CE Certification For Medical Devices In The Eu

Scope and evidence must be confirmed before any paid tests or filings.

CE certification for a medical device in the EU is not a single licence issued by one EU authority. Under Regulation (EU) 2017/745 (MDR), the manufacturer must identify the applicable device classification and conformity-assessment route, build the required technical and clinical evidence, complete any required Notified Body assessment, issue the EU declaration of conformity, and then affix the CE marking.

The first practical question is therefore not “where do I apply for a CE certificate?” but “which MDR route applies to this device, and does that route require a Notified Body?” The answer depends mainly on the device’s intended purpose, classification under Annex VIII, and any special features such as sterility, measuring function, or reusable surgical use.

What “CE certification” means for an MDR medical device

The MDR separates the manufacturer’s legal responsibility from third-party certification. The manufacturer remains responsible for conformity. Where a Notified Body is required, that body assesses the manufacturer and/or device under the applicable procedure in Annex IX, X or XI and issues the relevant certificate or certificates. The manufacturer then draws up the EU declaration of conformity and affixes the CE mark. When a Notified Body has been involved in the conformity assessment, its identification number follows the CE marking.

This distinction matters because a standard Class I device may reach CE marking without a Notified Body certificate, while Class Is, Im, Ir, IIa, IIb and III devices require Notified Body involvement to the extent set by Article 52. For the narrow self-declaration boundary, see CE self-certification for medical devices in the EU.

Start with scope and classification, not with a certification provider

Before requesting quotations or submitting a certification application, freeze the intended purpose and determine which regulatory regime applies. The MDR covers medical devices for human use and certain related products; in vitro diagnostic medical devices are governed by Regulation (EU) 2017/746 (IVDR), not the MDR route described here. Classification under the MDR is into Classes I, IIa, IIb and III according to the intended purpose and inherent risks, using Annex VIII.

Confirm product qualification: document why the product is an MDR medical device rather than an IVD, medicinal product, cosmetic, general consumer product or another regulated category.
Lock the intended purpose: classification and clinical evidence depend on what the manufacturer claims the device is intended to do, for whom and in which conditions.
Apply Annex VIII: identify the applicable classification rule or rules and keep the reasoning in the technical documentation.
Do not assume “low risk” means self-certification: sterile Class I, Class I with a measuring function, and reusable surgical instruments have specific Notified Body involvement.

If the product is an in vitro diagnostic device, use the separate EU IVDR compliance route.

Notified Body decision matrix

Device route	Notified Body?	Core conformity route	What the manufacturer should verify first
Class I, non-sterile, no measuring function, not a reusable surgical instrument	Normally no	Manufacturer prepares Annex II/III technical documentation, issues the EU declaration of conformity and affixes CE	Classification rationale, GSPR evidence, clinical evaluation, risk management, PMS and registration duties
Class Is / Im / Ir	Yes, limited to the relevant aspects	Article 52(7): Annex IX Chapters I and III or Annex XI Part A, with involvement limited to sterility, metrological requirements or reuse aspects as applicable	Whether the device truly falls within the Is, Im or Ir subcategory and what part of conformity is within the Notified Body scope
Class IIa	Yes	Article 52(6): typically Annex IX Chapters I and III with technical-documentation assessment of at least one representative device per category; an Annex XI route is also available	Device category, sampling implications and readiness of the QMS and technical documentation
Class IIb	Yes	Article 52(4): Annex IX Chapters I and III with technical-documentation assessment, or Annex X plus Annex XI	Whether the device is implantable and whether device-by-device technical-documentation assessment applies
Class III	Yes	Article 52(3): Annex IX, or Annex X plus Annex XI	Clinical-evidence strategy, technical-documentation completeness and any special consultation requirements
Custom-made or investigational device	Different regime	Do not use the ordinary CE route without checking the specific MDR provisions	Whether the device is genuinely custom-made or investigational and which special procedure applies

The matrix is a route-selection tool, not a substitute for a documented Annex VIII classification. A classification error can send the manufacturer into the wrong conformity-assessment procedure.

Certification-readiness evidence: what should exist before assessment

A certification application is strongest when the regulatory route and evidence package are already internally coherent. At minimum, the manufacturer should be able to connect each material claim and risk to objective evidence.

Regulatory identity: intended purpose, device description, variants/accessories, legal manufacturer, economic-operator model and documented classification.
General Safety and Performance Requirements: a traceable demonstration of how the applicable Annex I requirements are met.
Risk management: a maintained risk-management system linked to design controls, verification, validation, usability and post-market information.
Technical documentation: Annex II and Annex III documentation, including design/manufacturing information and post-market surveillance documentation.
Clinical evidence: a clinical evaluation under Article 61 and Annex XIV, with the level of evidence justified for the device and intended purpose.
Quality management system: an MDR-compliant QMS proportionate to the risk class and device type; where Annex IX is used, the QMS is audited by the Notified Body.
UDI and registration data: Basic UDI-DI/UDI planning and EUDAMED data prepared for the applicable registration steps.
EU presence and responsibility: a sole authorised representative for a manufacturer established outside the EU, and the required person responsible for regulatory compliance arrangements.

From route decision to CE mark: the minimum sequence

Confirm MDR qualification, intended purpose and Annex VIII classification.
Select the legally available conformity-assessment route and, if required, a Notified Body designated under the MDR for the relevant scope.
Complete the QMS, technical documentation, risk management, verification/validation, clinical evaluation and post-market planning needed for that route.
Complete the Notified Body application, document review and audit where required, and close nonconformities before certification.
After the applicable conformity assessment is successfully completed, issue the EU declaration of conformity and affix the CE marking in accordance with Article 20.
Complete applicable EUDAMED/UDI registrations and maintain certification through surveillance, post-market obligations and change control.

