. In practice there are a few distinct things a lab can claim, and they are not interchangeable.
- ISO/IEC 17025 accreditation is the core one. It says an independent accrediting body has audited the lab's competence, equipment calibration, staff qualifications, and quality system for the specific test methods listed on its scope. A lab is never "accredited" in general — it is accredited for a named list of standards. Always ask to see the scope document and confirm your standard is on it.
- The accrediting bodies you will see in the US are A2LA, NVLAP (run by NIST), IAS, and Perry Johnson. Any of them is legitimate. What matters is the scope.
- NRTL status (Nationally Recognized Testing Laboratory) is an OSHA recognition that lets a lab certify products to safety standards and apply a mark. UL, Intertek (ETL), TUV, and CSA are the common ones. This is what you need if your device also has to satisfy a workplace or installation safety requirement.
- The FDA ASCA program (Accreditation Scheme for Conformity Assessment) is a voluntary FDA pilot that recognizes labs for certain basic safety, EMC, and biocompatibility standards. A report from an ASCA-accredited lab gets a lighter review touch on those sections. It is not required, but it removes a common source of back-and-forth.
- GLP (21 CFR Part 58) governs nonclinical safety studies, not electrical or mechanical testing. A biocompatibility house doing implantation studies needs it; an EMC chamber does not.
The test families and who runs them
Very few devices need all of these. Which ones apply falls out of your device classification, whether it touches the patient, whether it plugs into a wall, and whether it carries software. Working out that list early is exactly what the risk file and the design plan are for — see how risk management under ISO 14971 drives the test plan rather than the other way around.
| Test family | Main standard | Typical lead time | Typical cost range |
|---|---|---|---|
| Basic electrical safety | IEC 60601-1 (or IEC 61010 for lab instruments) | 8–16 weeks | $25,000–$70,000 |
| Electromagnetic compatibility | IEC 60601-1-2 | 4–10 weeks | $15,000–$45,000 |
| Biocompatibility | ISO 10993 series | 6–30 weeks | $12,000–$120,000 |
| Sterilization validation | ISO 11135 / ISO 11137 / ISO 17665 | 10–20 weeks | $25,000–$80,000 |
| Packaging and shipping | ISO 11607, ASTM D4169 | 6–14 weeks | $10,000–$30,000 |
| Environmental and life testing | Device-specific protocols | 4 weeks to a year | Highly variable |
The electrical safety and EMC pair are where most connected devices spend the longest. IEC 60601 safety testing and the 60601-1-2 EMC campaign each have their own failure patterns, and each usually costs a retest cycle on a first-generation design. Biocompatibility is driven entirely by contact type and duration — a surface-contact device for under 24 hours is a short cytotoxicity, sensitization, and irritation panel; a long-term implant is a multi-study program that can run most of a year. That is why material selection for patient-contact parts deserves attention before you commit to a resin or an adhesive.
The tests that stay in-house
Not everything goes out. Design verification against your own specifications — accuracy, flow rate, battery run time, force to actuate, cycle life — is normally run by your own team against written protocols, with calibrated equipment and a documented method. The regulator's concern there is not the lab's badge but the traceability of the calibration and the discipline of the protocol. Getting the boundary right between the two is most of what verification and validation means in practice. Human factors work under IEC 62366 is a third category again: run by usability specialists, often in a simulated-use setting rather than a laboratory at all.
What the lab needs before they can start
Labs quote fast and start slow, and the gap is almost always your paperwork. Expect to supply:
- Test samples built to the final configuration — typically three to six units, sometimes more for destructive tests. Units built with prototype parts, hand-soldered rework, or a different enclosure vendor will invalidate the report.
- A written test plan naming the standard, the edition, the applicable clauses, and the justification for anything excluded.
- The device's intended use statement and classification, because clauses turn on and off based on applied-part type and patient environment.
- Schematics, a bill of materials, insulation diagrams, and creepage/clearance drawings for safety testing. This is the single most common reason a 60601-1 project stalls for a month.
- Labeling, the instructions for use, the software version identifier that will ship, and component certificates for the power supply and any pre-certified module.
Every one of those documents also lands in the design history file, so building them properly the first time pays twice.
How to choose a lab
Price differences between labs are real but rarely decisive. What separates a good engagement from a painful one:
- Confirm the exact standard and edition on the accreditation scope. Editions change, and a report against a withdrawn edition is wasted money.
- Ask how they handle failures. A lab that stops the clock, tells you which clause failed, and lets you rework on site during a booked slot will save you an entire retest fee. One that runs to completion and mails you a fail report will not.
- Ask for a pre-compliance or pre-scan option. A day of informal EMC scanning at a fraction of full-test cost catches the majority of first-spin radiated emissions problems while a fix is still cheap.
- Check chamber availability, not just price. Slots at popular labs book six to ten weeks out, so the quoted test duration is the small part of your calendar exposure.
- Prefer a lab that has tested devices like yours, and confirm you receive the full report with measured data rather than a bare certificate.
Firms that keep some capability in-house can compress this considerably by screening a design before it ever reaches a booked chamber — the case for an engineering firm with its own test capability is mostly about catching failures at the cheap stage.
Budgeting the schedule honestly
Assume one failure. Not because your design is bad, but because first-generation hardware nearly always fails at least one clause — a creepage distance a fraction of a millimeter short, radiated emissions three decibels over at a harmonic, an enclosure that does not survive the drop, a label missing a required symbol. A realistic plan carries a retest budget of roughly 30 to 40 percent of the original test fee and four to eight extra weeks. Teams that plan for a clean pass on the first attempt are the ones whose submission timeline slips by a quarter.
The other schedule trap is sequence. Sterilization validation needs final packaging. Packaging validation needs final product. Biocompatibility needs parts made with production tooling and the production sterilization cycle, because a molded part from a soft prototype tool can leach differently than the same geometry from steel. Testing is the last thing you can start, which is exactly why it needs to be the first thing you plan.
Projects House plans the test campaign alongside the design, so the right samples, drawings, and protocols exist when the chamber slot opens instead of six weeks after. If you are mapping out what your device will need and what it will cost to prove it, send the details through our contact form.