# Cleanroom Assembly: ISO Class & Process Design

> How to select ISO 14644 cleanroom class (7 vs. 8), design assembly lines, monitor under ISO 13485 Clause 6.4, and support your 510(k) under QMSR.

Source: https://lso-inc.com/news/cleanroom-assembly-for-devices-iso-class-design-8bf74423/

---

pillarSeptember 21, 2026

# Cleanroom Assembly for Devices: ISO Class & Design

A

Andrew\_G

When a medical device company comes to me about moving assembly into a cleanroom, the first question is almost never the one they lead with. They lead with "what class do you have." What they actually need to answer is "what class does my device require, and can I defend that decision to an FDA investigator. I have sat across the table from a lot of OEMs over the past decade, and the cleanroom conversation has a predictable shape. The device team knows the product cold. The regulatory lead knows the submission pathway. But the decision about ISO 14644 classification, line design, and environmental monitoring usually falls into a seam between engineering, quality, and operations, and it gets made late, under schedule pressure, by whoever is available. Then it shows up as a weak spot in the manufacturing section of a 510(k), or as an observation in an audit.

This is a buyer's guide to that decision. It is written for OEMs who are choosing a contract manufacturer for [cleanroom assembly](https://lso-inc.com/solutions/assembly-kitting/) and kitting, or reconsidering one they already have. I am not the person who runs the particle counter or signs the validation report. I am the person who has heard hundreds of companies describe what their last manufacturer got wrong, and cleanroom infrastructure comes up more than most people expect. What follows is how to think about class selection, process design, monitoring, kitting, and audit readiness so the decision holds up later, when it counts.

## What ISO 14644 Classification Actually Buys You

[ISO 14644-1:2015 classifies air cleanliness by the maximum permitted concentration of airborne particles.](https://www.setra.com/blog/what-is-iso-14644-1-cleanroom-classification) [At the 0.5 micron threshold, an ISO Class 7 cleanroom permits up to 352,000 particles per cubic meter, and an ISO Class 8 cleanroom permits up to 3,520,000 particles per cubic meter](https://www.setra.com/blog/what-is-iso-14644-1-cleanroom-classification) (ISO 14644-1:2015, Table 1). That is a tenfold difference in allowable particulate. It is the single number most people fixate on, and it is worth understanding what it does and does not tell you.

Here is the part that trips up first-time buyers. [ISO 14644-1 defines the classification limits. It does not tell you which class your device assembly process requires.](https://www.setra.com/blog/what-is-iso-14644-1-cleanroom-classification) The standard is explicit in its scope: it sets particle concentration limits for each class, and nothing in it prescribes ISO 7 for one kind of device and ISO 8 for another (ISO 14644-1:2015, Table 1, scope). The class you need is a function of your device risk and your downstream sterilization strategy, not something you can look up in a table.

That matters commercially because it means a contract manufacturer cannot answer "what class do I need" for you off a spec sheet. Any CM that tells you the class before understanding your device, your sterile barrier, and your sterilization method is guessing. The good ones ask about bioburden and product exposure before they quote you a room.

### ISO Class 7 vs. ISO Class 8: The Decision Criteria

In my experience, most sterile device assembly in this industry happens in ISO Class 7 or ISO Class 8, and the choice between them comes down to a handful of questions. I am going to frame them the way I have watched successful OEMs frame them, because the framing is what makes the decision defensible later.

The first question is product exposure. How long, and how directly, is the product's critical surface open to the room air before it goes into its sterile barrier? A device whose fluid path or implantable surface sits open on a bench for an extended assembly sequence carries more contamination risk than one that is sealed early. The more direct and prolonged the exposure, the more the risk analysis tends to push toward the tighter class.

The second question is your sterilization strategy, and this is the one people underweight. If your device is terminally sterilized, the cleanroom's job is to control bioburden to a level your sterilization cycle can reliably handle. If your process cannot be fully verified after the fact, [ISO 13485:2016 Clause 7.5.6 requires you to validate it, and that category includes sterilization](https://www.iso.org/standard/59752.html) and, for sterile devices, the cleanroom assembly and packaging steps that establish bioburden before sterilization (ISO 13485:2016, Clause 7.5.6). The cleanliness of your assembly environment is not a standalone decision. It is an input to your [sterilization validation](https://lso-inc.com/solutions/sterilization-validation/). The third question is what happens to the product after your step. A defensible layout often puts the highest-risk operations, the moments of greatest product exposure, in the tightest zone, and lets lower-risk operations run in a less stringent adjacent space. That zoning is a cost lever as much as a quality lever, because tighter air is expensive to condition and monitor.

