Overview
The medical device market continues to grow across general devices, cardiovascular solutions and surgical or infection control. Teams succeed when they combine strong engineering practice with regulatory awareness and reliable manufacturing partners. SequoiaAT has worked with global leaders and innovative startups across domains including disposable colonoscope concepts, automated sterilizers, blood glucose meters and implantable drug delivery devices.
Device types and safety classes
- Three broad types: diagnostic, therapeutic and implantable.
- Safety based classes: Class I, Class II and Class III.
- Rigor scales with risk level, prior product history and whether it is the first of its kind.
Lifecycle from concept to commercialization
We follow a phase guided flow from concept and feasibility through design and implementation to manufacturing and post market support. Documentation and traceability are maintained across each phase to support audits and change control.
Design controls and risk management
- DFMEA and PFMEA with action tracking.
- Reliability prediction and accelerated stress methods where appropriate.
- System and software hazard analysis linked to risk files.
- Requirement trace matrix mapping needs to verification and validation.
- COTS component validation and supplier assessment.
- User interface design that supports safe use and clear feedback.
Software and connectivity
Modern devices often blend embedded firmware, mobile applications and cloud dashboards. We implement real time firmware, secure connectivity such as BLE or Wi Fi and cloud ingestion with role based access. Software verification and validation are integrated with continuous testing to reduce defects and improve release quality.
Six early engagement areas
- PCB layout and fabrication
- PCB assembly
- Component engineering
- Test engineering
- System engineering
- Packaging and product support
Safety is built in
Risk is addressed in three parts. Remove or reduce risks during design. Protect against remaining risks with engineering controls, labeling or alarms. Inform users about residual risks that cannot be engineered out.
Verification and validation in regulated device development
Verification confirms that design outputs meet design inputs at each stage of development. Validation confirms that the finished device meets user needs and intended use. Both are required under design control frameworks such as 21 CFR Part 820 and ISO 13485. For software components, IEC 62304 defines the specific lifecycle and documentation requirements that feed into those broader verification and validation activities.
In connected devices, validation work often needs to cover not just the hardware and firmware in isolation but the complete system including companion apps, cloud services, and any data paths that touch clinical decisions. SequoiaAT integrates test automation into the development pipeline so that verification activities generate evidence continuously rather than in a single sprint at the end of a project.
Transfer to manufacturing and sustaining engineering
Design transfer is a defined step in regulated device development. It covers the transition from a verified design to a manufacturing process that can reproduce that design reliably at scale. Transfer documentation typically includes device master records, process specifications, acceptance criteria, and equipment qualification records. A poorly managed transfer is one of the more common reasons that a device cleared for market takes longer than expected to reach volume production.
Sustaining engineering picks up after transfer. It covers changes, field issues, component obsolescence, and the ongoing maintenance of the design history file. For teams planning long product lifecycles, designing for serviceability and part substitution from the start reduces the cost of sustaining work over the lifetime of the device.
Connectivity and cybersecurity in regulated devices
Regulatory guidance on medical device cybersecurity has grown significantly in recent years. In the United States, FDA expectations now include a Software Bill of Materials, a coordinated vulnerability disclosure process, and a plan for patching and update management across the marketed lifetime of the device. The EU MDR and related guidance from ENISA point in a similar direction. Teams building connected devices need to address cybersecurity as a design requirement from the first architecture review, not a checklist item near submission.
SequoiaAT incorporates threat modeling, secure boot, encrypted communications, and patch management planning into device projects that include any form of wireless or network connectivity. The cybersecurity artifacts produced during development also serve as evidence in regulatory submissions and post-market surveillance.
Post-market surveillance and change control
Post-market surveillance is an ongoing obligation, not a one-time study. Regulated markets require a plan that defines data sources, review frequency, and the threshold at which a signal triggers a corrective action or a regulatory notification. For software-containing devices, monitoring includes field performance data, complaint analysis, and review of any literature or adverse event reports relevant to the clinical application.
Change control is closely related. Any modification to hardware, firmware, software, labeling, or manufacturing process that could affect safety or performance needs to pass through a formal review. The depth of that review scales with the nature and magnitude of the change. Teams that maintain a well-structured design history file from the start of a project find change control considerably less burdensome because the evidence base is already organized and traceable. SequoiaAT builds post-market monitoring and change management into the engineering workflow rather than treating them as separate compliance activities.
Where SequoiaAT helps
- Requirements and architecture for Class I to Class III systems.
- Embedded firmware and board bring up with robust testing.
- Mobile app and cloud integration for connected health solutions.
- Verification and validation including automation and simulation.
- Transfer to manufacturing and sustaining engineering.