Medical-device regulatory consultant matching

Find the right EU MDR or IVDR consultant for your device

Turn a complex regulatory question into a structured project brief. European-Standards.com helps manufacturers, authorised representatives, importers and MedTech teams identify independent specialists whose stated experience may fit the device, regulatory route, deliverables, language and timetable.

  • MDR, IVDR, IVD, software and AI projects
  • No obligation to accept an introduction
  • Initial brief only—no patient data or sensitive files

Current regulatory context

EU medical-device priorities that can change the consulting brief

A useful consultant brief starts with the current legal route—not a generic list of documents. These checkpoints can affect scope, sequencing, evidence and the specialists required.

EUDAMED obligations

The Actor, UDI/Device, Notified Bodies and Certificates, and Market Surveillance modules became mandatory for the relevant actors and activities on 28 May 2026. The other two modules remain within the Commission rollout.

Check the Commission overview

Conditional transition dates

Extended MDR and IVDR timelines do not create an automatic grace period. Eligibility can depend on unchanged design or intended purpose, risk status, QMS implementation, notified-body applications and written agreements.

Review the deadline summary

Living guidance

MDCG guidance supports a common understanding of the Regulations but is not legally binding. Relevant guidance should be identified by topic and revision, including current classification, software, clinical, performance and PMS documents.

Browse current MDCG guidance

Selected legacy-device transition dates

This summary is a triage aid, not a determination of eligibility. Use the legal text and device-specific evidence before relying on a date.

RouteSelected categoryPotential transition end dateImportant qualification
MDREligible Class III and certain Class IIb implantable legacy devices31 December 2027Only where the Regulation's transitional conditions are satisfied.
MDREligible other Class IIb, Class IIa, Class I sterile/measuring/reusable and certain up-classified Class I devices31 December 2028Application and written-agreement milestones were part of the eligibility conditions.
IVDREligible Class D legacy IVDs31 December 2027Includes QMS, application, written-agreement, unchanged-product and risk conditions.
IVDREligible Class C legacy IVDs31 December 2028Notified-body application deadline: 26 May 2026; written agreement: 26 September 2026.
IVDREligible Class B and Class A sterile legacy IVDs31 December 2029Notified-body application deadline: 26 May 2027; written agreement: 26 September 2027.

Do not infer eligibility from class alone. A consultant should review certificates, declarations, product changes, intended purpose, risk information, QMS evidence and notified-body milestones against the current legal text.

A transparent matching process

How the consultant introduction works

The service helps you organize the request and identify potentially relevant specialists. You keep control of due diligence, selection and contracting.

Structure the brief

Select the product route, current classification or uncertainty, and the workstreams you need.

Review relevance

Potential matches are considered against subject matter, device type, geography, language, deliverables and timing.

Meet and verify

Discuss approach, named personnel, evidence, references, confidentiality, insurance, fees and conflicts before appointment.

Contract directly

Agree scope, responsibilities, milestones, acceptance criteria, secure data exchange and change control with the selected provider.

Structured project intake

EU MDR & IVDR consultant matchmaker

Complete the four steps. The selections create a high-level project brief for the enquiry form; they do not determine legal classification or conformity.

  1. 1Product route
  2. 2Classification
  3. 3Services
  4. 4Project details

1. Which regulatory route best describes the product?

Choose the closest option. Select “not sure” when qualification is part of the project.

Product regulatory route

2. What is the current classification or project status?

Choose the current position, not the class you hope to obtain. A consultant can review the classification rationale.

Classification or status

Options for Medical device under the MDR

Options for In vitro diagnostic under the IVDR

Options for Medical software or AI-enabled product

Options for Legacy-device transition or remediation

Options for Borderline, combination or special route

Options for Early-stage or not yet sure

3. Which workstreams do you need?

Select every relevant area. The final scope should be confirmed after an initial call and document review.

