What does the CE mark on a medical device actually confirm, and what has to be locked down before a manufacturer can apply it? A CE mark for medical devices confirms that a product has followed the applicable conformity assessment route and meets the relevant European requirements for safety, performance and regulatory compliance under Regulation (EU) 2017/745 (MDR) or Regulation (EU) 2017/746 (IVDR). It is not a marketing badge — it is the visible outcome of a technical file and a quality system that have to hold up under scrutiny.
Before going further, a quick scannable answer for anyone checking the basics:
- What CE marking confirms: that a device has gone through the conformity assessment route corresponding to its risk class and meets the applicable safety, performance and regulatory requirements under MDR or IVDR.
- What it does not confirm: that the manufacturer’s obligations end at the moment the mark is applied. Devices remain subject to lifecycle requirements for as long as they stay on the EU market.
- What manufacturers typically need in place first: a defensible intended purpose and classification, a risk management file, clinical or performance evidence, General Safety and Performance Requirements (GSPR) traceability, a working quality management system, and a plan for post-market surveillance.
What CE marking actually proves under MDR/IVDR (and what it doesn’t)
MDR and IVDR were adopted by the European Parliament and the Council on the same date, 5 April 2017, and published together in the Official Journal on 5 May 2017 — MDR occupying pages 1 to 175 of L 117, IVDR pages 176 to 332 of the same issue. Both set out the conditions under which a device can be placed on the EU market, but they are not interchangeable: MDR covers medical devices, IVDR covers in vitro diagnostic devices, and IVDR replaced the earlier Directive 98/79/EC rather than sitting alongside it.
In practice, teams sometimes treat the CE mark as a finish line — a certificate obtained once and filed away. It is more accurate to describe it as a conclusion that a specific evidence package supported at a specific point in time. Whether that conclusion still holds a year later depends on whether the underlying documentation, testing and post-market data have kept pace with the product and its use in the field.
How does MDR differ from IVDR for market access?
Both regulations share the same architecture — classification, conformity assessment, technical documentation, post-market obligations — but they diverge on the object of evidence. MDR is built around a device’s mechanical, biological and clinical performance in or on the body. IVDR is built around a test’s analytical and clinical performance in identifying, diagnosing or monitoring a condition. That distinction matters more than it might seem: a Commission Staff Working Document dated 16 December 2025 notes that around two thirds of all clinical decisions are based on information provided by in vitro diagnostic devices, which gives some sense of why IVDR’s performance evaluation requirements exist independently of MDR’s clinical evaluation framework rather than being a lighter variant of it.
Start with classification and intended purpose: the decisions that drive everything else
Nearly every downstream requirement traces back to how a manufacturer defines a device’s intended purpose: the indications, the target population, who is expected to use it, and in what setting. These fields are often treated as administrative boilerplate late in development, but under MDR and IVDR they function as the anchors that decide risk classification, and classification decides almost everything that follows.
Devices are grouped into Class I, Is, Im, IIa, IIb or III, a structure that scales scrutiny with risk. A December 2025 European Commission proposal to amend both regulations states plainly that, depending on a device’s risk class, the manufacturer must involve a Notified Body in the conformity assessment before it can affix a CE mark and place the device on the market. Lower-risk Class I devices without a sterile, measuring or reusable-surgical-instrument function can generally proceed on the manufacturer’s own declaration; everything above that threshold requires third-party assessment of varying depth. Borderline products — combination devices, software that could be classified as a medical device, or devices sitting between two intended purposes — are where classification disputes most often delay a submission before it even reaches a Notified Body.
Do all devices need a Notified Body?
No. Whether a Notified Body is involved at all, and how intensively, depends on the risk class established during classification. Lower classes can rely more heavily on the manufacturer’s own conformity declaration; higher classes require the Notified Body to review technical documentation, audit the quality management system, or both. Getting classification wrong — or leaving it ambiguous — is one of the more common reasons a submission stalls before technical review even begins.
The evidence chain: GSPRs, risk management and clinical or performance evaluation
MDR’s General Safety and Performance Requirements, set out in Annex I, are less a checklist than a traceability exercise: every design choice, every material, every claim in the labeling has to connect to a risk assessment and, where relevant, to test data or clinical evidence. Annex I, Chapter II, Section 10.1, requires that devices be designed and manufactured so that their characteristics and performance are fulfilled, with particular attention to the choice of materials — their toxicity and flammability — their compatibility with tissues, cells and body fluids, the impact of manufacturing processes on material properties, and mechanical properties such as strength, ductility, fracture resistance and fatigue resistance. Section 10.2 requires that devices be designed, manufactured and packaged to minimise the risk posed by contaminants and residues to patients and to anyone involved in transport, storage and use.
Section 10.4.1 goes further, requiring manufacturers to reduce as far as possible the risks posed by substances or particles that may be released from the device, including wear debris, degradation products and processing residues. For certain substances in specified device contexts, the same section references a concentration threshold above 0.1% weight by weight, applied where justified under the criteria in Section 10.4.2 — a detail that matters most for devices incorporating materials with known toxicological concerns, where crossing that threshold triggers additional justification and labeling obligations rather than an outright prohibition.
