EU MDR Conformity Assessment: Complete Guide for Medical Device Suppliers

EU MDR conformity assessment is the formal gateway to the European medical device market — and, increasingly, to hospital procurement across all 27 EU member states plus Norway, Iceland, and Liechtenstein. Getting conformity assessment right is not only a regulatory obligation; it is a commercial prerequisite. This guide explains every conformity assessment route under EU Regulation 2017/745, what your technical documentation must contain, how Notified Bodies conduct their assessments, and what conformity evidence hospital procurement teams verify when they evaluate your tender response.

What EU MDR conformity assessment is — and what it is not

Conformity assessment under EU MDR is the systematic procedure by which manufacturers evaluate and demonstrate that their medical device conforms to all applicable requirements of EU Regulation 2017/745 (EU MDR). The process culminates in:

• A Declaration of Conformity (DoC) — a legally binding document signed by the manufacturer declaring the device meets EU MDR requirements
• A CE mark — affixed to the device and its labelling, signifying EU market eligibility
• A Notified Body certificate — required for most device classes, certifying that an independent third party has verified conformity

Conformity assessment is not a one-time approval from a central authority. The European Commission does not approve individual medical devices. Instead, manufacturers take responsibility for compliance — supported by Notified Body certification for higher-risk devices — and national competent authorities (such as BfArM in Germany, ANSM in France, HPRA in Ireland) conduct post-market surveillance to verify ongoing compliance.

This self-responsibility model has a direct tender implication: your Declaration of Conformity is your sworn statement of compliance. Errors in your DoC — such as citing MDD 93/42/EEC rather than MDR 2017/745 — are not merely administrative mistakes; they constitute a false compliance claim and are grounds for immediate tender rejection.

Conformity assessment routes by device class

EU MDR Annex VIII defines the classification rules (Class I through Class III). The conformity assessment route depends on the class. MDR Annexes IX–XI define the available assessment procedures:

Class I devices — manufacturer self-declaration

Most Class I devices (non-sterile, non-measuring, not reusable surgical instruments) can be placed on the EU market through manufacturer self-declaration without Notified Body involvement. The manufacturer must:

• Compile comprehensive technical documentation (Annex II) and post-market surveillance documentation (Annex III)
• Establish a Quality Management System (an ISO 13485-certified QMS is not mandatory for Class I but is strongly recommended)
• Produce and sign the Declaration of Conformity
• Register the device in EUDAMED and assign UDI

Three sub-categories require partial Notified Body involvement:

• Class I sterile (Is): The sterility aspects of manufacturing must be assessed by a Notified Body under Annex XI Part A or Annex IV.
• Class I measuring function (Im): The metrological aspects must be assessed by a Notified Body under Annex XI Part A or Annex IV.
• Class I reusable surgical instruments (Ir): A Notified Body must review the design and manufacturing documentation relating to reprocessing.

Class I self-declaration timelines are driven by documentation compilation — typically 6–18 months to assemble a compliant technical file, depending on device complexity and existing evidence availability.

Class IIa devices — Notified Body QMS or product verification

Class IIa devices (moderate risk — most active therapeutic devices, long-term surgically invasive non-implantable devices, and many diagnostic devices) require Notified Body involvement. Two routes are available:

• Annex IX (QMS assessment + technical documentation review): The Notified Body audits the manufacturer’s QMS and reviews a representative sample of technical documentation for device types covered by the certification. This is the most common route for manufacturers with an established ISO 13485 QMS. Initial certification typically takes 12–24 months.
• Annex X (EU type examination) + Annex XI Part A or B (QMS or product verification): The Notified Body examines a type specimen of the device. Used when a full QMS is not yet in place or for specific product lines where batch-level verification is appropriate.

Class IIb devices — full Notified Body assessment

Class IIb devices (higher risk — long-term implantable devices below Class III, certain active therapeutic devices) require more comprehensive Notified Body assessment:

• Annex IX: Full QMS audit plus technical documentation review for all device types — not just a representative sample. Clinical evaluation is part of the assessment scrutiny. Typical timeline: 18–30 months for initial certification.
• Annex X + Annex XI: Type examination with detailed product examination requirements and QMS or product batch verification.