Required consulting services

4. Review the brief and request introductions

Add business and project information so potential specialists can be screened for relevance. Do not include confidential technical evidence at this stage.

Product routeNot selected
Classification/statusNot selected
Selected workstreamsNot selected

Generated project brief

Contact and project details

Fields marked with * are required. Introductions are not a guarantee of availability, suitability, regulatory outcome or timeline.

    Protect sensitive information. Do not submit patient data, health records, passwords, source code, full technical documentation or confidential test reports through this initial form.

    Consulting workstreams

    Medical-device regulatory consulting services

    The right project may require one specialist or a coordinated team. Define deliverables precisely and confirm that the named people—not only the consultancy brand—have relevant device and scientific experience.

    Regulatory strategy and classification

    Clarify qualification, intended purpose, MDR or IVDR route, classification rules, evidence gaps and a practical market-access plan.

    MDR, IVDR and legacy-device transition

    Assess legacy status, transitional eligibility, significant-change questions, certificate dependencies and remediation priorities.

    EN ISO 13485 quality management

    Build, integrate or remediate a medical-device QMS covering design controls, suppliers, CAPA, change control, records and post-market processes.

    Risk management and benefit-risk

    Connect product risks, usability, software, biological and clinical evidence to an EN ISO 14971-aligned lifecycle process.

    Technical documentation

    Structure or review MDR Annex II and III or IVDR Annex II and III documentation, including traceability and evidence readiness.

    Clinical evaluation and PMCF

    Plan or review clinical evaluation, literature appraisal, clinical investigations, PMCF and clinical evidence updates for medical devices.

    IVD performance evaluation and PMPF

    Support scientific validity, analytical and clinical performance, performance studies, PERs and post-market performance follow-up.

    Medical software, AI and cybersecurity

    Address software qualification, classification, lifecycle files, SOUP, validation, AI governance, cybersecurity and change management.

    Usability and human factors

    Plan formative and summative work, use-related risk analysis, interface specifications and evidence for intended users and environments.

    Testing and verification strategy

    Map applicable biological, electrical, EMC, sterilization, packaging, transport, shelf-life and performance evidence to the device.

    Labelling, UDI, EMDN and EUDAMED

    Review labels and IFUs, identify UDI and nomenclature needs, prepare data and support registrations appropriate to the economic operator.

    Notified-body readiness

    Identify a suitable designation scope, organize a submission, prepare for questions and audits, and remediate observations without promising approval.

    PMS, vigilance, PSUR and summaries

    Design post-market systems and deliverables, including PMS plans and reports, vigilance workflows, PMCF or PMPF, PSUR and SSCP or SSP support.

    PRRC, authorised representative and operators

    Clarify Article 15 arrangements, EU authorised-representative needs and the responsibilities of importers and distributors.

    Audit readiness, CAPA and remediation

    Run focused gap assessments, internal audits or mock assessments and convert findings into risk-based corrective actions.

    Regulatory project management

    Coordinate workstreams, owners, dependencies, evidence, submission milestones and external specialists across a complex programme.

    Technology and product scope

    Projects can span devices, IVDs, software and special routes

    Consultant experience should be matched to the actual technology, intended users, claims, evidence and conformity-assessment route—not merely to the words “MDR consultant”.

    Medical devices under MDR

    Non-active and active devices, implants, sterile products, measuring devices, reusable surgical instruments, accessories, custom-made products and Annex XVI routes.

    IVDs under IVDR

    Reagents, assays, instruments, specimen receptacles, companion diagnostics, self-testing, near-patient testing and performance-study programmes.

    Software, connected products and AI

    Standalone and embedded software, digital therapeutics, algorithms, cloud components, cybersecurity, interoperability, data changes and AI-enabled medical functions.

    End-to-end planning

    A practical EU medical-device market-access roadmap

    Not every project follows the same order, but these eight workstreams expose the dependencies that a consultant should address.

