Medical-device regulatory consultant matching
Find the right EU MDR or IVDR consultant for your device
Turn a complex regulatory question into a structured project brief. European-Standards.com helps manufacturers, authorised representatives, importers and MedTech teams identify independent specialists whose stated experience may fit the device, regulatory route, deliverables, language and timetable.
- MDR, IVDR, IVD, software and AI projects
- No obligation to accept an introduction
- Initial brief only—no patient data or sensitive files
Current regulatory context
EU medical-device priorities that can change the consulting brief
A useful consultant brief starts with the current legal route—not a generic list of documents. These checkpoints can affect scope, sequencing, evidence and the specialists required.
EUDAMED obligations
The Actor, UDI/Device, Notified Bodies and Certificates, and Market Surveillance modules became mandatory for the relevant actors and activities on 28 May 2026. The other two modules remain within the Commission rollout.
Check the Commission overviewConditional transition dates
Extended MDR and IVDR timelines do not create an automatic grace period. Eligibility can depend on unchanged design or intended purpose, risk status, QMS implementation, notified-body applications and written agreements.
Review the deadline summaryLiving guidance
MDCG guidance supports a common understanding of the Regulations but is not legally binding. Relevant guidance should be identified by topic and revision, including current classification, software, clinical, performance and PMS documents.
Browse current MDCG guidanceSelected legacy-device transition dates
This summary is a triage aid, not a determination of eligibility. Use the legal text and device-specific evidence before relying on a date.
| Route | Selected category | Potential transition end date | Important qualification |
|---|---|---|---|
| MDR | Eligible Class III and certain Class IIb implantable legacy devices | 31 December 2027 | Only where the Regulation's transitional conditions are satisfied. |
| MDR | Eligible other Class IIb, Class IIa, Class I sterile/measuring/reusable and certain up-classified Class I devices | 31 December 2028 | Application and written-agreement milestones were part of the eligibility conditions. |
| IVDR | Eligible Class D legacy IVDs | 31 December 2027 | Includes QMS, application, written-agreement, unchanged-product and risk conditions. |
| IVDR | Eligible Class C legacy IVDs | 31 December 2028 | Notified-body application deadline: 26 May 2026; written agreement: 26 September 2026. |
| IVDR | Eligible Class B and Class A sterile legacy IVDs | 31 December 2029 | Notified-body application deadline: 26 May 2027; written agreement: 26 September 2027. |
Do not infer eligibility from class alone. A consultant should review certificates, declarations, product changes, intended purpose, risk information, QMS evidence and notified-body milestones against the current legal text.
A transparent matching process
How the consultant introduction works
The service helps you organize the request and identify potentially relevant specialists. You keep control of due diligence, selection and contracting.
Structure the brief
Select the product route, current classification or uncertainty, and the workstreams you need.
Review relevance
Potential matches are considered against subject matter, device type, geography, language, deliverables and timing.
Meet and verify
Discuss approach, named personnel, evidence, references, confidentiality, insurance, fees and conflicts before appointment.
Contract directly
Agree scope, responsibilities, milestones, acceptance criteria, secure data exchange and change control with the selected provider.
Structured project intake
EU MDR & IVDR consultant matchmaker
Complete the four steps. The selections create a high-level project brief for the enquiry form; they do not determine legal classification or conformity.
- 1Product route
- 2Classification
- 3Services
- 4Project details
1. Which regulatory route best describes the product?
Choose the closest option. Select “not sure” when qualification is part of the project.
2. What is the current classification or project status?
Choose the current position, not the class you hope to obtain. A consultant can review the classification rationale.
3. Which workstreams do you need?
Select every relevant area. The final scope should be confirmed after an initial call and document review.
4. Review the brief and request introductions
Add business and project information so potential specialists can be screened for relevance. Do not include confidential technical evidence at this stage.
Generated project brief
Contact and project details
Fields marked with * are required. Introductions are not a guarantee of availability, suitability, regulatory outcome or timeline.
Protect sensitive information. Do not submit patient data, health records, passwords, source code, full technical documentation or confidential test reports through this initial form.
Consulting workstreams
Medical-device regulatory consulting services
The right project may require one specialist or a coordinated team. Define deliverables precisely and confirm that the named people—not only the consultancy brand—have relevant device and scientific experience.
Regulatory strategy and classification
Clarify qualification, intended purpose, MDR or IVDR route, classification rules, evidence gaps and a practical market-access plan.
MDR, IVDR and legacy-device transition
Assess legacy status, transitional eligibility, significant-change questions, certificate dependencies and remediation priorities.
EN ISO 13485 quality management
Build, integrate or remediate a medical-device QMS covering design controls, suppliers, CAPA, change control, records and post-market processes.
