The Design Control Process in New Product Development

A quality system is not paperwork added before launch. Here are the standards that apply, the design controls behind them, and how much formality a startup actually needs.

January 26, 20163 min read

Onega Ulanova

Written by Onega Ulanova, IRCA Lead Auditor, MS Eng. & Tech. Management, Executive MBA

Co-Founder, Quality Management Executive & Lead Auditor

Published January 26, 2016Updated August 18, 2026

A quality management system is not paperwork you add before launch. It is the set of decisions, reviews and records that make a product repeatable — and retrofitting it after the design is frozen is where programs lose months.

The design control process is the documented chain from user needs to design inputs, outputs, verification, validation and transfer to manufacturing. This guide compares ISO 9001, ISO 13485 and IATF 16949, walks the design controls stage by stage, and shows how testable requirements, FMEA and design verification and validation keep quality problems out of production.

Quality system across product development — design inputs, design reviews, verification, validation and design transfer feeding a design history file
Design controls are a chain. Break one link and the ones after it cannot be evidenced.

Which standard applies to your product

Standard
Applies to
What it mainly governs
Certification typically needed?
ISO 9001
Any manufactured product or service
General quality management, process control, continual improvement
Often required by industrial customers
ISO 13485
Medical devices
Design controls, risk management, traceability, records
Yes, for most regulated markets
FDA 21 CFR Part 820
Medical devices sold in the US
Design controls and the design history file
Regulatory requirement, not a certificate
IATF 16949
Automotive supply chain
APQP, PPAP, defect prevention
Yes, to supply tier-one customers
AS9100
Aerospace and defence
Configuration management, counterfeit-part control
Yes, for the supply chain
ISO 14971
Medical devices
Risk management across the lifecycle
Applied alongside ISO 13485

Consumer products usually need none of these formally — but they still need the underlying discipline, because a contract manufacturer will ask for specifications, tolerances and acceptance criteria regardless of whether an auditor ever will.

Design controls, stage by stage

Stage
What it means in practice
Evidence produced
Design inputs
Turn user needs into measurable, testable requirements
Requirements specification with acceptance criteria
Design outputs
Drawings, models, BOM, software and specifications
Released design package under revision control
Design reviews
Cross-functional checkpoints at planned milestones
Signed review minutes with actions and owners
Verification
Did we build the product right, against the spec?
Test protocols and reports with pass/fail data
Validation
Did we build the right product, for real users?
Usability and field validation reports
Design transfer
Hand the design to manufacturing so it can be built repeatably
Work instructions, inspection plan, first-article report

Verification and validation are not synonyms, and confusing them is the most common quality failure in early-stage programs. A part can meet every dimension on the drawing and still be unusable in the field.

Verification asks whether the product matches the specification. Validation asks whether the specification was right.

Requirements that can actually be tested

Weak requirement
Testable requirement
The housing should be durable
Survives 10 drops from 1.2 m onto concrete with no loss of function
The device should be easy to use
90% of untrained users complete setup in under 3 minutes without assistance
Battery life should be good
Delivers 8 hours of continuous operation at 25 °C after 300 charge cycles
The finish should look premium
Gloss level 60±5 GU, no visible sink marks over 0.05 mm

Every requirement should name the measurement, the condition and the threshold. If nobody can write a test for it, it is a wish, not a requirement — and it will be argued about during production.

Risk management, in proportion

  • Start a design FMEA at concept, not at tooling. Its value is in changing the design, which is only possible early.
  • Rank by severity first. A rare failure that injures someone outranks a frequent cosmetic defect.
  • Tie each high risk to a control and a test. An unmitigated row in an FMEA is a promise you did not keep.
  • Run a process FMEA before design transfer. Most field failures come from assembly variation, not from the design.
  • Revisit after every significant change. A material substitution invalidates the analysis that justified it.

What manufacturing needs from the quality system

Deliverable
Purpose
Controlled drawings with GD&T
Defines what is inspectable and what is cosmetic
Inspection plan and sampling criteria
Tells the factory what to measure and how often
First article inspection report
Proves the first parts off tooling meet the drawing
Work instructions and assembly aids
Makes the build repeatable across operators and shifts
Non-conformance and CAPA process
Turns a defect into a fixed root cause rather than a rework pile
Supplier qualification records
Prevents an unvetted second-source part entering the line

Our design for manufacturing work covers turning a validated design into a build package, and choosing a manufacturer covers how to judge whether a factory's own quality system is real.