    Step 01

    Qualification and intended purpose

    Define the product, users, patients, indications, claims, operating principle and whether MDR, IVDR or another legal regime applies.

    Step 02

    Classification rationale

    Apply the relevant rules and document the reasoning, including software, accessories, sterile aspects, measuring functions and special features.

    Step 03

    Regulatory route and operators

    Map conformity assessment, authorised representative, importer, distributor, PRRC, notified-body and registration responsibilities.

    Step 04

    QMS and risk architecture

    Integrate design, supplier, production, software, change, complaint, CAPA, risk and post-market processes at the right level of control.

    Step 05

    Evidence and verification

    Plan performance, clinical, biological, electrical, EMC, software, usability, sterilization, packaging, shelf-life and other evidence as relevant.

    Step 06

    Technical documentation

    Build a controlled, traceable file linking requirements, design, risks, evidence, labelling, manufacturing and post-market plans.

    Step 07

    Conformity assessment and CE marking

    Complete the applicable assessment route, resolve findings, prepare the declaration and apply the CE mark only when requirements are met.

    Step 08

    UDI, EUDAMED and lifecycle control

    Maintain registrations, certificates, surveillance, vigilance, clinical or performance updates, changes and periodic deliverables after launch.

    Avoid role confusion

    Consultant, PRRC, authorised representative, notified body or laboratory?

    These roles can interact, and one organisation may provide more than one service, but their legal authority and responsibilities are not interchangeable.

    RoleMain functionWhat to verifyWhat the role does not automatically provide
    Regulatory consultantContracted strategy, documentation, evidence, project or remediation support.Named experts, relevant device experience, deliverables, conflicts, security, insurance and references.Regulatory authority, notified-body designation, certificate issuance or guaranteed acceptance.
    PRRCArticle 15 regulatory-compliance responsibilities for a manufacturer or authorised representative.Qualification route, documented duties, authority, availability and whether the external arrangement is legally available.Automatic ownership of every QMS or regulatory task, or relief of the manufacturer’s responsibilities.
    EU authorised representativeActs under a written mandate for a non-EU manufacturer and performs specified legal tasks.Mandate scope, device groups, registration, liability, PRRC arrangement, termination and access to documentation.Notified-body powers or automatic consulting competence in every technical discipline.
    Notified bodyPerforms designated third-party conformity assessment where the legislation requires it.Official designation, Regulation, codes, conformity-assessment scope, capacity, fees and contract.Product design consultancy or a guarantee that evidence will be accepted.
    Competent authorityNational regulatory oversight, vigilance, market surveillance and enforcement functions.Jurisdiction, official channel and the precise legal question.Commercial consultancy, QMS implementation or paid pre-approval.
    Accredited laboratoryPerforms tests or calibrations within a defined accredited scope.Accreditation body, scope, method, edition, specimen, uncertainty, recognition and report requirements.Whole-product conformity, CE certification or regulatory strategy outside the contracted scope.
    ISO certification bodyAudits a management system against a certification standard such as ISO 13485.Accreditation, certification scope, competence and separation from other roles.MDR or IVDR product certification unless separately designated as a notified body for the relevant scope.

    Standards and evidence planning

    Standards often considered in medical-device projects

    Standards should be selected from the device’s intended purpose, technology, risks, legal requirements and evidence plan. A reference appearing on a competitor’s declaration or an old checklist is not enough. Confirm the exact document, edition, amendments, national or European adoption, and whether an OJEU citation covers relevant requirements.

    Consultants should explain why a standard is applicable, partially applicable or not applicable—and how deviations or alternative technical solutions are justified.

    EN ISO 13485

    Medical-device quality management systems

    Often used to structure a medical-device QMS. Confirm the applicable edition, regulatory context and certification need for your route.

    Check editions on Genorma

    EN ISO 14971

    Risk management for medical devices

    Supports a lifecycle process for identifying hazards, evaluating and controlling risks, and reviewing production and post-production information.