Risk management and benefit-risk
Connect product risks, usability, software, biological and clinical evidence to an EN ISO 14971-aligned lifecycle process.
Technical documentation
Structure or review MDR Annex II and III or IVDR Annex II and III documentation, including traceability and evidence readiness.
Clinical evaluation and PMCF
Plan or review clinical evaluation, literature appraisal, clinical investigations, PMCF and clinical evidence updates for medical devices.
IVD performance evaluation and PMPF
Support scientific validity, analytical and clinical performance, performance studies, PERs and post-market performance follow-up.
Medical software, AI and cybersecurity
Address software qualification, classification, lifecycle files, SOUP, validation, AI governance, cybersecurity and change management.
Usability and human factors
Plan formative and summative work, use-related risk analysis, interface specifications and evidence for intended users and environments.
Testing and verification strategy
Map applicable biological, electrical, EMC, sterilization, packaging, transport, shelf-life and performance evidence to the device.
Labelling, UDI, EMDN and EUDAMED
Review labels and IFUs, identify UDI and nomenclature needs, prepare data and support registrations appropriate to the economic operator.
Notified-body readiness
Identify a suitable designation scope, organize a submission, prepare for questions and audits, and remediate observations without promising approval.
PMS, vigilance, PSUR and summaries
Design post-market systems and deliverables, including PMS plans and reports, vigilance workflows, PMCF or PMPF, PSUR and SSCP or SSP support.
PRRC, authorised representative and operators
Clarify Article 15 arrangements, EU authorised-representative needs and the responsibilities of importers and distributors.
Audit readiness, CAPA and remediation
Run focused gap assessments, internal audits or mock assessments and convert findings into risk-based corrective actions.
Regulatory project management
Coordinate workstreams, owners, dependencies, evidence, submission milestones and external specialists across a complex programme.
Technology and product scope
Projects can span devices, IVDs, software and special routes
Consultant experience should be matched to the actual technology, intended users, claims, evidence and conformity-assessment route—not merely to the words “MDR consultant”.
Medical devices under MDR
Non-active and active devices, implants, sterile products, measuring devices, reusable surgical instruments, accessories, custom-made products and Annex XVI routes.
IVDs under IVDR
Reagents, assays, instruments, specimen receptacles, companion diagnostics, self-testing, near-patient testing and performance-study programmes.
Software, connected products and AI
Standalone and embedded software, digital therapeutics, algorithms, cloud components, cybersecurity, interoperability, data changes and AI-enabled medical functions.
End-to-end planning
A practical EU medical-device market-access roadmap
Not every project follows the same order, but these eight workstreams expose the dependencies that a consultant should address.
Qualification and intended purpose
Define the product, users, patients, indications, claims, operating principle and whether MDR, IVDR or another legal regime applies.
Classification rationale
Apply the relevant rules and document the reasoning, including software, accessories, sterile aspects, measuring functions and special features.
Regulatory route and operators
Map conformity assessment, authorised representative, importer, distributor, PRRC, notified-body and registration responsibilities.
QMS and risk architecture
Integrate design, supplier, production, software, change, complaint, CAPA, risk and post-market processes at the right level of control.
Evidence and verification
Plan performance, clinical, biological, electrical, EMC, software, usability, sterilization, packaging, shelf-life and other evidence as relevant.
Technical documentation
Build a controlled, traceable file linking requirements, design, risks, evidence, labelling, manufacturing and post-market plans.
Conformity assessment and CE marking
Complete the applicable assessment route, resolve findings, prepare the declaration and apply the CE mark only when requirements are met.
UDI, EUDAMED and lifecycle control
Maintain registrations, certificates, surveillance, vigilance, clinical or performance updates, changes and periodic deliverables after launch.
Avoid role confusion
Consultant, PRRC, authorised representative, notified body or laboratory?
These roles can interact, and one organisation may provide more than one service, but their legal authority and responsibilities are not interchangeable.
