When I worked in healthcare, every piece of software that interacted with a human in a healthcare related situation was extensively regulated. There was an enormous amount of documentation, change control, effort to change things (for example, updating the firmware was considered a major change to the system and had to be documented in detail).

Are you talking about research, rather than healthcare?