Conformity assessment is the documented process by which a medical device manufacturer demonstrates that a device meets the applicable regulatory and safety requirements before it reaches the market. It combines quality system evaluation, technical documentation review, and product testing, and for higher-risk devices, it involves an independent notified body or accredited assessor.
What is Conformity Assessment?
Conformity assessment is the evidence-based procedure a manufacturer follows to show that a device conforms to the rules that apply in a given market. In the European Union, it is governed by Article 52 of EU MDR 2017/745 (and Article 48 of IVDR 2017/746 for in vitro diagnostics), and it exists to confirm that a device meets the General Safety and Performance Requirements (GSPR) in Annex I.
The procedure sits near the end of development, after design and risk work are complete but before the CE marking is applied and the Declaration of Conformity is signed. The vocabulary itself is standardized in the ISO/IEC 17000 series, which defines terms such as testing, certification, and accreditation used across regulated industries.
Why conformity assessment matters in medical device development
Conformity assessment is the gate between a finished design and legal market access. Choose the wrong route, or submit technical documentation with gaps, and a notified body review can stall for months while queries pile up. In markets with limited notified body capacity, that delay translates directly into missed revenue and slipped launch dates.
The stakes are also about safety and liability. A device placed on the market without a valid assessment is non-compliant by definition, which exposes the manufacturer to enforcement, product withdrawal, and reputational damage. Assessment is not a one-time hurdle either. Certificates carry surveillance obligations, so weak evidence found later can put an existing certificate at risk.
How conformity assessment works
The route depends on the device risk class. Under EU MDR, devices are classified as Class I, IIa, IIb, or III according to the rules in Annex VIII. Most Class I devices are self-declared by the manufacturer, although sterile devices, measuring devices, and reusable surgical instruments still require notified body involvement for specific aspects. Devices above Class I require assessment by a notified body.
The MDR provides three principal conformity assessment routes:
- Annex IX. Conformity assessment based on a quality management system and assessment of technical documentation. This is the most commonly used route for manufacturers operating an ISO 13485 quality management system.
- Annex X. EU type-examination, where the notified body evaluates a representative sample of the device and issues an EU type-examination certificate.
- Annex XI. Product conformity verification through either a production quality assurance system (Part A) or product verification and batch testing (Part B).
The assessment is supported by internationally recognized standards, including:
- ISO 13485 for quality management systems
- ISO 14971 for risk management
- IEC 60601-1 for electrical safety and EMC
- IEC 62304 for medical device software lifecycle processes
A notified body listed in the EU NANDO database performs the conformity assessment and, if successful, issues the applicable certificate.
The United States follows a different regulatory model. There is no notified body. Manufacturers obtain market authorization through 510(k), De Novo, or Premarket Approval (PMA) pathways and may support their submissions with declarations of conformity to FDA-recognized consensus standards. The FDA’s Accreditation Scheme for Conformity Assessment (ASCA) allows manufacturers to use ISO/IEC 17025-accredited laboratories for selected testing, providing greater confidence in laboratory results and potentially reducing requests for complete test reports.
Since February 2, 2026, FDA quality system requirements have been governed by the Quality Management System Regulation (QMSR), which aligns 21 CFR Part 820 with ISO 13485:2016.
Common challenges and best practices
Teams often choose a conformity assessment route too late, only to discover that their technical documentation does not match the expectations of the selected notified body. Selecting the assessment route during design planning helps ensure evidence is generated correctly from the beginning.
Another common mistake is treating conformity assessment as purely a documentation exercise. Reviewers evaluate whether the quality management system consistently produces the documented outputs. Strong traceability from user needs to design inputs, risk controls, verification activities, and validation evidence is essential.
Successful programs typically:
- Select the conformity assessment route early during development.
- Build technical documentation alongside product development rather than after design completion.
- Maintain complete traceability from user requirements through verification and validation.
- Reserve notified body review slots early and verify the body’s designation covers the device technology.
- Plan EUDAMED Actor Registration alongside conformity assessment, since it became mandatory on 28 May 2026.
How SJML helps with conformity assessment
SJML runs conformity assessment support as part of its Compliance-as-a-Service offering. Its QARA team advises on regulatory strategy and device classification, then prepares the underlying evidence: technical files and design history documentation, an ISO 13485 and MDSAP-aligned quality system, and ISO 14971 risk management files. The team supports CE marking under EU MDR and IVDR, FDA 510(k) submissions, and EUDAMED registration, and it can remediate existing documentation ahead of a notified body review. This lets device makers, from startups to established OEMs, enter the assessment with evidence structured to hold up.
Frequently asked questions
Conformity assessment confirms that a device meets the applicable safety, performance, and quality requirements before it is placed on the market. It provides regulators, healthcare providers, and users with evidence that the manufacturer followed recognized standards and regulatory controls. In the EU, it forms the basis for CE marking and the Declaration of Conformity.
For many Class I devices, the manufacturer performs the assessment and issues its own Declaration of Conformity. Higher-risk devices require an independent Notified Body designated under EU MDR to conduct the assessment and issue certificates. In the United States, the FDA reviews submissions directly, while manufacturers may use ISO/IEC 17025-accredited laboratories through the ASCA program for certain testing activities.
Begin by determining the device classification under Annex VIII, since the classification determines which conformity assessment routes are available. Most manufacturers operating an ISO 13485 quality management system follow Annex IX. Annex X (EU Type-Examination) and Annex XI (Product Conformity Verification) provide alternative routes depending on the device and quality system. Before proceeding, confirm that your selected notified body’s designation covers your device category.
No. Conformity assessment continues throughout the product lifecycle. Notified bodies perform ongoing surveillance audits and technical reviews to verify continued compliance. Significant changes to the device, intended use, manufacturing process, or quality management system may require reassessment. Manufacturers must also incorporate post-market surveillance data into their compliance activities to maintain certification.
Related terms
- CE Marking
- Notified Body
- Technical Documentation
- Declaration of Conformity
- Device Classification
