Compliance · Medical devicesUpdated September 29, 2026

ISO 14155 and your clinical data system

ISO 14155 sets good clinical practice for clinical investigations of medical devices. It expects validated electronic systems, complete records and structured reporting of adverse events and device deficiencies. Here is what that means for your EDC.

  • Device deficiency forms
  • Audit trail and access control
  • Long post-market follow-up

Free sandbox · No credit card · 21 CFR Part 11 aligned

Device deficiency · Unscheduled
Subject 003-0011 · Investigational deviceSubmitted

Date observed

DDDTC
18-May-2027

Deficiency type

DDTYPE
Malfunction

Could it have led to a serious adverse device effect?

DDSADE
NoYes

Linked adverse event

DDAE
NoneYes
Deficiencies recorded even without harm

Key points

  • ISO 14155 (current edition 2020) is the international standard for good clinical practice in clinical investigations of medical devices in humans.
  • It covers the clinical investigation plan, ethics, risk management, monitoring, safety reporting, data management and the final clinical investigation report.
  • Safety reporting distinguishes adverse events, adverse device effects, serious adverse device effects and device deficiencies, including deficiencies that could have led to serious harm.
  • Electronic data systems should be validated, with audit trails, access control and data that is attributable, accurate and complete.
  • In the EU, clinical investigations under the Medical Device Regulation apply ISO 14155 principles, and device studies often continue into post-market clinical follow-up.

Data management

What the standard expects from the data system

ISO 14155 expects sponsors to use electronic systems that are validated for their intended use, protect data from unauthorised access and change, record changes in an audit trail, and allow data to be traced back to source. Those are the same principles behind 21 CFR Part 11 and GCP for medicines, applied to device studies.

In practice that means a field-level audit trail with reasons for change, role-based access with site separation, electronic signatures that are re-authenticated, and locked, approved forms so data collection does not change silently. Capture provides those controls; validation for your intended use remains the sponsor's responsibility, supported by documentation on Enterprise plans. See 21 CFR Part 11 compliant EDC.

Device-specific data

Device studies record things drug trials do not: device identifiers and lot numbers, procedure details, operator experience, device performance measures and deficiencies. Build them as structured fields so they can be analysed and reported.

Weight changed 68.0 to 68.5 kg

Site coordinator · Reason: Transcription error

9f2c…a71e

Query Q-0014 answered on Weight

Site coordinator · Reason: Source checked

4b8d…c203

Vital signs form locked

Data manager · Reason: Visit cleaned

e61a…58f0
Verify chain Intact

Safety reporting

Device safety terms

TermMeaning
Adverse event (AE)Any untoward medical occurrence in a participant, whether or not related to the device
Adverse device effect (ADE)An adverse event related to the use of the device
Serious adverse event (SAE)An adverse event meeting seriousness criteria, such as death or hospitalisation
Serious adverse device effect (SADE)An adverse device effect that meets seriousness criteria
Unanticipated SADE (USADE)A SADE not identified in the risk analysis
Device deficiencyInadequacy in identity, quality, durability, reliability, safety or performance, such as malfunction or use error

Check the exact definitions and reporting timelines in the standard and the regulations that apply to your investigation.

In Capture

Safety forms built for devices

Adverse events use the AE form with the minimum dataset enforced, and serious events raise routed safety alerts with the SAE timeline tracked from site awareness. Add a device deficiency form and device relationship fields to the same study, so every event and deficiency is linked to the participant and device.

  • AE minimum dataset enforced.
  • SAE timeline and investigator sign-off.
  • Device deficiency and device relationship fields.
EDC for medical device trials

SAE timeline

  1. SAE reported

    Day 0 · 09:12

  2. Safety alert acknowledged

    Medical monitor · 09:40

  3. Site staff attestation

    Study coordinator · 11:05

  4. AE sign-off (PI / Sub-I)

    Awaiting signature

Complete AE sign-off

Build a device study with deficiency forms

Set it up in the free sandbox.

Build your device study free

After approval

Post-market clinical follow-up

Device evidence does not stop at market approval. Under the EU MDR, manufacturers run post-market clinical follow-up to confirm safety and performance over the device's lifetime, often for years. Patient-reported outcomes such as the KOOS and Harris hip score or Oswestry Disability Index, completed remotely, keep follow-up practical.

Keep definitions and forms consistent between the pre-market investigation and post-market follow-up so data can be compared. See post-market clinical studies.

Study build

ISO 14155 data checklist

Validated system

Validation for intended use documented.

Device data

Identifiers, lots, procedure and performance fields.

Safety forms

AE, ADE, SAE, SADE and device deficiency.

Reporting timelines

Per the standard and applicable regulations.

Monitoring plan

Source verification of critical data.

Follow-up

Consistent forms for post-market follow-up.

FAQ

Questions teams ask before they switch

Something not covered here? Ask us directly.

Is ISO 14155 used outside the EU?

It is an international standard used in many countries. Check local requirements for your investigation.

What records does ISO 14155 expect?

Among others, the clinical investigation plan, investigator's brochure, case report forms, safety reports, monitoring records and the clinical investigation report.

What is ISO 14155?

The international standard for good clinical practice in clinical investigations of medical devices in human subjects. The current edition was published in 2020.

Does ISO 14155 require an EDC?

No, but electronic systems used must be validated and maintain data integrity, including audit trails and access control.

What is a device deficiency?

An inadequacy of a device in identity, quality, durability, reliability, safety or performance, such as a malfunction or use error.

Is Capture ISO 14155 certified?

ISO 14155 applies to how a clinical investigation is conducted, not to software certification. Capture provides controls such as audit trails, e-signatures and access control that support compliant conduct.

Can post-market follow-up run in Capture?

Yes. Long follow-up schedules with remote questionnaires and reminders are supported.

Can I try it free?

Yes, in the free sandbox with every feature.

Device investigations with the right records

Safety, deficiencies and follow-up in one study. Free sandbox.

Build your device study free