FDA Biocompatibility Guidance (ISO 10993)

“FDA guidance biocompatibility” almost always means one specific document: FDA’s guidance titled Use of International Standard ISO 10993-1, “Biological evaluation of medical devices — Part 1: Evaluation and testing within a risk management process”, first issued September 4, 2020 and updated September 8, 2023. It is the primary reference FDA reviewers use to decide whether a medical device’s biocompatibility data package — submitted as part of a 510(k), PMA, De Novo request, IDE, or HDE — is adequate before that device can contact human tissue in a trial or on the market. This guide explains what the guidance actually requires, how it relates to the ISO 10993 series as the underlying consensus standard, and what changed in the 2023 update.

What “biocompatibility” means in a regulatory submission

Biocompatibility is the evaluation of whether a device’s component materials produce an unacceptable adverse biological response when they contact the human body — directly (an implant, a catheter) or indirectly (a fluid pathway, a drug-delivery component). FDA does not independently invent biocompatibility testing methodology; instead, under the FD&C Act’s recognized-consensus-standards mechanism (Section 514, 21 U.S.C. § 360d), FDA formally recognizes specific editions of voluntary standards — including editions of ISO 10993-1 and its companion parts — and its guidance documents explain how it expects sponsors to apply those standards in a premarket submission. A sponsor can either follow FDA’s recognized standard directly (filing a Declaration of Conformity) or justify a deviation, but the guidance is the document that tells a sponsor what FDA will actually look for either way.

The risk-based framework: contact type, duration, and endpoints

Both ISO 10993-1 and FDA’s guidance organize biocompatibility evaluation around two variables, not a fixed checklist of tests to run on every device:

Nature of body contact — surface-contacting (skin, mucosal membrane, breached/compromised surface), external communicating (blood path, tissue/bone/dentin, circulating blood), or implant (tissue/bone, blood).
Duration of contact — limited (≤24 hours), prolonged (24 hours–30 days), or permanent (>30 days).

Each contact-type/duration combination maps to a specific set of biological endpoints that must be evaluated — cytotoxicity, sensitization, irritation or intracutaneous reactivity, acute and subacute/subchronic systemic toxicity, genotoxicity, implantation effects, hemocompatibility, chronic toxicity, and carcinogenicity, among others. Not every endpoint applies to every device; a short-term surface-contact device and a permanent implant sit at opposite ends of the testing burden, and the guidance’s endpoint-matrix approach is what lets a sponsor scope testing to what the device’s actual contact profile requires, rather than defaulting to the maximal battery.

Critically, FDA’s guidance frames biological evaluation as a risk management process, not a standalone test report. The evaluation is expected to draw on all available information before new testing is proposed — existing toxicological data on the same or chemically equivalent materials, a full chemical characterization of the device’s material formulation, prior clinical history of the same materials in similar-contact devices, and a documented risk assessment — with new animal or in vitro testing reserved for genuine data gaps. FDA’s guidance explicitly aligns this expectation with the 3Rs (replace, reduce, refine animal use), consistent with the same risk-based emphasis running through the rest of ISO 10993-1.

Choosing the test battery: which endpoints apply to which device category

ISO 10993-1’s Annex A matrix — reproduced in FDA’s guidance as its own endpoint-selection table — is what a sponsor actually works from when scoping a battery, not a general sense of “more contact means more testing.” The matrix cross-references the two variables above (contact category and duration) against a fixed list of biological endpoints and marks which endpoints apply at each combination. Reading it correctly means understanding not just which cells are marked, but why — the endpoints that appear for nearly every device sit at the top of the list for a reason, and the ones that only appear for higher-risk categories are excluded elsewhere for a reason too, not by oversight.

