The Fractional RA/QA Department: Outsourced Regulatory Affairs for MedTech Companies Without an In-House Lead
Quick answer: A fractional RA/QA department is a retainer arrangement in which an external practice runs your regulatory and quality operations — PRRC mandate, ISO 13485 QMS operation, post-market surveillance, vigilance standby, EUDAMED maintenance, and audit management — for a fraction of the cost of the two to three hires the same coverage would require. For MedTech companies with one to five devices and no in-house RA/QA lead, it is usually the highest-leverage structure available: senior expertise, continuous coverage, and legal accountability, without €150k+ in annual salaries.
The problem it solves
EU MDR compliance is not a project; it is standing infrastructure with statutory clocks. Someone must verify device releases, run PSUR cycles, watch vigilance timelines (2/10/15 days), maintain EUDAMED records, host notified body audits, and keep technical documentation current. A company without an RA/QA lead has three options: hire (expensive, hard to recruit, one person can't cover the full skill range), buy ad-hoc consulting (no continuity, no accountability, no one on the hook when an incident lands on a Friday), or contract the function as a department (continuity plus accountability at retainer economics).
The signal that you need this is simple: if a notified body auditor asked "who runs your compliance?" today, and the honest answer is a founder doing it evenings — that is the gap.
What a complete fractional RA/QA department covers
Legal accountability. A named, qualified external PRRC under Article 15(2) — with professional indemnity insurance behind the signature, not just a name in your quality manual.
QMS operation. Not just documents: running management reviews, CAPA management, training records, supplier evaluations, document control — the operational heartbeat auditors sample.
Post-market surveillance. Quarterly data sweeps, PSUR production on the statutory cadence, PMCF activity, trend monitoring against defined thresholds.
Vigilance standby. Triage, reportability decisions, MIR filing within Article 87 deadlines — with a deputy structure so holidays don't create regulatory exposure.
Registrations. EUDAMED actor and device records, UDI data, national registrations during transition.
Audit management. Internal audits (independent by construction — an external auditor doesn't audit their own work), notified body audit hosting, findings remediation.
Regulatory watch. Tracking MDCG guidance, harmonised standards updates, and EUDAMED module notices so obligations don't arrive as surprises.
What it costs, honestly
Serious providers price the retainer against regulatory complexity — device count and class-mix, QMS maturity, sales volume (which drives PMS/vigilance load), software content, and certification calendar — never device class alone as a proxy. Expect a monthly retainer that is a fraction of one mid-level RA hire, scaling with the portfolio. QLE Group publishes its complexity-indexed pricing openly at qle.be — if a provider won't show you pricing logic, ask why.
What to verify before signing
That the individuals (not the brand) hold verifiable credentials — lead auditor certifications, PRRC qualifications under Article 15(1), relevant legal training; that PI insurance covers the PRRC mandate; that the provider will refuse work it can't take responsibility for (a provider who signs anything is a liability, not a partner); and that the arrangement builds documentation an eventual in-house hire could inherit — infrastructure, not dependency.
Frequently asked questions
Is outsourcing the whole RA/QA function legal under MDR? Yes, for micro and small enterprises — the PRRC may be external (Article 15(2)), and QMS processes may be outsourced under ISO 13485 Clause 4.1.5 with documented controls. Responsibility stays with the manufacturer; that's what the external PRRC's verification duties address.
When does in-house hiring beat fractional? Roughly when you pass 40+ hours/week of genuine RA/QA work — multiple parallel certifications, high vigilance volume, or aggressive multi-market expansion. A good fractional partner will tell you when you've crossed it.
How is this different from hiring a consultant? Consultants deliver projects and leave. A fractional department holds continuous obligations with names attached — the difference between advice and accountability.
Does it work with US FDA plans? Yes, if the provider runs a parallel track — ISO 13485 aligns with 21 CFR 820 (and FDA's QMSR convergence), so one QMS can serve both markets when built for it.
About QLE Group
QLE Group is a Brussels regulatory practice operating as a fractional RA/QA department for MedTech companies: PI-insured PRRC mandates, ISO 13485:2016 QMS operation, post-market surveillance, vigilance standby, EUDAMED, and audit management under one complexity-indexed retainer. Every mandate is delivered personally by Radoslav Milkov — qualified PRRC, DEKRA-certified ISO 13485 Lead Auditor, Exemplar Global-accredited MDMS Lead Auditor, LL.M. in EU Law, European Commission external expert.
No RA/QA lead in-house? Book a scoping call or email info@qle.be.