Class III and implantable devices — highest scrutiny

Class III devices (highest risk — devices in direct contact with the heart or central nervous system, certain partially absorbable devices, and others per Annex VIII Rule 9) and all implantable devices above Class I require the most extensive conformity assessment:

• Annex IX (comprehensive QMS + technical documentation assessment): Full QMS review including manufacturing site audits, plus detailed technical documentation assessment for every device type. For certain Class III categories — including surgical meshes, total joint replacements, spinal implants, cardiac and vascular devices, and Class IIb active implantable devices — the Notified Body must consult EU expert panels established under Article 106 of EU MDR. Clinical evidence is subjected to rigorous scrutiny, and the expert panel review adds time to the certification process.
• Annex X + Annex XI Part A: Type examination plus full QMS audit. Used in specific circumstances.

Timeline for Class III new devices: 24–48 months, reflecting the depth of clinical evidence review and, where applicable, expert panel consultation timelines. This is why manufacturers pursuing EU market entry for Class III devices must begin regulatory planning well in advance of intended commercial launch.

Technical documentation requirements under EU MDR Annex II

Technical documentation is the core deliverable of EU MDR conformity assessment. Annex II defines what must be included for every device class:

Device description and specification

• Intended purpose, indications, contraindications, and target user group
• All device models, variants, accessories, and software components within the certification scope
• Physical, chemical, and biological characteristics relevant to safety and performance
• Reference to previous and similar device generations, with a similarity and differentiation assessment

Information supplied with the device

• Instructions for Use (IFU) in all required EU languages for the intended markets
• Label content and language compliance
• UDI assignment documentation at all required packaging levels

General Safety and Performance Requirements (GSPR) compliance

Annex I of EU MDR contains the GSPR — the foundational requirements every device must meet. Your technical documentation must include a GSPR checklist documenting, for each applicable requirement, the harmonized standard applied, the test or analysis conducted, and the evidence reference. For manufacturers transitioning from MDD, the GSPR checklist is typically one of the most time-consuming documentation components to update, as the MDR requirements are more prescriptive than the MDD Essential Requirements.

Benefit-risk analysis and risk management

EU MDR requires a comprehensive benefit-risk analysis per Annex I, Section 1. Risk management must follow ISO 14971. The benefit-risk analysis is a living document — it must be updated with post-market data, integrating clinical evidence, vigilance data, and post-market clinical follow-up (PMCF) results throughout the device lifecycle.

Clinical evidence and clinical evaluation report (CER)

Clinical evaluation under EU MDR (Annex XIV) is substantially more demanding than under MDD:

• Clinical data requirements are proportional to device risk class — Class III novel devices typically require prospective clinical investigation data
• Equivalence claims (relying on data from a predicate device) are only permissible where the manufacturer can demonstrate sufficient equivalence in technical, biological, and clinical characteristics, and has contractual access to the equivalent device’s full technical documentation
• Post-Market Clinical Follow-Up (PMCF) plans must be established for all devices, with Class IIb and III subject to annual PMCF data updates
• For Class IIb and Class III devices, a Summary of Safety and Clinical Performance (SSCP) must be published in EUDAMED — publicly accessible to procurement authorities, clinicians, and patients

Notified Body selection: what to consider

Only EU MDR-designated Notified Bodies can issue EU MDR certificates. As of mid-2026, 45 Notified Bodies are designated for EU MDR (down from approximately 80 NB designations under MDD — a significant consolidation with major implications for assessment capacity and waiting times). See our EU MDR Notified Body list for 2026 for current designations and scope codes.

Key selection factors:

• Designation scope: Verify that the NB’s EU MDR designation covers your specific device classification code (GMDN code or equivalent) and intended purpose. Not all NBs are designated for all device categories.
• Capacity and current timelines: Large NBs (BSI, TÜV SÜD, TÜV Rheinland) have significant application backlogs. Smaller but fully designated NBs may offer faster access for certain device categories.
• Existing relationship: If you hold MDD certification from an NB that has obtained EU MDR designation, transitioning with the same NB typically requires less rework than starting fresh — the NB already knows your QMS and product portfolio.
• Expert panel requirement: For Class III devices and implantables subject to expert panel consultation, select an NB with demonstrated experience navigating the expert panel process. Delays at the expert panel consultation stage can extend timelines by 6–12 months.