The honest answer to "Class 7 or Class 8" is that it is the output of a risk assessment, not the input. What a mature CM brings to that conversation is the ability to help you build the rationale, document it, and tie it to your sterilization validation, so that when an investigator asks why you chose the class you chose, you have an answer that is written down and signed rather than reconstructed from memory.

## Process Design: Manual vs. Semi-Automated Assembly

Once the class is settled, the next decision is how the line is built, and this is where I watch the most money get spent well or spent badly. The instinct, especially from teams coming out of R&D, is to reach for automation because it feels like the mature, scalable answer. Sometimes it is. Often, at the volumes and stage most of my OEM customers are actually at, it is premature.

Let me lay out the trade-offs the way I have seen them play out, without pretending the choice is simple.

### The Case for Manual Assembly

Manual assembly is flexible. When your spec is still moving, and in my experience it moves more than teams expect right up to and past design freeze, a manual line absorbs changes without re-tooling. You can revise a work instruction overnight. You can add an inspection step without a capital request. For lower volumes, mixed product families, or early commercial ramps, this flexibility is worth a lot.

The cost of manual assembly is people, and personnel activity is consistently identified in cleanroom-contamination research as a major source of airborne particles — one study on cleanroom garments found that [operators working in the cleanroom are the major source of particles](https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4738007/), largely from routine movement even when fully gowned. Every operator in the room is generating particles and shedding potential bioburden, which is why gowning discipline and personnel monitoring carry so much weight in a manually staffed cleanroom. More operators means more contamination risk to control, more gowning qualification to maintain, and more variability between shifts. None of that is disqualifying. It just has to be designed for and monitored, which I will come back to.

### The Case for Semi-Automation

Semi-automation changes that equation. At higher and more consistent volumes, automation also tightens repeatability, and diagnostics and device companies that fail at the variability margin care about that a great deal.

The cost of semi-automation is capital and rigidity. The equipment does not depreciate the way spreadsheets assume, and it is far less forgiving of spec changes. It punishes an unsettled one.

### How I Watch Good Teams Decide

The teams that get this right treat it as a staged question, not a one-time bet. They start manual or lightly automated while the process settles, prove the design and the volume, then automate the steps that have stopped changing and that carry the highest particle or repeatability risk. They do not automate the whole line because automation sounds scalable. They automate the specific operations where a machine measurably reduces contamination risk or variability, and they keep the rest flexible.

A contract manufacturer that can run both, and can move you from one to the other as your volume and design mature, is worth more than one that forces you into its preferred model on day one. When you are evaluating CMs, ask how they have handled a customer's transition from manual to semi-automated assembly inside a live cleanroom. The answer tells you whether they think about your five-year trajectory or just this quarter's quote.

## Environmental Monitoring Under ISO 13485 Clause 6.4

Here is where the cleanroom stops being a room and starts being a controlled process, and where a lot of the audit risk actually lives.

[ISO 13485:2016 Clause 6.4 requires an organization to document the requirements for the work environment needed to achieve conformity to product requirements, and Clause 6.4.2 requires documented arrangements to control contaminated or potentially contaminated product so it does not contaminate the work environment, personnel, or other product](https://www.iso.org/standard/59752.html) (ISO 13485:2016, Clause 6.4). Under [the QMSR, which became enforceable on February 2, 2026 and incorporates ISO 13485:2016 by reference into 21 CFR Part 820](https://www.fda.gov/medical-devices/postmarket-requirements-devices/quality-management-system-regulation-qmsr) (FDA, Quality Management System Regulation), this is the clause your environmental controls now flow through. If you are used to pointing at the old production and process control environmental language in the legacy regulation, [that prose was removed in the transition](https://compliancenavigator.bsigroup.com/en/medicaldeviceblog/the-new-fda-21-cfr-part-820--quality-management-system-regulation/). The requirement did not disappear. It moved to Clause 6.4, and that is where an investigator will look.

What Clause 6.4 does not do is tell you the class, the sample locations, the frequency, or the particle limits. The clause states outcome-based requirements. [It does not prescribe ISO 14644 classes or monitoring cadences, because those come from your own risk analysis](https://www.iso.org/standard/59752.html) (ISO 13485:2016, Clause 6.4, scope). This is the pattern across all of this: the standards tell you that you must justify and control, not what the specific numbers are. The specific numbers are your job to set and defend.

### What a Monitoring Program Has to Cover

A monitoring program that holds up in an audit generally has to answer, in writing, several things. Where do you sample, and why those locations. How often do you sample, and what is the risk basis for that frequency. What are your action and alert levels, and what happens when you cross them. How do you trend the data over time so a slow drift gets caught before it becomes an excursion. And how do you monitor personnel and gowning, since operators are the primary contamination source in a staffed room.

