Listen now
Key takeaways
- Quality management is a proactive
- defense," emphasizing preventative measures and a company-wide culture, whereas regulatory affairs is the "offense" that secures market approval for products.
- A critical problem for SaMD companies is the failure to implement a Quality Management System (QMS) and design controls from the project's inception, leading to costly and often impossible retrospective compliance efforts.
- Companies must shift their perception from being a software company that happens to make a medical device to a medical device company that utilizes software, prioritizing the stringent regulatory requirements from day one.
- Cybersecurity must be integrated continuously throughout the agile development lifecycle of SaMD, including ongoing penetration testing, instead of being treated as an afterthought or performed only on outdated versions.
- The validity, quality, and documentation of data used to train AI and machine learning models are crucial for regulatory submissions but are frequently underdeveloped by manufacturers.
- Successful MedTech startups conduct thorough early-stage research encompassing market fit, reimbursement strategies, and specific regulatory pathways (e.g., FDA, EU MDR) in addition to technological development.
- Integrating quality, regulatory, and cybersecurity frameworks into the product lifecycle from the outset is significantly more cost-effective and efficient than attempting to incorporate them retrospectively.
How can MedTech innovators balance speed with compliance in medical devices?
In this episode, Christian and Trevor sit down with Karandeep Singh Badwal about the challenges of balancing innovation with quality and regulatory compliance in medical devices, especially with the rise of AI and software-driven solutions. From cybersecurity gaps to the staggering startup failure rate, the conversation highlights why building quality and regulatory compliance into devices from the start is crucial for long-term success.
Karandeep is the founder of QRA Medical, where he helps MedTech innovators navigate the maze of quality and regulatory requirements. He’s also the host of The MedTech Podcast and a LinkedIn creator who makes compliance topics easy to understand (and way less boring than the regulations themselves).
(3:30) AI, Software, and Cybersecurity Challenges
-
Why artificial intelligence data validation remains immature and risky for MedTech.
-
How software versioning and outdated penetration testing complicate cybersecurity.
(9:45) Quality and Development Gaps
-
Why some startups skip quality until it’s too late.
-
The importance of adopting partial QMS early to ease transitions later.
(28:00) Startup Pitfalls and Failure Rates
-
Why many MedTech startups fail.
-
The role of regulatory delays, poor planning, and market misalignment.
(30:00) Keys to Success
- What successful startups do differently.
Thanks to Karandeep Singh Badwal for being on the show: https://karandeepbadwal.com/
Notable quotes
“Quality really is not a department; it's more of a culture. Regulatory is for your product, where quality itself is on the company as a whole.”
“My view is when they start the software development phase, the last thing they think about is quality or regulatory, and they start thinking about the quality management system when it comes to a time that they want to get regulatory approval.”
“I think cybersecurity should typically be thought of as quality in software or quality in a product. Safe products are good products. They're high-quality products.”
“If you build quality and regulatory at the beginning, it's actually cheaper in the long run. Trying to fix something and do things in retrospective is a lot more time costly than it is to just do it properly from the start.”
Frequently asked questions
Bring this work to your device
Need help with fda premarket cybersecurity?
Blue Goat Cyber delivers fda premarket cybersecurity services for medical device manufacturers - from threat modeling to FDA-ready reports.
FDA Premarket Cybersecurity ServicesMore on FDA Premarket Cybersecurity
Keep listening
-
Episode 70
Why MedTech Needs Specialists with Zoltan Kevei and Saby Toth of Bishop & Co
With Zoltan Kevei
-
Episode 69
Science Before Hype in MedTech Investing with Varun Turlapati of Chaanakya Capital
With Varun Turlapati
-
Episode 67
De-Risking Product Decisions in MedTech Startups with Brent Lavin of Ironwood MedTech Partners
With Brent Lavin
-
Episode 65
Who Owns Patient Data Security in Trials with Rob Bedford, CEO of Franklyn Health
With Rob Bedford