| Role | Main function | What to verify | What the role does not automatically provide |
|---|---|---|---|
| Regulatory consultant | Contracted strategy, documentation, evidence, project or remediation support. | Named experts, relevant device experience, deliverables, conflicts, security, insurance and references. | Regulatory authority, notified-body designation, certificate issuance or guaranteed acceptance. |
| PRRC | Article 15 regulatory-compliance responsibilities for a manufacturer or authorised representative. | Qualification route, documented duties, authority, availability and whether the external arrangement is legally available. | Automatic ownership of every QMS or regulatory task, or relief of the manufacturer’s responsibilities. |
| EU authorised representative | Acts under a written mandate for a non-EU manufacturer and performs specified legal tasks. | Mandate scope, device groups, registration, liability, PRRC arrangement, termination and access to documentation. | Notified-body powers or automatic consulting competence in every technical discipline. |
| Notified body | Performs designated third-party conformity assessment where the legislation requires it. | Official designation, Regulation, codes, conformity-assessment scope, capacity, fees and contract. | Product design consultancy or a guarantee that evidence will be accepted. |
| Competent authority | National regulatory oversight, vigilance, market surveillance and enforcement functions. | Jurisdiction, official channel and the precise legal question. | Commercial consultancy, QMS implementation or paid pre-approval. |
| Accredited laboratory | Performs tests or calibrations within a defined accredited scope. | Accreditation body, scope, method, edition, specimen, uncertainty, recognition and report requirements. | Whole-product conformity, CE certification or regulatory strategy outside the contracted scope. |
| ISO certification body | Audits a management system against a certification standard such as ISO 13485. | Accreditation, certification scope, competence and separation from other roles. | MDR or IVDR product certification unless separately designated as a notified body for the relevant scope. |
Standards and evidence planning
Standards often considered in medical-device projects
Standards should be selected from the device’s intended purpose, technology, risks, legal requirements and evidence plan. A reference appearing on a competitor’s declaration or an old checklist is not enough. Confirm the exact document, edition, amendments, national or European adoption, and whether an OJEU citation covers relevant requirements.
Consultants should explain why a standard is applicable, partially applicable or not applicable—and how deviations or alternative technical solutions are justified.
EN ISO 13485
Medical-device quality management systems
Often used to structure a medical-device QMS. Confirm the applicable edition, regulatory context and certification need for your route.
Check editions on GenormaEN ISO 14971
Risk management for medical devices
Supports a lifecycle process for identifying hazards, evaluating and controlling risks, and reviewing production and post-production information.
Check editions on GenormaEN IEC 62304
Medical-device software lifecycle
Commonly considered for software development and maintenance processes when software is part of, or is itself, a medical device.
Check editions on GenormaEN IEC 62366-1
Usability engineering
Supports the application of usability engineering to safety-related user-interface characteristics.
Check editions on GenormaEN ISO 10993 series
Biological evaluation
A family of standards considered when planning biological evaluation of medical devices within a risk-management process.
Check editions on GenormaEN IEC 60601 series
Medical electrical equipment
A family covering basic safety, essential performance, collateral requirements and product-specific particular standards.
Check editions on GenormaEN ISO 14155
Clinical investigations
Addresses good clinical practice for clinical investigations of medical devices involving human subjects.
Check editions on GenormaEN ISO 15223-1
Symbols supplied with medical devices
Covers symbols commonly used on labels, labelling and information supplied with medical devices.
Check editions on GenormaEN ISO 20417
Information supplied by the manufacturer
Specifies general requirements for information a manufacturer supplies with a medical device.
Check editions on GenormaEN IEC 81001-5-1
Health-software cybersecurity lifecycle
May be considered for security activities across the product lifecycle of health software and health IT systems.
Check editions on GenormaBuyer due diligence
How to evaluate an MDR or IVDR consultant
Choose the named people and deliverables, not only the sales presentation. A specialist who is excellent for one device or workstream may be wrong for another.
- Recent work with the same Regulation, device type, class and technology
- Named personnel, qualifications and time actually allocated to the project
- Clear scope, deliverables, exclusions, assumptions and acceptance criteria
- Current use of legal text, OJEU decisions and relevant MDCG guidance
- Appropriate medical, scientific, engineering or software expertise for evidence work
- Professional indemnity, confidentiality, data-security and subcontractor controls
- References or demonstrable experience that can be checked lawfully
- Realistic dependencies, review cycles, availability and response times
- Transparent fees, expenses, change-control process and ownership of source files
- Disclosure of authorised-representative, PRRC, testing or notified-body conflicts
Practical answers
EU MDR and IVDR consultant FAQs
These answers provide general orientation. Device-specific conclusions require the applicable law, current guidance and project evidence.
What does an EU MDR or IVDR consultant actually do?
A consultant can help interpret the project, structure a regulatory strategy, assess classification, build or review quality and technical documentation, plan evidence, prepare submissions and remediate gaps. The exact scope should be written into a contract with deliverables, assumptions, responsibilities and acceptance criteria.
Can a consultant issue a CE certificate or guarantee approval?
No. A consultant is not a competent authority and is not automatically a notified body. Where third-party conformity assessment is required, only an appropriately designated notified body can perform that assessment within its scope. Neither a consultant nor this matching service can guarantee CE marking, certificate issuance, acceptance, cost or timing.
Does every medical device or IVD need a notified body?
