
In brief: ASTM F86 is the medical device industry's practice for the condition of an implant surface, with stainless passivation handled under ASTM A967. FDA’s Quality Management System Regulation took effect on 2 February 2026 and rebuilt 21 CFR Part 820 around ISO 13485, so procedures written to the old clause numbers now cite a structure that no longer exists.
ASTM F86 for medical devices covers the surface preparation and marking of metallic surgical implants. The passivation itself is normally specified to ASTM A967, the same spec the rest of the industry uses. That is why implant work and pharma equipment work share so much chemistry.
What changed this year is the regulatory frame around that work. FDA's Quality Management System Regulation took effect on 2 February 2026, and it rebuilt 21 CFR Part 820 around ISO 13485. If your surface finishing records were written to the old clause numbers, they now reference a structure that no longer exists.
ASTM F86 is the practice the medical device industry uses for preparing and marking implant surfaces. It sits across alloys, so titanium and 316L stainless implants are both in scope. It sets out the condition a finished surface should be in before it reaches a patient.
For stainless steel, the passivation is normally specified to ASTM A967. That spec defines the chemical treatments and the tests used to accept them. Our guide to ASTM A967 walks through those treatment types and acceptance tests in detail.
ASTM standards are sold, so this article describes what they govern without reproducing the text. Buy the current edition before writing a procedure against it, and check the revision year, because acceptance criteria move between editions.
Because free iron on a stainless surface is where corrosion starts, and an implant has no maintenance window.
Machining, grinding and forming embed iron particles into a stainless surface, and so does handling the part with carbon steel tooling. Those particles sit on top of the chromium oxide film. In a chloride-bearing environment, and body fluid qualifies, they start pitting.
Passivation removes that surface iron and lets the chromium oxide layer re-form evenly. It is a cleaning step with a metal purpose, and it decides whether a part stays passive or corrodes at a scratch.
We work through this across implant, instrument and equipment manufacturing on our medical industry page, on site or at our own premises.
Part 820 was rebuilt. FDA changed the device current good manufacturing practice (CGMP) rules to line up with the global standard. The revised part is now called the Quality Management System Regulation.
The final rule states that it is "effective February 2, 2026". FDA says it is harmonizing "primarily through incorporating by reference the quality management system requirements of ISO 13485" (Federal Register, 89 FR 7523).
The practical consequence catches people out. Part 820 holds six sections (21 CFR Part 820). They are scope, definitions, incorporation by reference, the quality system rule, control of records, and labeling and packaging controls. The detailed CGMP clauses that procedures used to cite are no longer there.
So a work instruction citing an old clause number now points at nothing. The obligation did not disappear. It moved into ISO 13485, which the revised Part 820 incorporates by reference.
A documented system, and evidence that the process does what you say it does.
Section 820.10 requires a manufacturer to "Document a quality management system that complies with the applicable requirements of ISO 13485". On a surface finishing line it reaches every step. The method, the chemistry, the concentration, the temperature, the contact time and the acceptance test all have to be specified and recorded.
For Indian manufacturers exporting to the United States, one line in the regulation deserves attention. A device offered for import "is subject to refusal of admission" if it appears adulterated under the Act. So a quality system failure on a surface process becomes a border problem.
Our passivation service is delivered against a written procedure and a record set for exactly this reason. We reply within 24 hours.
CDSCO, the Central Drugs Standard Control Organisation, under the Medical Devices Rules, 2017, which asks for the same kind of evidence.
The Fifth Schedule carries the quality management system requirement, and a Notified Body audits the manufacturing site by "examination of objective evidence" (Medical Devices Rules, 2017). Devices sold into Europe add EU MDR as well.
Which authority you deal with depends on the risk class. Class A and Class B devices are licensed by the State Licensing Authority, with a Notified Body carrying out the site audit. Class C and Class D sit with the Central Licensing Authority.
So a surface process can face three regimes at once, and they share one habit. Each wants to see that the treatment was specified, carried out and recorded. A passivation record is exactly the kind of objective evidence all three look for.
Citric acid handles most implant stainless work, and it does so without the hazards nitric brings.
NASA's own testing supports the substitution. Its work on citric acid passivation of stainless steel documents the process and the control plan behind it (NASA NTRS). A later NASA and DoD study tested citric against nitric on stainless alloys and concluded that the citric process "performs as well as, or better than, the nitric acid passivation process according to the testing employed" (NASA NTRS).
That study also found process parameters mattered. Corrosion performance for one alloy improved as bath temperature rose, so the optimum conditions were set per alloy. That dependence is the point worth carrying into implant work. A treatment proven on 316L is not automatically valid on 17-4 PH or a cobalt chrome part. Run the acceptance test on the alloy you actually ship.
Our comparison of citric and nitric acid passivation sets out the trade-offs. Waste handling is one of them, and it weighs more in a small shop.