Device category	Typical duration	Endpoints generally required	Endpoints generally not required at this tier
Surface-contacting, intact skin	Limited (≤24h)	Cytotoxicity, sensitization, irritation	Systemic toxicity, genotoxicity, implantation, hemocompatibility
Surface-contacting, mucosal membrane	Prolonged (24h–30 days)	Cytotoxicity, sensitization, irritation, acute systemic toxicity, material-mediated pyrogenicity	Genotoxicity, chronic toxicity, carcinogenicity
Surface-contacting, breached/compromised skin	Prolonged to permanent	Cytotoxicity, sensitization, irritation, systemic toxicity, genotoxicity	Hemocompatibility (unless also blood-contacting), carcinogenicity (unless permanent)
External communicating, blood path (indirect)	Limited to prolonged	Cytotoxicity, sensitization, irritation, systemic toxicity, hemocompatibility	Genotoxicity (limited-duration only), carcinogenicity
External communicating, circulating blood	Prolonged to permanent	Cytotoxicity, sensitization, irritation, systemic toxicity, genotoxicity, hemocompatibility, chronic toxicity	Carcinogenicity (unless permanent and material is novel)
Implant, tissue/bone	Prolonged to permanent	Cytotoxicity, sensitization, irritation, systemic toxicity, genotoxicity, implantation, chronic toxicity, carcinogenicity (if permanent)	Hemocompatibility (unless the implant also contacts blood)
Implant, blood-contacting	Permanent	Full battery: cytotoxicity, sensitization, irritation, systemic toxicity, genotoxicity, implantation, hemocompatibility, chronic toxicity, carcinogenicity	— highest-tier category; no endpoint is routinely waived

This is the general shape of the matrix, not a substitute for checking the current FDA guidance and ISO 10993-1:2018 Annex A directly against a specific device’s actual materials and contact profile — a device that straddles two categories, or whose materials carry a known toxicological concern, can pull additional endpoints in regardless of its nominal tier.

Cytotoxicity and sensitization: the near-universal baseline

Cytotoxicity and sensitization are the two endpoints that appear across almost every contact category and every duration tier, including the shortest, lowest-risk one — a limited-duration, intact-skin surface device. The rationale is exposure-independent: cytotoxicity screens for materials directly toxic to cells on contact, and sensitization screens for materials capable of provoking an allergic (delayed hypersensitivity) response, and both mechanisms can be triggered by brief, superficial contact with a small quantity of a leachable substance. Because the hazard doesn’t scale down to zero at short duration the way chronic systemic toxicity does, these two endpoints stay in the battery for essentially every device category. In practice, cytotoxicity is usually addressed with an in vitro assay per ISO 10993-5, and sensitization with a guinea pig maximization or murine local lymph node assay per ISO 10993-10 — and both are frequently satisfiable through chemical characterization plus a toxicological risk assessment rather than fresh biological testing, if the material has an adequate use history.

Why genotoxicity is duration- and category-gated, not automatic

Genotoxicity behaves differently from cytotoxicity and sensitization: it drops out entirely for limited-duration, surface-contacting devices and only enters the battery once contact becomes prolonged or permanent, or shifts to an external-communicating or implant category. The rationale is a cumulative-exposure argument — genotoxicity testing exists to catch materials or leachables capable of damaging DNA in a way that could contribute to a carcinogenic or heritable-mutation risk, and that risk is assessed as a function of total exposure over time, not a single brief contact. A short-wear dressing on intact skin and a permanently implanted device made from a similar base polymer face genuinely different genotoxicity risk profiles because of exposure duration and internal versus surface contact, not because the standard treats similar materials arbitrarily differently. This is also where the guidance leans hardest on chemical characterization: if a full compositional analysis under ISO 10993-18 shows the device’s extractables and leachables are already covered by existing genotoxicity data on those specific substances, FDA’s guidance allows that analysis to stand in for new genotoxicity testing — consistent with the broader instruction to exhaust existing data before proposing an animal- or cell-based study.

The chemical-characterization-first approach, applied to endpoint selection

FDA’s guidance and ISO 10993-1 both push chemical characterization (ISO 10993-18) to the front of the process specifically because it changes which cells in the endpoint matrix a sponsor actually needs to fill with new testing. A full extractables-and-leachables profile, compared against toxicological thresholds and any existing data on the identified substances, can close out cytotoxicity, sensitization, or genotoxicity without a biological assay at all, provided the chemistry data is complete and the substances are already characterized. Sponsors who run chemical characterization late — after biological testing is already underway or complete — lose that option and end up running the full matrix regardless of whether the chemistry would have justified skipping part of it. Sequencing the work chemistry-first is the practical lever for keeping the eventual test battery to what the device’s actual contact profile requires, rather than defaulting to the maximal set out of caution.