None of this evidence exists in isolation. A risk management file needs to connect design decisions to identified hazards and to the tests or clinical data that close the loop, and the clinical evaluation (for MDR) or performance evaluation (for IVDR) needs to show, with literature, clinical data or both, that the device’s benefits outweigh its residual risks for its stated intended purpose. Gaps tend to surface where the intended purpose has broadened since an earlier version of the device, or where equivalence claims to a predicate product are asserted without the comparative data to support them.
What is Technical Documentation in CE marking?
Technical Documentation is the consolidated file — covering device description and intended purpose, classification rationale, design and manufacturing information, GSPR compliance evidence, risk management, clinical or performance evaluation, and labeling — that a Notified Body reviews (where one is involved) and that a manufacturer must be able to produce on request for as long as the device remains on the market. In practice, the file rarely fails on a single missing document; it more often fails on inconsistency, for example when the intended purpose stated in the file, the claims in the instructions for use and the scope of the clinical evaluation don’t quite line up with each other. A labeling update made for one market, or a supplier change that alters a material’s specification, is a common example of the kind of change that needs to be reflected consistently across the file rather than patched in one place and left in another.
Quality management, economic operators and market access logistics
A quality management system, commonly aligned with recognized international standards, is what keeps the technical file accurate between updates rather than accurate only at the moment of submission. Design controls, supplier controls, complaint handling and change control are the processes that, in practice, determine whether a post-market observation gets folded back into the documentation or sits unresolved. Risk management and usability engineering are typically informed by internationally recognized frameworks that manufacturers reference when building the risk file and justifying the benefit-risk balance described in the clinical or performance evaluation.
Alongside the manufacturer, MDR and IVDR define a set of economic operator roles — manufacturer, and, for companies established outside the EU, an Authorized Representative, along with importers and distributors further down the supply chain. Each role carries its own record-keeping responsibilities, and mapping who holds which obligation before the device reaches the market avoids the more common scenario where two parties assume the other is handling registration, labeling checks or vigilance reporting. Device identification and registration under the EU’s UDI and EUDAMED framework sit within the same logistics: manufacturers generally need a strategy for Basic UDI-DI assignment and database registration well before the device is placed on the market, even where parts of the system are still being phased in.
Working with a Notified Body: reducing review cycles
The practical sequence, in broad terms, runs from classification and intended purpose definition, through conformity assessment route selection, to Technical Documentation compilation, Notified Body review where the risk class requires it, and finally post-market surveillance once the device is on the market. This is the type of work covered by the CE mark of medical devices support services, which typically span classification, Technical Documentation preparation, Notified Body coordination and post-market surveillance management for manufacturers navigating MDR and IVDR.
Manufacturers who approach a Notified Body with an internally consistent file — where intended purpose, labeling, risk management and clinical evidence all tell the same story — tend to face fewer rounds of clarification questions than those who submit a technically complete but internally contradictory package. A pre-submission internal check for consistency, and a short freeze on document changes while the file is under review, are practical habits rather than regulatory requirements, but they reduce the odds of a stop-the-clock question over something that could have been caught internally.
A pre-market CE marking readiness checklist
Before spending on a formal submission, most manufacturers benefit from confirming they can show, in writing, each of the following:
- A defensible intended purpose and classification rationale, including the reasoning for any borderline determination
- A quality management system scope that actually matches the device and manufacturing process described in the technical file
- A risk management file connecting hazards to mitigations and to supporting test data
- A clinical evaluation (MDR) or performance evaluation (IVDR) with literature, clinical or analytical data, and an explicit benefit-risk conclusion
- A post-market surveillance plan, and where applicable a PMCF plan or a documented justification for why one isn’t needed
- Labeling and instructions for use consistent with every other document in the file
- Economic operator roles mapped and agreed, with UDI and registration steps scheduled
The scale of the market these obligations apply to is not small: a European Commission proposal from December 2025 estimates roughly 2,000,000 different kinds of medical devices circulating globally across more than 7,000 generic device groups, with over 38,000 medical technology companies in Europe — around 90% of them SMEs — employing more than 930,000 people, in a European medical technology market valued at approximately EUR 170 billion in 2024. Against that backdrop, a gap in one manufacturer’s file is rarely visible to regulators until it is reviewed on its own merits, which is exactly why the readiness work has to happen before submission, not during it.
The takeaway: CE marking is won before submission
The device that clears conformity assessment with the fewest questions is usually not the one with the most polished cover letter — it is the one whose intended purpose, classification, risk file, clinical or performance evidence, labeling and quality system all say the same thing when checked against each other. Getting there means regulatory, clinical, R&D and supply chain functions agreeing on the same facts early, rather than reconciling them for the first time when a Notified Body asks a question none of them expected.