No. Some MDR Class I devices and IVDR Class A non-sterile devices can generally follow manufacturer self-declaration routes when all applicable conditions are met. Class I sterile, measuring and reusable surgical devices involve notified-body assessment for the relevant aspects, and higher classes generally require notified-body involvement. Classification and special product features must be assessed carefully.
Is EN ISO 13485 certification legally mandatory under the MDR or IVDR?
The Regulations require manufacturers to establish, document, implement, maintain and continually improve a proportionate quality management system. EN ISO 13485 is widely used to demonstrate a structured approach, but voluntary use of a standard and third-party certification should not be confused with the legal QMS obligation. The appropriate evidence depends on the conformity-assessment route, notified-body expectations, contracts and other market requirements.
Can the PRRC role be outsourced?
Article 15 requires manufacturers to have at least one qualified person responsible for regulatory compliance within their organisation. Micro and small enterprises are not required to have that person internally, but must have the PRRC permanently and continuously at their disposal. Authorised representatives must also have a qualified PRRC permanently and continuously at their disposal. The arrangement, qualifications, availability, authority and conflicts should be documented.
Can a consultant prepare a CER, PER, PMCF or PMPF deliverable?
A qualified external specialist can support drafting, literature work, evidence appraisal, study planning and document maintenance. The manufacturer nevertheless remains responsible for the regulatory strategy, data supplied, final conclusions, approvals, document control and ongoing compliance. Clinical or performance work should be assigned to people with demonstrably relevant scientific and device expertise.
How is medical software or an AI-enabled product classified?
There is no universal ‘SaMD class’. Qualification and classification depend on the intended purpose, information provided by the software, clinical context and the applicable MDR or IVDR rules. Changes to algorithms, data, claims, architecture or performance can also affect the regulatory assessment, risk management, validation and post-market plan.
How should we choose a notified body?
Check the official NANDO information and confirm that the organisation is designated for the Regulation, conformity-assessment activities and product codes relevant to the device. Then assess capacity, application requirements, fee structure, languages, geographic logistics, experience and contractual terms. A famous name is not enough if its designation scope does not cover the project.
Is EUDAMED mandatory now?
Since 28 May 2026, the Actor, UDI/Device, Notified Bodies and Certificates, and Market Surveillance modules are mandatory for the relevant actors and activities. The practical obligation depends on the actor, device and transitional situation. The Vigilance and Post-Market Surveillance module and the Clinical Investigations and Performance Studies module remain subject to the Commission's rollout.
Are harmonised medical-device standards mandatory?
They are generally voluntary. When the reference to a harmonised standard is published in the Official Journal for the MDR or IVDR, applying it can provide a presumption of conformity only for the requirements and conditions covered by that citation. A manufacturer may use another technical solution but must provide suitable evidence that the legal requirements are met.
How long does an MDR or IVDR consulting project take?
There is no reliable universal timetable. Duration depends on device qualification and class, maturity of the QMS and evidence, testing, clinical or performance data, supplier inputs, notified-body route, team availability and the number of remediation cycles. Ask for a phased plan with dependencies and decision gates rather than an unsupported promise.
What should we include in the initial project brief?
Share the product type, intended purpose, current class or uncertainty, target markets, project stage, existing certificates, requested deliverables and target timing. Do not send patient data, health records, full technical files, proprietary source code, passwords or highly confidential evidence through the first enquiry form. Sensitive material should follow due diligence, an NDA and an agreed secure channel.
What is the difference between a consultant and an EU authorised representative?
A consultant provides contracted expertise. A non-EU manufacturer must designate a sole EU authorised representative for the same generic device group under a written mandate, and that representative has specific legal tasks and potential liability under the Regulations. The same organisation may offer both services, but the roles, contracts, independence and conflicts must be explicit.
Can European-Standards.com select the consultant for us?
We use the structured brief to identify potentially relevant independent specialists and facilitate introductions. You remain responsible for checking qualifications, experience, references, availability, insurance, data-security controls, conflicts, fees and contract terms. European-Standards.com does not replace regulatory, legal, notified-body or competent-authority decisions.
Primary-source research
Official MDR, IVDR and medical-device sources
Use primary sources to verify legal requirements and current implementation. Commercial summaries can be useful for orientation but should not replace the Regulation, OJEU publications or official guidance.
Editorial scope: Official EU sources were reviewed on . The page is an information and business-matching resource, not legal advice. Add a named, qualified medical-device reviewer and revision history in the WordPress page template before claiming expert review.
Ready to define the regulatory project?
Start with the structured brief, then verify the proposed consultant’s expertise, availability, conflicts, data controls and contract before sharing sensitive information.