The piece that gets underbuilt, in my experience, is excursion handling and trending. It is easy to collect particle counts and viable samples and file them. It is harder to have a documented, disciplined response when a count runs high: the investigation, the product disposition, the CAPA linkage. When an investigator finds an excursion with no documented response, that is not a monitoring finding, it is a quality-system finding, and those are worse.

### Requalification Is Not Optional

Separate from routine monitoring, [ISO 14644-2:2015 requires periodic requalification to demonstrate that the room still meets its assigned class. The maximum interval is 6 months for cleanrooms of ISO Class 5 and cleaner, and 12 months for ISO Class 6 through 9](https://www.cleanroomtechnology.com/news/article_page/How_often_should_I_validate_my_cleanroom_to_meet_ISO_14644-1_2015/115090), and [requalification is also triggered by significant changes to the facility, HVAC, or equipment](https://www.gconbio.com/iso-clean-room-standards/) (ISO 14644-2:2015). Those intervals are maxima, not targets. A documented risk assessment can justify shorter intervals, and in practice many programs run tighter than the ceiling.

The trigger-based requalification is the one I see missed. A CM makes an HVAC change, or moves a major piece of equipment, or reconfigures a line, and does not requalify because it was not time yet on the calendar. Then a customer's audit finds a facility change with no corresponding requalification record. When you are qualifying a contract manufacturer, ask to see their requalification history and specifically how they handle change-triggered requalification, not just the scheduled kind. The calendar discipline is easy. The change discipline separates the mature operations from the rest.

## Kitting Strategies for Sterile Device Sets

Kitting is where I watch OEMs discover that assembly and packaging are not separate problems. A convenience kit or a sterile procedure set is only as clean as its dirtiest component and its least-controlled assembly step, and the whole kit typically shares one sterilization cycle and one sterile barrier.

The governing reality is bioburden. For a terminally sterilized kit, everything that goes into the sterile barrier contributes to the bioburden that your sterilization cycle has to overcome. Because that assembly and packaging step establishes the bioburden before sterilization, and its output cannot be fully verified afterward, [it falls squarely under the validation obligation in ISO 13485:2016 Clause 7.5.6](https://www.iso.org/standard/59752.html) (ISO 13485:2016, Clause 7.5.6). In plain terms: your kitting environment and process are part of your sterilization validation whether you treat them that way or not.

### Component Control Comes First

The kitting problems I see most often start upstream, with incoming components. A kit that assembles a dozen components from a half-dozen suppliers inherits the cleanliness and bioburden variability of all of them. If one component arrives with inconsistent bioburden, it does not matter how clean your cleanroom is. The mature approach controls component cleanliness at receipt, understands the bioburden contribution of each item, and does not assume the cleanroom will fix a dirty input. This is a supplier-control and incoming-inspection question as much as a cleanroom question, and it lives in your quality system.

### Zoning the Kitting Line

The same zoning logic that applies to device assembly applies to kitting. You do not have to hold every kitting operation to the tightest class. Done well, it puts your cleanest, most tightly monitored air exactly where the product is most vulnerable, and does not waste it where the product is protected.

### The Sterile Barrier Ties It Together

Where kitting meets packaging is the sterile barrier system, and this is where the cleanroom hub and the [packaging validation](https://lso-inc.com/solutions/packaging-validation/) work connect. [The seal integrity, the material selection, and the aging behavior of the sterile barrier are their own validation program under ISO 11607](https://www.iso.org/standard/70799.html), and I will not pretend to be the SME on peel testing or accelerated aging. What I will say from the buyer's side is that the companies who treat kitting cleanliness and sterile barrier validation as one connected problem have far less trouble at submission than the ones who hand cleanroom assembly to one group and packaging validation to another and hope they meet in the middle. When you are choosing a CM, having cleanroom assembly, kitting, and packaging validation under one roof removes a handoff that I have watched go wrong more than once.

## How a CM's Cleanroom Infrastructure Affects Your 510(k) and Audit Readiness

This is the section that matters most to the OEMs I talk to, because it is where the operational decisions above turn into submission and audit evidence, and it is where the current regulatory moment creates a genuine gap.

