Medical device passivation is one of the few passivation jobs where the treated part goes inside a person, and everything about how it is specified, validated and documented follows from that. An orthopedic implant, a surgical instrument, a needle or a stainless housing on a device is passivated to remove free iron and contamination and to establish the chromium-rich passive layer that governs corrosion resistance and, through it, biocompatibility. Under the Quality Management System Regulation and ISO 13485, passivation is a process whose output cannot be fully verified on every part, so it is validated, controlled and recorded. Paul Industries passivates medical device components and instruments to ASTM F86 and ASTM A967, and passivates the water systems, process equipment and cleanroom utilities in device plants to ASTM A967 and ASME BPE.
ASTM F86 versus ASTM A967
| Standard | Scope | What it requires |
|---|---|---|
| ASTM F86 | Surface preparation and marking of metallic surgical implants | Cleaning, descaling and passivation of implant surfaces; removal of contaminants and embedded iron; passivation by nitric or citric methods; verification; and control of marking so it does not create corrosion sites |
| ASTM A967 | Chemical passivation treatments for stainless steel parts | Named nitric and citric treatments with concentration, temperature and time; acceptance tests (water immersion, humidity, salt spray, copper sulfate, ferroxyl, potassium ferricyanide-nitric) |
| ASTM A380 | Cleaning, descaling and passivation practice | The broader practice for parts, equipment and systems, cited for pre-cleaning and for installed systems |
Implants are specified to F86, which itself points to A967 treatments; instruments and non-implant components are usually specified to A967 directly; the plant’s process equipment and utilities are passivated to A967 and A380 like any pharmaceutical system. A device drawing that says only “passivate” has left the treatment, the test and the documentation to the vendor, and an auditor will ask why.
Alloys and what they need
316L (ASTM F138 for implants) is the workhorse and passivates predictably in citric or nitric. 17-4 PH and other precipitation-hardening grades used in instruments need care with nitric concentration and time to avoid etching. Martensitic 400-series instrument steels (420, 440) are sensitive to over-passivation and are often treated in dilute nitric with sodium dichromate or in citric at controlled time. Nitinol and titanium alloys are not passivated by these methods; they are treated by their own chemical or electrochemical processes, and cobalt-chrome implants follow F86 with alloy-specific parameters. The alloy is confirmed from the material certificate before any part is treated, because the wrong bath damages the part and the record.
Citric or nitric for devices
Both are recognized by F86 and A967. Nitric acid, with or without dichromate, is the traditional specification and remains on many legacy drawings and validations. Citric acid has become the preferred method for new validations because it is non-hazardous to handle, produces no nitrogen oxide fumes, does not attack the base metal or fine features, is easier to rinse from complex geometries and blind holes, and is compatible with cleanroom-adjacent operations. Changing an existing validated process from nitric to citric is a change control with a revalidation; it is not a substitution the vendor makes on its own.
Sequence in device manufacturing
Machining, grinding and polishing leave cutting fluids, polishing compound, embedded abrasive and iron on the part. The validated sequence is cleaning to remove manufacturing residues (ASTM F3127 is the guide for validating that cleaning), then passivation, then a validated rinse in purified water, drying, inspection and, for implants, packaging and sterilization. Passivation after polishing but before marking is F86’s preference, because laser marking after passivation locally destroys the passive layer and has to be followed by repassivation. Electropolishing, where specified, precedes passivation and is a separate validated process.
Validation and documentation
Because the passive layer cannot be inspected on every part, passivation is validated: an installation and operational qualification of the bath, rinse and drying equipment; a performance qualification with parts from the validated process tested to the A967 acceptance test the specification names (water immersion, humidity, salt spray or copper sulfate, plus surface chemistry by XPS or Auger where the customer requires a chromium-to-iron ratio); and ongoing process controls on bath concentration, temperature, time, rinse water quality and bath life. Every lot carries a record of the treatment parameters and the test result, traceable to the part and the material heat. Under ISO 13485 clause 7.5.6 and the QMSR this is the evidence the auditor asks for, and the certificate of conformance is only as good as it.
