Papers
PAPER25 pages, open access

A life-cycle approach to AI governance in medical device development

Miguel AzevedoQity
Download the PDF
TL;DR
  • 01Treating an AI model as an ordinary software component, or adding a one-time AI assessment to the product file, does not resolve the governance problem.
  • 02The paper proposes a vendor-neutral life-cycle architecture for an AI management system, from concept through post-market surveillance and modification.
  • 03Controlled entities and semantic relationships hold the AI system, its authorized uses, its model and data baselines, and its risks.
  • 04Decision gates make explicit what evidence supported approval, and which changes or operating signals reopen a decision.

Abstract

Medical devices increasingly incorporate AI-enabled functions whose performance depends on development and evaluation data, statistical modelling, deployment conditions, human interaction, and continuing control of change. These dependencies create a governance problem that cannot be resolved by treating an AI model as an ordinary software component, or by adding a one-time AI assessment to the product file.

At any point in the life cycle, a manufacturer should be able to determine what system is being governed, which uses are authorized, which model and data baselines support each use, which assumptions, risks, and limitations were accepted, what evidence supported approval, and which changes or operating signals require those decisions to be revisited. This paper proposes a vendor-neutral life-cycle architecture for an artificial intelligence management system in medical device development, extending from initial concept and product-realisation planning through design, development, release, deployment, post-market surveillance, and modification.

Contents

  • A layered standards architecture
  • The proposed entity and relationship model
  • Integrated AI and medical-device risk management
  • Integration with the ISO 13485 quality management system
  • Life-cycle governance and decision gates
  • Controlled evolution and PCCP operationalisation
  • Application beyond medical-device development

Built for regulated industries

ISO 9001ISO 13485ISO 27001EU MDR / IVDRGDPRFDA