This page intentionally does not reproduce the full procedural chronology owned by the separate CE marking process for medical devices in the EU.

Choosing a Notified Body and understanding what its certificate covers

Not every conformity-assessment organisation may certify every medical device. Use the European Commission’s NANDO database to verify that the organisation is currently notified under Regulation (EU) 2017/745 and that its notified scope covers the relevant device and conformity-assessment activity. The Commission’s medical-device Notified Body page links to the current MDR list.

A Notified Body certificate is not a substitute for the manufacturer’s EU declaration of conformity. Under the MDR, certificates identify the manufacturer, the conformity-assessment procedure and the covered device or device groups; device-specific certificates identify the intended purpose, risk class and Basic UDI-DI. Certificates can also be restricted, suspended or withdrawn when MDR requirements are no longer met.

Since 28 May 2026, the EUDAMED Actor, UDI/Device, Notified Bodies & Certificates and Market Surveillance modules identified by the Commission as functional are mandatory to use. Notified Bodies enter certificate information, including amendments, suspensions, reinstatements, withdrawals and refusals, in the relevant EUDAMED module.

Failure modes that can invalidate a “CE certification” plan

Failure mode	Why it matters	Safe corrective action
Starting with a Notified Body quotation before classification is defensible	The wrong class can mean the wrong assessment route, evidence depth and commercial plan	Freeze intended purpose and document Annex VIII classification first
Treating ISO 13485 certification as the CE certificate	A QMS certificate does not by itself establish MDR conformity of the device	Map the full MDR conformity route, including device technical and clinical evidence
Assuming all Class I devices are fully self-declared	Is, Im and Ir devices require Notified Body involvement for specified aspects	Check the Class I subcategory before issuing the declaration of conformity
Using a Notified Body without checking its MDR scope	A body may be notified under MDR but not for the required device codes or procedure	Verify the current NANDO notification and scope before contracting
Affixing CE before closing the applicable conformity assessment	Article 20 requires CE marking only for devices considered to conform with the MDR	Complete the applicable assessment, then issue the EU declaration and affix CE
Making a major design or intended-purpose change without certification impact assessment	The change can affect classification, evidence, certificate scope or transition status	Run formal regulatory change control before implementation and involve the Notified Body where required

For label-specific obligations after the route is established, use the dedicated CE marking and labeling requirements page. For budgeting rather than route selection, use the CE marking cost page.

Legacy devices: do not confuse a transition period with new certification

Certain devices covered by MDD/AIMDD certificates or pre-26 May 2021 declarations may benefit from extended MDR transition periods only if the legal conditions are met. The current MDR transition framework provides, in broad terms, a 31 December 2027 end date for Class III and most Class IIb implantable legacy devices, and 31 December 2028 for other Class IIb, Class IIa, Class I sterile/measuring devices and certain devices requiring Notified Body involvement for the first time under MDR. The extension is conditional, including continued Directive compliance, no significant change in design or intended purpose, acceptable safety, an MDR QMS by 26 May 2024, a timely formal application and a written agreement with a Notified Body by 26 September 2024 where applicable.

A new device, a device outside those conditions, or a device with a disqualifying significant change cannot rely on the dates alone. Transition eligibility should be checked as a separate legal question before treating an old certificate as a market-access basis.

What information is needed to determine your CE certification route

For a reliable route decision, prepare the following before engaging a Notified Body or regulatory adviser:

device description, variants and accessories;
precise intended purpose, indications, target population and intended users;
whether the device is invasive, active, implantable, sterile, measuring or a reusable surgical instrument;
software functions and any diagnostic or therapeutic decisions driven by software;
materials and substances, including any medicinal substance or biological material;
proposed MDR classification rule and rationale;
manufacturer location and EU authorised-representative status;
current QMS status and the maturity of technical, clinical, verification/validation and PMS evidence;
for an existing legacy device, the Directive certificate/declaration, change history and evidence that Article 120 transition conditions were met.

With those inputs, the manufacturer can determine whether the route is self-declaration or Notified Body certification, which conformity-assessment procedure is legally available, and what evidence gaps must be closed before application.

FAQ

Does every medical device receive a CE certificate from a Notified Body?

No. A standard Class I device that is not sterile, does not have a measuring function and is not a reusable surgical instrument is normally self-declared by the manufacturer after the required technical documentation and conformity work. Other routes require Notified Body involvement as specified by Article 52.

Can I choose any Notified Body in the EU?

No. The organisation must be designated under the MDR and its notified scope must cover the relevant conformity-assessment activity and device codes. Verify the current designation and scope in NANDO before relying on a quotation or application slot.

Is an ISO 13485 certificate enough to put the CE mark on a medical device?

No. ISO 13485 can support the quality-management system, but CE marking requires conformity with the MDR as a whole, including the applicable technical, clinical, risk, registration and conformity-assessment requirements. The manufacturer must still issue an EU declaration of conformity after the applicable route is completed.

Does a non-EU manufacturer need an EU authorised representative before certification?

A manufacturer not established in an EU Member State must designate a sole authorised representative before placing the device on the Union market. Where Notified Body involvement is required, Article 31 also ties economic-operator registration information to the application stage, so the EU economic-operator structure should be resolved early.

How long is an MDR Notified Body certificate valid?

The MDR states that a certificate is valid for the period it indicates, which may not exceed five years. It may be extended for further periods of up to five years following reassessment under the applicable conformity-assessment procedure. Ongoing surveillance and change control still apply during validity.