With a test that produces a record. Run it on the finished part, because a coupon nobody kept proves nothing about what shipped.
| Test | What it detects | Where it fits implant work |
|---|---|---|
| Water break | Residual organic film | Fast in-line check after degreasing |
| Copper sulfate | Free iron on the surface | Not for parts that will be implanted, staining risk |
| Ferroxyl (potassium ferricyanide) | Free iron on the surface | Effective, and the part must be cleaned afterward |
| High humidity exposure | Overall passivity | Acceptance testing on production parts |
| Salt spray | Corrosion resistance | Process qualification, and seldom routine release |
Choose the test your spec calls for, and keep the record with the lot. Our inspection and monitoring work exists to produce that evidence in a form an auditor accepts.
ASTM F86 addresses marking as well as surface preparation, and the two interact more than people expect.
A mark applied by an aggressive method can disturb the passive layer at exactly the point where the metal has been worked hardest. Laser marking, electrochemical etching and stamping each leave a different surface behind. The sequence matters. Mark first, then passivate, so the final treatment covers the marked area.
Depth matters too. A deep stamp raises a burr and work-hardens the metal round it. Both give corrosion somewhere to start, and neither is fixed by passivation afterward.
Where a fine finish is needed before marking, our mechanical and electropolishing work sets it up.
Enough for a stranger to rebuild the run without asking you a question.
Six items cover most audits, and an auditor who finds all six stops looking:
Keep these with the lot. A separate binder on another floor defeats the point, because an auditor who has to hunt for a rinse record will assume it was written later.
One habit saves argument. Photograph the test result and file it with the number, because a written "pass" carries less weight than an image of the part.
Five patterns account for most of the surface-related findings we are asked to investigate.
The first is a procedure written against superseded clause numbers, which now reads as though it references nothing. The second is passivation validated on one alloy and applied to a family. The third is a test run once at qualification and never repeated at release.
Fourth is carbon steel tooling used on stainless in the same shop, which quietly puts back the contamination the treatment just removed, and it is the hardest of the five to spot, because nothing looks different until it corrodes in service. Fifth is a record that proves the chemical was used but not that the surface passed, which is the version an auditor rejects.
Our post on common passivation failures covers the mechanisms behind several of these.
The following scenario is fictional, and the numbers in it are illustrative, with no client data involved.
An implant shop near Ahmedabad passivates a lot of 316L bone screws using a settled citric process, then laser-marks them to fix a readability complaint. The ferroxyl test at release is run on a screw pulled from the lot before marking, and it passes.
Three months later, a customer audit asks how the marked surface was verified. There is no answer, because the marking happened after the last surface test. The lot is quarantined. The screws did not corrode, but the record cannot show the marked area was passive.
The fix costs a day. Mark before the final treatment, take the release sample from a marked part, and the lot ships on time with a record nobody can argue with.
If your surface procedures still cite the pre-2026 clause numbers, or you are qualifying a passivation route on a new implant alloy, talk to our team. Bring the procedure and the last release record, because those two documents usually show where the gap is.
It covers metallic surgical implants across alloys, so titanium parts are in scope. The acceptance test has to suit the metal, so a stainless procedure cannot be copied across without fresh proof.
Yes. Part 820 remains in force, but since 2 February 2026 it is structured around ISO 13485 and no longer carries the detailed CGMP clauses. Procedures citing the old section numbers need re-pointing.
It is widely used and supported by published testing, and ASTM A967 covers citric treatments alongside nitric ones. What matters for compliance is that the method you use is specified, validated on your alloy, and evidenced by a test record for the lot.
Passivate after marking wherever the process allows, so nothing is left untreated where the mark was made. Where the sequence cannot change, take the release test from a marked part, never an unmarked one from the same lot.
Set the interval in your quality system and tie it to change as well as the calendar. A new alloy, a new chemical supplier or a marking change are all reasons to requalify.
No. Passivation removes surface iron and restores the chromium oxide film, but it cannot repair roughness, laps or embedded scale. Those need mechanical work or descaling first, or the treatment just seals the problem in.
Sources. US FDA, Medical Devices; Quality System Regulation Amendments, 89 FR 7523, effective 2 February 2026 · 21 CFR Part 820, current text · NASA, Citric Acid Passivation of Stainless Steel (NTRS 20110001362) · NASA, Alternative to Nitric Acid Passivation of Stainless Steel Alloys (NTRS 20140002809) · Central Drugs Standard Control Organisation, Medical Devices Rules, 2017 · ASTM F86 and ASTM A967, referenced by scope only. ASTM texts sit behind a paywall and are therefore described rather than quoted. Every regulatory quotation above was read in the Federal Register, the Code of Federal Regulations, or the Medical Devices Rules, 2017.