The plant’s own stainless
A device plant also owns purified water loops for cleaning and rinsing, clean compressed air, autoclaves, cleaning lines and ultrasonic tanks, and cleanroom utilities, all in stainless, all affected by the same free iron, heat tint and chloride exposure as any process plant. These are passivated to ASTM A967 and A380 after installation and on a maintenance schedule, in place, and their passivation records sit in the facility qualification rather than the device history record. Water loops in particular are where rouge and biofilm start when a plant treats them as plumbing.
What Paul Industries does
Passivation of implants, instruments and stainless device components to ASTM F86 and A967 in citric or nitric to the customer’s validated parameters, with the acceptance testing and lot records the quality system requires; support for validation and change control when a process moves from nitric to citric; and in-place passivation, derouging and corrosion assessment of the purified water systems, process equipment and utilities inside device plants.
Standards referenced: ASTM F86 · ASTM A967 · ASTM A380 · 21 CFR 820 / QMSR · ISO 13485 · ISO 10993
Frequently asked questions
What is medical device passivation?
A validated chemical treatment, usually citric or nitric acid to ASTM F86 for implants and ASTM A967 for instruments and components, that removes free iron and manufacturing contamination from stainless steel so the chromium-rich passive layer forms uniformly. It governs corrosion resistance and therefore biocompatibility, and under the QMSR and ISO 13485 it is a controlled, documented process rather than a finishing step.
When does a device drawing cite ASTM F86, and when ASTM A967?
ASTM F86 is the practice for surface preparation and marking of metallic surgical implants: cleaning, descaling, passivation, verification and marking control. ASTM A967 is the specification of chemical passivation treatments and acceptance tests for stainless steel parts, and F86 points to it for the treatments. Implants are specified to F86; instruments and non-implant components usually to A967 directly.
Has citric acid passivation been accepted for implants and instruments?
Yes. Both ASTM F86 and ASTM A967 recognize citric acid treatments, and citric has become the preferred method for new validations because it is non-hazardous, fume-free, gentle on fine features and easier to rinse from blind holes and complex geometry. An existing process validated on nitric acid is changed to citric only through change control and revalidation.
When is nitric acid passivation still specified for devices?
On legacy drawings and validated processes, on free-machining and some martensitic instrument steels where nitric’s oxidizing action is needed, and where a customer specification names a nitric treatment with or without sodium dichromate. It is run to the named ASTM A967 treatment with the same controls and testing as citric.
Does passivation need to be validated under the QMSR and ISO 13485?
Yes. The passive layer cannot be fully verified on every part by inspection and test, which makes passivation a process requiring validation under ISO 13485 clause 7.5.6, incorporated by the Quality Management System Regulation. That means IQ/OQ of the equipment, a PQ with acceptance testing, ongoing process controls and lot records traceable to the part and material heat.
How is medical device passivation tested?
By the ASTM A967 acceptance test the specification names: water immersion or high-humidity exposure for rust, salt spray, copper sulfate or ferroxyl for free iron where the part can be fully rinsed, and, where the customer requires it, surface chemistry by XPS or Auger to confirm the chromium-to-iron ratio. Results are recorded per lot against the treatment parameters.
Which stainless alloys are used in medical devices and how do they passivate?
316L (ASTM F138 for implants) passivates predictably in citric or nitric. 17-4 PH and other precipitation-hardening instrument grades need controlled nitric concentration and time to avoid etching. 420 and 440 martensitic instrument steels are sensitive to over-passivation and use dilute nitric with dichromate or controlled citric. Nitinol, titanium and cobalt-chrome use their own treatments and are confirmed from the material certificate before any bath.
When in the manufacturing sequence should a device be passivated?
After machining, grinding and polishing residues are removed by a validated cleaning process, and before laser marking, packaging and sterilization. ASTM F86 prefers passivation after polishing but before marking, because marking after passivation locally destroys the passive layer and requires repassivation. Electropolishing, where specified, precedes passivation as a separate validated process.
Does laser marking affect passivation?
