Conformity assessment · MDR Annex IX
Understanding MDR Annex IX
How the quality management system and technical documentation assessment work together
Annex IX is not simply an ISO 13485 audit followed by a technical file review. It tests whether the manufacturer can create compliant devices and maintain their conformity throughout the lifecycle.
See how the assessment works ↓The QMS controls the process. The technical file demonstrates its output.
The central idea
Annex IX assesses the connection between the organisation and the device
An elegant quality manual cannot compensate for weak technical documentation. An excellent technical file cannot compensate for a system incapable of keeping it current.
01
What Annex IX actually assesses #
Many manufacturers approach Annex IX with a relatively simple picture in mind: obtain ISO 13485 certification, submit a technical file to a Notified Body and receive permission to place the CE mark on the device.
The reality is more demanding.
Annex IX does not treat the quality management system and technical documentation as two isolated exercises. The Notified Body examines whether the manufacturer has built a regulatory system capable of developing compliant devices, maintaining their documentation and responding appropriately when products, evidence or regulatory expectations change.
It is therefore not only an assessment of whether one technical file is acceptable today. It also asks whether the manufacturer can maintain conformity throughout the device lifecycle.
A QMS-based conformity assessment route combining organisational control, device-level evidence and continued Notified Body surveillance.
Annex IX covers:
- Assessment of the manufacturer’s quality management system
- Technical documentation assessment at the level required for the device
- Continued surveillance by the Notified Body
- Additional procedures for certain device types
- Retention and availability of conformity-assessment records
It is one of the principal routes available to manufacturers of Class IIa, IIb and III devices before they draw up the EU Declaration of Conformity and affix the CE marking. It can also apply in a limited manner to certain Class I devices.
The applicable route is determined through Article 52 of the MDR ↗. Annex IX then explains how the QMS-based route operates.
02
Why ISO 13485 is not enough #
An ISO 13485-compliant QMS provides a strong foundation for Annex IX, but ISO 13485 certification is not the same as MDR conformity assessment.
The MDR requires the QMS to address regulatory processes that may not be fully covered by a conventional ISO 13485 implementation.
Qualification, classification, conformity route and applicable legal requirements
Clinical evaluation, PMCF and continuing evidence maintenance
PMS, vigilance, trend reporting and corrective action
UDI, traceability and controlled device specifications
Risk management connected to design, evidence and post-market information
Management of device, software, manufacturing and QMS changes
A manufacturer can therefore hold an ISO 13485 certificate and still be inadequately prepared for Annex IX assessment.
Not merely whether procedures exist, but whether they collectively ensure continued conformity with the MDR.
03
Chapter I: assessment of the quality management system #
Chapter I requires the manufacturer to establish, document, implement and maintain an effective QMS throughout the lifecycle of the devices concerned.
The application submitted to the Notified Body includes information about the manufacturer, relevant sites and devices, together with the QMS documentation, a draft EU Declaration of Conformity, PMS and vigilance procedures, the PMCF plan where applicable and the clinical evaluation plan.
The Notified Body assesses both the documented system and its implementation. The assessment normally includes an audit at the manufacturer’s premises. Where supplier or subcontractor activities have a significant effect on conformity, those organisations may also be assessed.
What does the Notified Body examine?
The review extends well beyond manufacturing and final inspection. It covers the complete regulatory lifecycle, including:
- Management responsibility and organisational authority
- Competence of personnel performing critical activities
- Design planning, control, verification and validation
- Regulatory strategy and applicable GSPRs
- Risk management
- Clinical evaluation and PMCF
- Preclinical evaluation
- Manufacturing and final inspection
- Sterilisation where applicable
- Supplier and subcontractor controls
- Calibration and testing
- Device identification and traceability
- PMS, vigilance and trend reporting
- CAPA and nonconformity control
- Control of device and QMS changes
The audit therefore asks whether employees follow the procedures and whether those procedures are capable of producing and maintaining MDR-compliant devices.
How technical documentation enters the QMS assessment
For Class IIa and IIb devices, the QMS assessment is accompanied by assessment of technical documentation for devices selected on a representative basis.
The Notified Body considers the novelty of the technology, similarities in design, manufacturing and sterilisation methods, intended purpose, risk characteristics, previous assessments and the preclinical and clinical characteristics of the portfolio. It must document why particular samples were selected.
The sampling process is further explained in MDCG 2019-13 Rev.1 ↗.
04
Approval is the beginning of surveillance #
If the QMS complies with the applicable requirements, the Notified Body issues an EU quality management system certificate. That certificate does not end its involvement.
The Notified Body must conduct appropriate audits and assessments at least once every 12 months. For Class IIa and IIb devices, surveillance also includes further technical documentation assessments based on representative samples.
During an unannounced audit, the Notified Body may test devices or samples from manufacturing. It may also obtain devices from the market.
Changes cannot simply be implemented
The manufacturer must inform the Notified Body about planned substantial changes to the approved QMS or the covered device range. Changes to an approved device that could affect safety, performance or the conditions of use may also require prior approval.
The Notified Body determines whether the change can be handled under the existing certification, requires additional assessment or audit, needs a certificate supplement or triggers a new conformity assessment.
A release described internally as maintenance or performance improvement may still constitute a regulatory change requiring formal assessment.