What changed in the September 2023 update

The 2023 update is the first revision to FDA’s 2020 biocompatibility guidance, and its most consequential change concerns devices whose only human contact is with intact skin. The update incorporated a new Attachment G addressing intact-skin-contact devices: when such a device is fabricated entirely from materials FDA already recognizes (i.e., materials with an established safety history in that use, drawn from FDA-recognized standards or reference lists), FDA will generally no longer require submission of biocompatibility test reports for that contact category — a meaningful reduction in testing burden for a class of devices that had previously been held to the same evidentiary expectations as devices with deeper or more prolonged tissue contact. Sponsors developing wearables, external monitoring devices, or other skin-contacting products should check the current guidance directly for the specific material-recognition conditions that qualify for this reduced pathway, since eligibility depends on the specific materials used, not the device category alone.

Which submission types the guidance applies to

FDA’s guidance states it is intended to assist sponsors preparing biocompatibility information for:

510(k) premarket notifications — for devices claiming substantial equivalence to a predicate.
Premarket Approval (PMA) applications — for Class III devices.
De Novo requests — for novel, lower-risk devices without a predicate.
Investigational Device Exemption (IDE) applications — to support clinical investigation of a device.
Humanitarian Device Exemption (HDE) applications — for devices intended to treat rare conditions.

In practice, this means biocompatibility planning has to happen early in a device development program — the material characterization and evaluation plan a sponsor builds informs everything from IDE-stage clinical readiness to the eventual marketing submission, and retrofitting a biocompatibility case after materials or manufacturing processes are already locked in is far more expensive than planning around the endpoint matrix from the outset.

How this fits into a research administrator’s workflow

For institutions running device trials, biocompatibility sits upstream of trial start: it is part of the nonclinical data package that supports the IDE application before human subjects can be enrolled (see CASRAI’s guide on clinical trial phases for where device-trial regulatory gates differ from drug-trial ones). It also intersects with a device’s quality system — material substitutions during scale-up or manufacturing transfer can reopen a biocompatibility question even for an already-cleared device, which is one reason biocompatibility review is a recurring, not one-time, activity across a device’s lifecycle. Research administrators supporting device-based clinical research should treat FDA’s biocompatibility guidance as a companion reference to Good Manufacturing Practice (GMP) and the broader clinical trial supply management chain, since materials, manufacturing controls, and biological evaluation are evaluated together, not in isolation, when FDA reviews a submission.

Frequently asked questions

Is ISO 10993 testing legally required by FDA?

FDA does not mandate ISO 10993-1 by statute in the sense of leaving no alternative, but because FDA has formally recognized specific editions of the standard as a consensus standard under Section 514 of the FD&C Act, following it — and filing a Declaration of Conformity — is the most direct, lowest-friction path through review. A sponsor can propose an alternative evaluation approach, but it must be separately justified and will generally draw more scrutiny than a submission that follows the recognized standard directly.

Does every device need animal testing for biocompatibility?

No. FDA’s guidance explicitly directs sponsors to first exhaust existing information — prior toxicological data on the same or equivalent materials, chemical characterization, and clinical history — before proposing new testing, and to favor in vitro and chemistry-based methods where they can adequately address an endpoint, consistent with the 3Rs principle. Whether new testing, and what kind, is needed depends on the specific device’s contact type, duration, and existing data, not a fixed universal battery.

What is the difference between FDA’s biocompatibility guidance and the ISO 10993 series itself?

ISO 10993 is the international consensus standard, developed and maintained by ISO Technical Committee 194, and it is what FDA recognizes and points to. FDA’s guidance is FDA’s own document explaining how it expects the standard to be applied within its specific regulatory framework and submission types — including FDA-specific expectations that go beyond what the ISO standard itself specifies, such as the endpoint-selection matrix format FDA expects in a submission and, as of the 2023 update, the intact-skin testing exemption pathway.

When in device development should biocompatibility evaluation start?

As early as final material selection, ideally before a design freeze. Because the evaluation depends on the device’s actual contact type, duration, and material chemistry, changing materials or the manufacturing process after biocompatibility work is complete can reopen some or all of the evaluation, so sponsors that plan the biological evaluation alongside material selection — rather than after design lock — generally avoid costly rework.