    Check editions on Genorma

    EN IEC 62304

    Medical-device software lifecycle

    Commonly considered for software development and maintenance processes when software is part of, or is itself, a medical device.

    Check editions on Genorma

    EN IEC 62366-1

    Usability engineering

    Supports the application of usability engineering to safety-related user-interface characteristics.

    Check editions on Genorma

    EN ISO 10993 series

    Biological evaluation

    A family of standards considered when planning biological evaluation of medical devices within a risk-management process.

    Check editions on Genorma

    EN IEC 60601 series

    Medical electrical equipment

    A family covering basic safety, essential performance, collateral requirements and product-specific particular standards.

    Check editions on Genorma

    EN ISO 14155

    Clinical investigations

    Addresses good clinical practice for clinical investigations of medical devices involving human subjects.

    Check editions on Genorma

    EN ISO 15223-1

    Symbols supplied with medical devices

    Covers symbols commonly used on labels, labelling and information supplied with medical devices.

    Check editions on Genorma

    EN ISO 20417

    Information supplied by the manufacturer

    Specifies general requirements for information a manufacturer supplies with a medical device.

    Check editions on Genorma

    EN IEC 81001-5-1

    Health-software cybersecurity lifecycle

    May be considered for security activities across the product lifecycle of health software and health IT systems.

    Check editions on Genorma

    Buyer due diligence

    How to evaluate an MDR or IVDR consultant

    Choose the named people and deliverables, not only the sales presentation. A specialist who is excellent for one device or workstream may be wrong for another.

    • Recent work with the same Regulation, device type, class and technology
    • Named personnel, qualifications and time actually allocated to the project
    • Clear scope, deliverables, exclusions, assumptions and acceptance criteria
    • Current use of legal text, OJEU decisions and relevant MDCG guidance
    • Appropriate medical, scientific, engineering or software expertise for evidence work
    • Professional indemnity, confidentiality, data-security and subcontractor controls
    • References or demonstrable experience that can be checked lawfully
    • Realistic dependencies, review cycles, availability and response times
    • Transparent fees, expenses, change-control process and ownership of source files
    • Disclosure of authorised-representative, PRRC, testing or notified-body conflicts

    Practical answers

    EU MDR and IVDR consultant FAQs

    These answers provide general orientation. Device-specific conclusions require the applicable law, current guidance and project evidence.

    What does an EU MDR or IVDR consultant actually do?

    A consultant can help interpret the project, structure a regulatory strategy, assess classification, build or review quality and technical documentation, plan evidence, prepare submissions and remediate gaps. The exact scope should be written into a contract with deliverables, assumptions, responsibilities and acceptance criteria.

    Can a consultant issue a CE certificate or guarantee approval?

    No. A consultant is not a competent authority and is not automatically a notified body. Where third-party conformity assessment is required, only an appropriately designated notified body can perform that assessment within its scope. Neither a consultant nor this matching service can guarantee CE marking, certificate issuance, acceptance, cost or timing.

    Does every medical device or IVD need a notified body?

    No. Some MDR Class I devices and IVDR Class A non-sterile devices can generally follow manufacturer self-declaration routes when all applicable conditions are met. Class I sterile, measuring and reusable surgical devices involve notified-body assessment for the relevant aspects, and higher classes generally require notified-body involvement. Classification and special product features must be assessed carefully.

    Is EN ISO 13485 certification legally mandatory under the MDR or IVDR?

    The Regulations require manufacturers to establish, document, implement, maintain and continually improve a proportionate quality management system. EN ISO 13485 is widely used to demonstrate a structured approach, but voluntary use of a standard and third-party certification should not be confused with the legal QMS obligation. The appropriate evidence depends on the conformity-assessment route, notified-body expectations, contracts and other market requirements.

    Can the PRRC role be outsourced?