How much quality system does a startup need?

Situation
Sensible level of formality
Consumer product, first run under 1,000 units
Requirements spec, drawing control, inspection plan, FAI
Industrial product sold to businesses
The above plus ISO 9001-aligned processes and CAPA
Medical device
Full ISO 13485 and ISO 14971 from day one — retrofitting is far more expensive
Automotive or aerospace supplier
Customer-mandated system, in place before you quote

The minimum viable quality system is the one that lets you answer three questions with records rather than memory: what was specified, what was verified, and what changed since.

Frequently asked questions

What is a quality management system in product development?

It is the documented set of processes, reviews and records that control how a product is specified, designed, verified and transferred to manufacturing. In development it shows up as requirements with acceptance criteria, design reviews, verification and validation testing, change control and a traceable record of what was decided and why.

What is the difference between verification and validation?

Verification confirms the product meets its written specification — dimensions, performance, safety limits. Validation confirms the specification was correct by testing the product with real users in real conditions. A design can pass verification completely and still fail validation if the requirements were wrong.

Does a startup need ISO 9001 before manufacturing?

Usually not for a first consumer product run — controlled drawings, an inspection plan and a first-article report cover the practical need. Certification becomes important when industrial or enterprise customers require it in purchasing terms, and it is mandatory in effect for medical, automotive and aerospace supply chains under their own standards.

What is a design history file?

A design history file is the compiled record demonstrating that a device was developed according to its design plan and design controls: inputs, outputs, reviews, verification and validation results, and change records. For medical devices it is a regulatory requirement; for other products the same compilation is simply good evidence during audits, disputes or recalls.

When should quality planning start in a new product program?

At concept, when requirements are first written. Design inputs, the initial risk analysis and the review schedule cost very little at that stage and shape the design. Introduced after design freeze, the same activities generate rework, retesting and tooling changes rather than better decisions.

Frequently asked questions

Which standard applies to your product?

Consumer products usually need none of these formally — but they still need the underlying discipline, because a contract manufacturer will ask for specifications, tolerances and acceptance criteria regardless of whether an auditor ever will.

What manufacturing needs from the quality system?

Our design for manufacturing work covers turning a validated design into a build package, and choosing a manufacturer covers how to judge whether a factory's own quality system is real.

How much quality system does a startup need?

The minimum viable quality system is the one that lets you answer three questions with records rather than memory: what was specified, what was verified, and what changed since.

What is a quality management system in product development?

It is the documented set of processes, reviews and records that control how a product is specified, designed, verified and transferred to manufacturing. In development it shows up as requirements with acceptance criteria, design reviews, verification and validation testing, change control and a traceable record of what was decided and why.

What is the difference between verification and validation?

Verification confirms the product meets its written specification — dimensions, performance, safety limits. Validation confirms the specification was correct by testing the product with real users in real conditions. A design can pass verification completely and still fail validation if the requirements were wrong.

Does a startup need ISO 9001 before manufacturing?

Usually not for a first consumer product run — controlled drawings, an inspection plan and a first-article report cover the practical need. Certification becomes important when industrial or enterprise customers require it in purchasing terms, and it is mandatory in effect for medical, automotive and aerospace supply chains under their own standards.

What is a design history file?

A design history file is the compiled record demonstrating that a device was developed according to its design plan and design controls: inputs, outputs, reviews, verification and validation results, and change records. For medical devices it is a regulatory requirement; for other products the same compilation is simply good evidence during audits, disputes or recalls.

When should quality planning start in a new product program?

At concept, when requirements are first written. Design inputs, the initial risk analysis and the review schedule cost very little at that stage and shape the design. Introduced after design freeze, the same activities generate rework, retesting and tooling changes rather than better decisions.

Related articles

All articles

Get in touch

Tell us about your product idea

Send us a few details and one of our product development experts will get back to you within one business day.

Your information stays confidential and is never shared.