You've been given a new cleanroom project. Someone in leadership signed a new contract, or a customer audit flagged a gap, or the quality team finally escalated an issue that's been sitting on the backlog for two years. No matter how it landed on your desk, you have the same directive that the facility needs to be FDA-compliant.
That FDA-compliant qualifier says a lot, except it doesn’t actually tell you anything about what to build.
Compliance with federal regulations is essential in medical device manufacturing, but it rarely presents you with a clear specification for what you need. And when engineers start pulling on that thread, they usually end up in the right place to look – 21 CFR Part 820.
The problem is that it was written by regulators, not engineers. Getting from its language to an actual set of cleanroom specs takes some translation work, and that gap is where a lot of expensive misunderstandings can happen.
Let’s help you avoid costly missteps by going through what the regulations actually require, which sections are relevant for cleanroom design, and how to go from regulatory intent to a specification you can defend.
The FDA’s guidance for how medical devices are designed, manufactured, packaged, labeled, stored, and distributed is in Title 21 of the Code of Federal Regulations (CFR). Specifically, Part 820 (Quality System Regulation) applies to manufacturers of finished devices intended for human use. And this has been the foundation of FDA device manufacturing compliance since 1996.
Part 820 was substantially revised in 2024, when the FDA aligned it more closely with ISO 13485, which is the international standard for medical device quality management systems. The regulation now operates under the updated Quality Management System Regulation (QMSR). If you're working from older reference materials, that's important to know.
Put simply, we’re talking about quality management framework here. This establishes which outcomes your manufacturing processes must achieve and what documentation you need to support them. But it doesn’t tell you how to build your facility.
Under the current QMSR, Part 820 no longer contains discrete written sections for each quality system requirement, as it previously had. Instead, it incorporates ISO 13485 by reference, meaning the key requirements are now found inside that standard.
For cleanroom design, three areas of ISO 13485 are especially worth knowing:
Read those clauses carefully and you'll see they're full of terms like "adequate," "suitable," and "appropriate." That’s important to note because the FDA is establishing intent, not writing specifications. Your cleanroom needs to be adequate for its purpose, suitable for the product being manufactured, and appropriate given any contamination risk involved.
This is how the regulation was designed to work. The FDA knows that the right environmental controls for an implantable cardiac device aren't the same as those for a wound care product or a packaging line. Prescribing a single standard would either over-regulate low-risk manufacturing or under-protect high-risk processes. Instead, the regulation sets the groundwork and leaves the responsibility for specification with the people who understand the product.
For engineers, this creates a real opportunity. You have more latitude than many people assume. The challenge is using that latitude wisely and being able to show (and defend) your work.
While Part 820 tells you what outcome to achieve, it doesn’t hand you a spec sheet. So you know you need environmental controls and documentation, but now what you need to figure out is what those controls actually look like in a building.
This process starts with your product and works outward from there, not inward from the regulation. It's the same logic used by cleanroom consultants at the start of every project, and it holds up precisely because it's grounded in your specific manufacturing reality (instead of a generalized reading of regulatory language).
What are you manufacturing? The answer to that question drives more of your cleanroom specification than any section of Part 820 or ISO 13485 clause.
So work backward from what your product requires, which is what the regulations basically ask you to do.
Not every step in your manufacturing process carries the same risk. Assembly of sterile components needs different controls than kitting or labeling. Final inspection before packaging operates under different constraints than handling raw materials.
Walk your process flow and identify where contamination genuinely threatens product integrity or patient safety. Those are your critical steps, and they define the scope and classification of the cleanroom environment you actually need.
From a practical standpoint, cleanroom scope is a direct cost driver. Every square foot you add to your controlled environment adds to construction cost, ongoing certification cost, gowning requirements, and operational burden. A cleanroom sized and specified to your actual critical process steps is almost always significantly smaller than one sized to worst-case assumptions about the entire facility.
While Part 820 doesn’t prescribe an actual ISO classification, this international standard is used because it provides a consistent technical meaning. ISO 14644 defines particle count limits for Class 1 through 9. That makes the standard a tool that you can use to translate the requirement into measurable terms. And it requires an environment to be adequate for the product and process.
For most medical device manufacturing, the relevant range is ISO 7 and ISO 8:
Which one is right for your situation depends on what you're manufacturing and where in the process you're doing it.
ISO 5 and ISO 6 environments have applications in pharmaceutical manufacturing and semiconductor work, but they're rarely necessary for standard medical device manufacturing. When an engineer defaults to ISO 5 out of caution, they're adding significant cost for environmental control that won't improve their regulatory position or product quality.
The instinct for "better safe than sorry" is understandable. But over-specifying isn't really safer. A facility built to the wrong spec is harder to validate, more expensive to operate, and no more likely to pass an FDA audit than one built to the right spec.
Getting the classification right is the actual safe choice.
Understanding where over-specification tends to happen makes it easier to avoid. Here are three areas to keep in mind:
Each of these is a defensible engineering decision when it's right-sized. But each one is also an expensive mistake when it's driven by anxiety instead of analysis.
When an FDA auditor reviews your facility, they're not checking whether you built to the strictest possible standard. They're checking if your environmental controls are right for your product and if you can explain why you made the choices you made.
That means documentation matters as much as the specification itself. Your cleanroom spec should include the rationale, such as the product risk profile, process analysis, classification decision, and reasoning behind it. More than just what you built, the documentation needs to justify why you built it the way you did.
That documentation also changes how you present a cleanroom project to leadership. When you tell them that you specified ISO 7 because your product risk profile and contamination-critical steps in the process support it, company leaders can understand the rationale. And letting them know how much was saved because you didn’t go with ISO 5 is usually appreciated.
A defensible specification is also easier to validate. Your IQ/OQ/PQ protocol flows naturally from the rationale you've already documented, and the spec and validation tell the same story. On top of that, if questions come up in an audit, you have the justification ready to go.
An engineer should absolutely be able to work through the process of figuring out what is actually needed. After all, someone in the field obviously has the technical background. But what they might not have is deep, repeated experience specifically with cleanroom projects, or enough reps to know where specifications tend to drift and what questions to ask before construction begins.
That’s why a cleanroom partner with FDA and cGMP experience adds value before a single panel goes up. The right questions at the start of a project shape everything that follows:
Those questions, asked by someone who has worked through this process across many different facilities and product types, separate a right-sized cleanroom from one that either fails validation or costs twice what it needed to.
Your goals should be a specification you can defend, a facility you can operate efficiently, and a project that doesn't blow up your capital budget. Having an experienced partner can help you achieve them.
21 CFR Part 820 gives medical device manufacturers more room to work than most engineers expect. The regulation asks for controls that are adequate and appropriate. Your job is to define what adequate means for your specific product and process, and to document that definition in a way that holds up to auditor scrutiny.
Start with your product risk profile, map your critical process steps, and match your classification to actual risk rather than worst-case assumptions. Build the rationale into your specification from the beginning.
Done well, that work produces a facility that passes validation, supports your quality system, and protects your capital budget. It also makes you the person in the room who understood the regulation well enough to make a defensible decision. And that's exactly where you want to be.
See how Encompass approaches FDA-compliant cleanroom design for medical device manufacturers here. Have any specific questions about how Part 820 applies to your project? We're happy to answer them for you.