    Article 15 requires manufacturers to have at least one qualified person responsible for regulatory compliance within their organisation. Micro and small enterprises are not required to have that person internally, but must have the PRRC permanently and continuously at their disposal. Authorised representatives must also have a qualified PRRC permanently and continuously at their disposal. The arrangement, qualifications, availability, authority and conflicts should be documented.

    Can a consultant prepare a CER, PER, PMCF or PMPF deliverable?

    A qualified external specialist can support drafting, literature work, evidence appraisal, study planning and document maintenance. The manufacturer nevertheless remains responsible for the regulatory strategy, data supplied, final conclusions, approvals, document control and ongoing compliance. Clinical or performance work should be assigned to people with demonstrably relevant scientific and device expertise.

    How is medical software or an AI-enabled product classified?

    There is no universal ‘SaMD class’. Qualification and classification depend on the intended purpose, information provided by the software, clinical context and the applicable MDR or IVDR rules. Changes to algorithms, data, claims, architecture or performance can also affect the regulatory assessment, risk management, validation and post-market plan.

    How should we choose a notified body?

    Check the official NANDO information and confirm that the organisation is designated for the Regulation, conformity-assessment activities and product codes relevant to the device. Then assess capacity, application requirements, fee structure, languages, geographic logistics, experience and contractual terms. A famous name is not enough if its designation scope does not cover the project.

    Is EUDAMED mandatory now?

    Since 28 May 2026, the Actor, UDI/Device, Notified Bodies and Certificates, and Market Surveillance modules are mandatory for the relevant actors and activities. The practical obligation depends on the actor, device and transitional situation. The Vigilance and Post-Market Surveillance module and the Clinical Investigations and Performance Studies module remain subject to the Commission's rollout.

    Are harmonised medical-device standards mandatory?

    They are generally voluntary. When the reference to a harmonised standard is published in the Official Journal for the MDR or IVDR, applying it can provide a presumption of conformity only for the requirements and conditions covered by that citation. A manufacturer may use another technical solution but must provide suitable evidence that the legal requirements are met.

    How long does an MDR or IVDR consulting project take?

    There is no reliable universal timetable. Duration depends on device qualification and class, maturity of the QMS and evidence, testing, clinical or performance data, supplier inputs, notified-body route, team availability and the number of remediation cycles. Ask for a phased plan with dependencies and decision gates rather than an unsupported promise.

    What should we include in the initial project brief?

    Share the product type, intended purpose, current class or uncertainty, target markets, project stage, existing certificates, requested deliverables and target timing. Do not send patient data, health records, full technical files, proprietary source code, passwords or highly confidential evidence through the first enquiry form. Sensitive material should follow due diligence, an NDA and an agreed secure channel.

    What is the difference between a consultant and an EU authorised representative?

    A consultant provides contracted expertise. A non-EU manufacturer must designate a sole EU authorised representative for the same generic device group under a written mandate, and that representative has specific legal tasks and potential liability under the Regulations. The same organisation may offer both services, but the roles, contracts, independence and conflicts must be explicit.

    Can European-Standards.com select the consultant for us?

    We use the structured brief to identify potentially relevant independent specialists and facilitate introductions. You remain responsible for checking qualifications, experience, references, availability, insurance, data-security controls, conflicts, fees and contract terms. European-Standards.com does not replace regulatory, legal, notified-body or competent-authority decisions.

    Primary-source research

    Official MDR, IVDR and medical-device sources

    Use primary sources to verify legal requirements and current implementation. Commercial summaries can be useful for orientation but should not replace the Regulation, OJEU publications or official guidance.

    Editorial scope: Official EU sources were reviewed on . The page is an information and business-matching resource, not legal advice. Add a named, qualified medical-device reviewer and revision history in the WordPress page template before claiming expert review.

    Ready to define the regulatory project?

    Start with the structured brief, then verify the proposed consultant’s expertise, availability, conflicts, data controls and contract before sharing sensitive information.