[Under the QMSR, effective February 2, 2026, 21 CFR Part 820 now incorporates ISO 13485:2016 by reference, and the legacy Quality System Inspection Technique and its associated compliance programs were retired](https://www.fda.gov/medical-devices/postmarket-requirements-devices/quality-management-system-regulation-qmsr) (FDA, Quality Management System Regulation). Most of the old subpart prose was removed. [The sections that remain operative in Part 820 itself are narrow: scope, definitions that now defer to ISO 13485 and ISO 9000, incorporation by reference, the overarching QMS requirement, control of records, and device labeling and packaging controls](https://www.fda.gov/medical-devices/postmarket-requirements-devices/quality-management-system-regulation-qmsr) (21 CFR Part 820, QMSR). [Requirements that used to sit in the removed subparts, including process controls and environmental control, now flow from the corresponding ISO 13485:2016 clauses.](https://compliancenavigator.bsigroup.com/en/medicaldeviceblog/the-new-fda-21-cfr-part-820--quality-management-system-regulation/) Practically, that means your cleanroom environmental controls are evaluated through Clause 6.4, your process validation through Clause 7.5.6, and so on. Same expectations, different citation, and the investigators are trained on the new framework.

### The 510(k) Documentation Gap Nobody Has Closed Yet

Here is the part I want OEM regulatory leads to hear clearly. [FDA's draft guidance on quality management system information for premarket submission reviews signals that FDA expects environmental and contamination controls to be risk-justified, validated, and supported by representative cleanroom qualification records.](https://www.alston.com/en/insights/publications/2025/11/fda-shift-qmsr-transition-medical-devices) But [that draft is scoped to PMA and HDE submissions, and FDA has not yet issued 510(k)-specific QMSR submission guidance](https://www.thefdalawblog.com/2025/11/fda-issues-first-draft-guidance-in-the-countdown-to-qmsr/) (FDA draft QMS Information guidance). Independent legal analysis of the transition makes the same point: [the QMSR applies to all US-marketed devices, including the 510(k) and de novo pathways, but the available draft guidance addresses PMA and HDE documentation, leaving a documentation ambiguity for 510(k) sponsors](https://www.alston.com/en/insights/publications/2025/11/fda-shift-qmsr-transition-medical-devices) (Alston & Bird, QMSR transition analysis).

So if you are a 510(k) sponsor, you are in a position where the expectation exists but the specific documentation roadmap does not. In my experience, ambiguity like this does not get resolved by waiting. It gets resolved by assembling the evidence a reasonable investigator would expect, before anyone asks for it. That means, at minimum, having the cleanroom class rationale written down and tied to device risk, the qualification and requalification records current, the environmental monitoring data trended, and the CM's quality system audit-ready.

### What This Means for Choosing a Contract Manufacturer

When your cleanroom assembly happens at a contract manufacturer, that CM's infrastructure and records become part of your manufacturing story. Their cleanroom qualification, their monitoring program, their requalification history, their gowning and personnel controls, their validation files: in an audit of your device, those records get pulled. If they are thin, the finding lands on you, not just on them.

This is why the OEMs consolidating vendors that I work with have gotten much more rigorous about supplier qualification of cleanroom capability specifically. The questions worth asking are concrete. Can the CM show you the risk basis for the class it runs your product in. Can it produce current requalification records and show change-triggered requalification, not just scheduled. Can it show trended environmental monitoring data and documented excursion handling. Is its quality system built on ISO 13485:2016 in a way that maps cleanly to how the QMSR now reads. And can it hand you a manufacturing-section package that your regulatory team can drop into a submission rather than reconstruct.

The reason I push this so hard is that vendor switches in this industry are frequently driven by exactly this kind of documentation failure: a CM whose cleanroom records could not withstand an audit or a submission review when it mattered. The stated reason is usually cost or capacity. The real reason, more often than not, is that an audit or a submission exposed a documentation gap the CM should have owned and did not. A cleanroom that runs clean but cannot prove it is a liability wearing the costume of an asset.

### A Realistic Sequence for Getting It Right

The OEMs who handle this well tend to move in a recognizable order. They settle the sterilization strategy early, because it drives the cleanroom class. They let the class fall out of a documented risk assessment rather than picking a number and back-filling a rationale. They design the line, manual or semi-automated, around where their process actually is, not where they wish it were. They build the monitoring program to catch drift and handle excursions, not just to collect counts. They control components upstream so the kit is not undermined by its dirtiest input. And they treat the CM's cleanroom records as part of their own submission evidence from the start, not

If you are consolidating contract manufacturing partners or qualifying a cleanroom assembly and kitting vendor, our team can walk through your device risk profile, sterilization strategy, and class rationale in a 30-minute technical review, and show you the qualification, monitoring, and requalification records your regulatory team will need for your 510(k) manufacturing section.

[Request a Quote](https://lso-inc.com/contact/)

## Ship faster with fewer vendors

LSO consolidates assembly, packaging, validation, and sterilization under one roof — FDA-registered, ISO 13485-certified, across three facilities. Tell us about your device and we'll map the fastest path to production.

Or call us directly: [(714) 672-1090](tel:7146721090)