05
Chapter II: assessment of technical documentation #
Chapter II describes the detailed technical documentation assessment procedure. The manufacturer submits documentation covering the design, manufacture and performance of the device as required by Annexes II and III.
The Notified Body may examine:
- Device description and intended purpose
- Classification rationale
- GSPR conformity
- Risk management
- Preclinical and biological evaluation
- Electrical safety and electromagnetic compatibility
- Software verification and validation
- Usability engineering
- Clinical evaluation and PMCF
- Labelling and instructions for use
- Manufacturing information
- PMS planning
The Notified Body may request additional evidence or further testing. It may conduct physical or laboratory tests or require the manufacturer to arrange them.
06
How much documentation is assessed? #
The answer depends on the device class and characteristics.
Class III devices
Under the Annex IX route, Chapter II technical documentation assessment applies to each device design rather than one representative sample from a wider category.
Class IIb devices
At least one representative device is assessed from each generic device group. Further files are selected during surveillance.
Class IIb implantable devices
Assessment generally applies to every device design. The MDR exempts specified well-established implants, including certain sutures, staples, screws, plates, wires, pins, clips and connectors.
Class IIa devices
At least one representative device is assessed from each category of devices, followed by further sampling during surveillance.
Class I devices with special characteristics
For sterile, measuring and reusable surgical devices, Notified Body involvement is limited to sterility, metrology or reuse-related aspects respectively.
“Every device” means each applicable device design or model. It does not mean that the Notified Body reviews every physical unit manufactured.
07
Why clinical evidence receives particular attention #
The technical documentation assessment includes a detailed review of the clinical evaluation. The Notified Body considers:
- The quality and relevance of the clinical data
- Whether evidence supports the intended purpose and claims
- Whether the benefit-risk determination is acceptable
- Whether claimed equivalence is adequately demonstrated
- Whether the PMCF plan is necessary and proportionate
- Whether post-market clinical evidence milestones should be established
The outcome is documented in a Clinical Evaluation Assessment Report.
This is why a technically complete file can still fail assessment. A large quantity of literature, testing and clinical information does not necessarily amount to sufficient clinical evidence. The evidence must be connected coherently to the intended purpose, claims, risks, state of the art and expected clinical benefits.
08
When additional procedures are required #
Chapter II also contains procedures for devices requiring consultation with an expert panel or another authority. Depending on the device, these may include:
- Certain Class III implantable devices
- Certain Class IIb active devices intended to administer or remove medicinal products
- Devices incorporating an ancillary medicinal substance
- Devices incorporating derivatives of human blood or plasma
- Devices manufactured using certain human or animal tissues or cells
- Substance-based devices absorbed by or locally dispersed in the body
The procedure can involve an EU expert panel, a medicinal-products authority, the European Medicines Agency or an authority responsible for human tissues and cells.
Additional consultation can materially affect the evidence strategy and assessment timeline. It should be identified before the application reaches the Notified Body.
09
Chapter III: administrative provisions #
Chapter III is considerably shorter than the first two chapters. It requires the manufacturer or, where applicable, its Authorised Representative to retain relevant conformity-assessment records and make them available to competent authorities.
After the last non-implantable device has been placed on the market
After the last implantable device has been placed on the market
The retained records include the EU Declaration of Conformity, relevant QMS and technical documentation, change information and Notified Body decisions and reports.
Member States must also ensure that the documentation remains available if the manufacturer or Authorised Representative becomes bankrupt or ceases activity before the retention period expires.
Chapter III does not contain the surveillance-audit programme. Surveillance, annual audits and unannounced audits are addressed in Chapter I.
10
When does the Annex IX route make sense? #
Annex IX is often a practical route for manufacturers with an established device portfolio and mature QMS. It may be particularly suitable where:
- The manufacturer develops several devices
- Design and manufacturing activities are controlled through one integrated QMS
- New device variants are expected
- The organisation has mature clinical, risk and post-market processes
- Long-term certification and continued portfolio development are planned
It should not be selected simply because the manufacturer already holds an ISO 13485 certificate. Device classification, implantable status, portfolio diversity, alternative routes under Annexes X and XI, technical documentation readiness, additional consultation and anticipated changes should all be considered.
Common misunderstandings
The QMS must also satisfy the MDR-specific requirements.
The file demonstrates whether the QMS produces compliant outputs.
Further representative files are assessed during surveillance.
Every applicable device design is assessed, not every manufactured unit.
Sterile, measuring and reusable surgical devices require limited involvement.
Surveillance, sampling, change assessment and unannounced audits continue.
The practical conclusion
Annex IX is a lifecycle assessment
The technical documentation shows whether the manufacturer has correctly applied its regulatory, clinical, risk-management, design and validation processes to a particular device. The QMS shows whether those processes can continue to be applied consistently after certification.
That is why a good quality manual cannot compensate for weak technical documentation—and an excellent technical file cannot compensate for a QMS incapable of maintaining it.
Annex IX ultimately tests whether the manufacturer can control the complete regulatory lifecycle, from the initial regulatory strategy and design decisions to clinical evidence, production, post-market surveillance, change management and eventual withdrawal from the market.
Official references
Preparing for Annex IX?
Connect the QMS, technical documentation and evidence before the assessment begins
MDRC helps manufacturers structure the conformity assessment pathway and prepare connected, assessment-ready regulatory documentation.
From the knowledge centre