The assessment process follows a structured sequence: application submission → completeness review → contract and fee agreement → QMS audit scheduling → on-site audit → technical documentation review → deficiency resolution → certificate issuance. The deficiency resolution phase — where the NB issues findings, you respond, and the NB reviews responses — is typically the most time-variable stage and is where under-prepared technical files incur significant additional time.

Declaration of Conformity: required content under EU MDR Annex IV

The Declaration of Conformity must contain:

• Manufacturer name, address, and — for non-EU manufacturers — the EU Authorised Representative’s details
• A statement that the DoC is issued under the sole responsibility of the manufacturer
• Device identification: product name, model number, and UDI-DI
• An explicit statement that the device conforms to EU Regulation 2017/745 (EU MDR) — not MDD 93/42/EEC
• All applicable harmonized standards and Common Specifications referenced
• Notified Body name, NB identification number, and certificate number (for devices requiring NB involvement)
• Any applicable supplementary EU legislation (Radio Equipment Directive for wireless devices, IVDR for in vitro diagnostics, etc.)
• Date, place of issue, name, and signature of the responsible person

The single most common EU hospital tender compliance failure is submitting a Declaration of Conformity that still references MDD rather than MDR — often because the NB certificate was updated but the accompanying DoC was not. Conduct an annual audit of all DoC documents across your full product portfolio to catch outdated references before the tender season.

How conformity assessment evidence is verified in EU hospital tenders

EU hospital procurement has become significantly more rigorous in verifying conformity assessment evidence since the MDR transition completed. The standard verification process in most major EU markets now includes:

1. Document completeness check: Evaluators confirm a DoC, NB certificate, and EUDAMED UDI registration proof are present for each tendered product line.
2. MDR vs MDD check: DoC references are verified to confirm MDR 2017/745 (not MDD). Certificates are checked to confirm they were issued under EU MDR designation, not legacy MDD notified body status.
3. Certificate validity check: NB certificate validity dates are verified against the tender contract or framework duration. A certificate expiring before the end of a 3-year framework agreement is a rejection trigger in German, Dutch, and Belgian hospital tenders.
4. EUDAMED cross-reference: Procurement systems increasingly cross-reference UDI-DI data directly in EUDAMED to verify registration status, device class, and NB certificate linkage. This is now standard practice in Germany, the Netherlands, Belgium, and France.
5. Scope coverage check: The NB certificate scope description is verified against the specific device models being tendered. A certificate covering a product family does not automatically cover individual models if their specifications fall outside the described scope.

For Class III and implantable devices, SSCP documentation is increasingly included in tender requirements. Some EU hospital tenders — particularly for cardiac devices, orthopaedic implants, and surgical mesh products — now list SSCP as a mandatory tender attachment at qualification stage.

How MedStrato manages conformity assessment evidence across your tender portfolio

Maintaining EU MDR conformity documentation across a full product portfolio — with multiple NB certificates, varying expiry dates, different Annex routes, and country-specific tender requirements — is one of the most operationally complex aspects of EU hospital tendering. MedStrato’s compliance engine automates this verification:

• Certificate expiry monitoring: Tracks NB certificate validity dates and flags products with certificates expiring within the contract period of each active tender opportunity.
• DoC reference audit: Verifies that submitted Declaration of Conformity documents reference EU MDR 2017/745 (not MDD) and contain the correct NB identification and certificate details.
• EUDAMED status check: Cross-references product UDI-DI data against EUDAMED registration status before tender submission.
• Scope coverage verification: Matches the specific device models being tendered against the coverage scope of the NB certificate on file, flagging any models that fall outside the certified scope.

Book a demo to see how MedStrato handles EU MDR conformity evidence management across your full product portfolio, or explore our EU MDR tender requirements 2026 checklist for the complete compliance document set required in current EU hospital tenders.