Yes. Laser marking after passivation creates a locally oxidized, chromium-depleted zone that corrodes preferentially, which is why ASTM F86 addresses marking directly. Parts marked after passivation are repassivated, and validated processes fix the sequence so this is not left to the operator.
Do electropolished implants still need passivation?
Electropolishing removes material electrochemically to smooth the surface and strip the worked, iron-rich outer layer; passivation removes free iron chemically and lets the oxide reform without removing material. Many implants are electropolished and then passivated. Each is a separate validated process with its own parameters and records.
How is passivation documented for a device history record?
Each lot carries the treatment designation and parameters (chemistry, concentration, temperature, time), rinse water quality, bath identification and life, the acceptance test and result, the operator and date, traceable to the part number and material heat. The vendor’s certificate of conformance references this record, and the manufacturer’s device history record retains or references it.
Can passivation be validated with a single bath for many part numbers?
Usually, by grouping parts into families by alloy, geometry and prior processing and validating the worst case in each family, with a rationale the quality system accepts. Parts outside a validated family, a new alloy or a change to prior processing require an addition to the validation.
What rinse water is used after device passivation?
Purified water meeting the manufacturer’s specification, validated for conductivity and, where the part will be implanted, endotoxin and bioburden, because residues from the rinse become residues on the device. Rinse water quality is a controlled process parameter, and the plant’s purified water system is itself qualified and maintained for that reason.
How does passivation relate to biocompatibility testing?
A uniform passive layer minimizes ion release and corrosion products, which is what ISO 10993 biocompatibility testing on the finished device assesses. Passivation is one of the manufacturing processes that must be controlled so that the tested device and the produced device have the same surface; a change to the passivation process can trigger a biocompatibility reassessment.
What happens if a device lot fails the passivation test?
The lot is quarantined, the failure investigated (bath concentration, contamination, contact time, rinse, prior cleaning, alloy mix-up), the cause corrected under CAPA, and the parts re-cleaned and re-passivated where the specification allows, then retested. Repeated failures point to the cleaning step or the material rather than the bath.
Do device plants need their own equipment passivated?
Yes. Purified water loops for cleaning and rinsing, ultrasonic and cleaning tanks, autoclaves, clean compressed air piping and cleanroom utilities are stainless systems that carry free iron, heat tint and chloride exposure like any process plant, and they are passivated to ASTM A967 and A380 after installation and on a maintenance schedule. Their records belong to the facility qualification.
Can medical device passivation be done in citric acid at room temperature?
ASTM A967 Citric 3 runs at 70 to 120 F for 20 minutes and is sometimes validated for delicate parts; Citric 1 and 2 at higher temperature and shorter time are more common in production. The treatment named in the validation is the one that must be run; the temperature is a controlled parameter, not an operator convenience.
Who is responsible for passivation validation, the device maker or the vendor?
The device manufacturer owns the validation under its quality system and either performs the process or qualifies the vendor as a supplier under purchasing controls, with the vendor’s process validated and audited. Paul Industries operates to the customer’s validated parameters and provides the records the customer’s quality system requires.
Can passivation be done on finished, toleranced device parts?
Chemical passivation removes no measurable material and leaves the surface finish as it was, which is why it is acceptable on finished, toleranced parts. Over-passivation of sensitive martensitic grades can etch or dull the surface, which is a validation and control issue, not an inherent effect of the process.
What should a device passivation purchase order specify?
The governing standard (ASTM F86 or A967), the treatment designation (for example Citric 2 or Nitric 2), the acceptance test, the alloy and material certificate reference, the sequence relative to cleaning and marking, the rinse water requirement, lot traceability and the certificate content. Orders that say only passivate leave every one of these to the vendor.
Related: Medical Device & Implant Manufacturing Process Systems · Passivation Services · ASTM F86: Passivation Standards for Medical Devices · Passivation Standards Explained: ASTM A967 and AMS 2700 · Passivation Testing & Verification Services · Electropolishing vs Passivation · Stainless Steel Passivation Services (ASTM A967) · Request a quote · Purified Water Systems for Medical Device Plants