EU MDR CE Marking Roadmap: Every Step from Classification to Certificate

Quick answer: CE marking a medical device under EU MDR (2017/745) follows a fixed sequence: (1) confirm the product is a medical device and classify it under Annex VIII; (2) establish a quality management system (ISO 13485:2016); (3) compile technical documentation per Annexes II–III including clinical evaluation; (4) appoint your PRRC and, for non-EU manufacturers, an authorised representative; (5) pass the applicable conformity assessment — via notified body for anything above Class I self-certified; (6) register in EUDAMED, assign UDI, draw up the declaration of conformity, and affix the CE mark. Realistic timelines run from a few months (Class I) to 18+ months (Class III), with notified body queues often the longest single item.

Step 1 — Qualification and classification

First confirm your product meets the Article 2 definition of a medical device, then classify it using the 22 rules of Annex VIII. Classification (I, Is/Im/Ir, IIa, IIb, III) determines your conformity assessment route, clinical evidence expectations, PSUR cadence, and notified body involvement. Software is classified under Rule 11 and lands in Class IIa or higher far more often than founders expect. Get classification wrong and everything downstream is rework.

Step 2 — Quality management system

Article 10(9) requires a QMS covering regulatory compliance strategy, risk management (ISO 14971), clinical evaluation, technical documentation, post-market surveillance, and vigilance. ISO 13485:2016 is the harmonised framework. Build it early — the QMS generates the records your notified body audits.

Step 3 — Technical documentation

Annex II defines the technical documentation: device description and specification, labelling and IFU, design and manufacturing information, general safety and performance requirements (GSPR, Annex I) with the solutions adopted, benefit-risk analysis and risk management file, and verification/validation including the clinical evaluation report (Article 61, Annex XIV). Annex III adds the post-market surveillance documentation. This file is the single most audited artefact in the system.

Step 4 — People and legal structure

Appoint your PRRC (Article 15 — external mandate permitted for micro/small enterprises). Non-EU manufacturers appoint an EU authorised representative (Article 11). Confirm importer and distributor arrangements (Articles 13–14).

Step 5 — Conformity assessment

• Class I (non-sterile, non-measuring, non-reusable-surgical): self-certification — compile documentation, sign the declaration of conformity.

• Class Is / Im / Ir: notified body assesses the specific aspects (sterility, measuring, reprocessing).

• Class IIa / IIb: typically Annex IX (QMS + technical documentation assessment on a sampling basis; IIb non-implantable sampled per category, implantable per device with limited exceptions).

• Class III: Annex IX with full technical documentation assessment per device, plus expert panel consultation for certain implantables.

Notified body capacity remains a planning constraint — engage early, expect application-to-certificate timelines of 12–18 months for first certifications, and treat the queue as a project dependency.

Step 6 — Registration, UDI, declaration, CE mark

Register as an economic operator in EUDAMED (actor module → SRN), assign UDI-DIs, register devices, draw up the EU declaration of conformity (Annex IV), and affix the CE mark (Annex V) with the notified body number where applicable. Post-market obligations then run continuously: PMS (Articles 83–86), PSURs, vigilance (Articles 87–91).

Where projects actually stall

In practice, CE projects stall on: classification disputes discovered late; clinical evaluation gaps (equivalence claims that don't survive scrutiny); GSPR mapping done as an afterthought; QMS records that don't exist because the system was written but never operated; and notified body queues nobody put on the Gantt chart. A regulatory strategy review in month one is cheaper than any of these in month twelve.

Frequently asked questions

How long does CE marking take? Class I: 2–4 months of documentation work. Class IIa/IIb: commonly 12–18 months including notified body assessment. Class III: 18 months or more.

What does it cost? Notified body fees, testing, and consulting scale with complexity — device count, software, sterility, clinical evidence route — not class alone. QLE Group publishes complexity-indexed pricing at qle.be.

Can we sell in the EU while assessment is pending? No. No CE mark, no market. Plan cash accordingly.

Do we need clinical trials? Not always — clinical evaluation (Article 61) can rest on equivalence or existing data where justifiable, but MDR tightened equivalence substantially; Class III and implantables generally need clinical investigation data.

About QLE Group

QLE Group runs CE marking projects end-to-end from Brussels: regulatory strategy, ISO 13485 QMS, technical documentation, notified body management, and post-market infrastructure — delivered by Radoslav Milkov, qualified PRRC, ISO 13485 / 21 CFR 820 Lead Auditor, LL.M. in EU Law, and European Commission external expert.

Planning a CE marking project? Book a scoping call or email info@qle.be.