Send us an email:
info@mdrc-services.com

Or use the contact form below

 

Notified Body audit - a manufacturer's guide

A Notified Body audit for a medical device may seem like a challenging task, requiring one big effort to succeed. However, there's no one big secret trick to ace it. Success is not one big leap but a series of small, consistent steps that, when taken together, pave the way for a successful certification.


Getting ready for these audits is not just about formally meeting regulatory standards but about showcasing a robust and in many cases scientifically sound approach to demonstrate medical device's safety and effectiveness.

Documentation

The initial step in a Notified Body audit involves reviewing technical and Quality Management System (QMS) documentation. Therefore, prior to the audit, it's crucial to prepare documentation of the highest quality. This documentation should provide scientific proof of the device's safety and effectiveness (performance). If the device carries any risks, they must be addressed. The technical documentation should clearly show that the benefits of the device outweigh its risks.

Quality Management System documentation should clearly show that all processes implemented by the manufacturer are aimed at creating safe and effective devices. Additionally, QMS documentation must outline how the manufacturer plans to handle any potential issues related to the medical device.

The documentation is more about logic and scientific integrity than just about filling all boxes in a checklist. It's like telling a story about how the product was developed, tested, and kept safe after it hit the market. This story needs to make sense, with no gaps or mistakes.

Additional steps to get ready for the audit

Preparing for an audit involves more than just organizing technical documentation and Quality Management System (QMS). Medical device companies must also meet additional requirements to ensure compliance. This includes appointing an Authorized Representative for non-EU companies, obtaining Basic Unique Device Identification (UDI) and Unique Device Identifiers (UDIs), registering on EUDAMED, and acquiring a Single Registration Number (SRN). These steps are necessary for demonstrating regulatory compliance and facilitating a smooth audit process.

Notified Bodies require that medical device manufacturers complete these steps before approaching them for audits and certifications. By completing these requirements beforehand, manufacturers demonstrate their commitment to regulatory compliance and streamline the audit process with Notified Bodies.

Communication

Once all preparations are complete, the medical device company must seek out a suitable Notified Body (NB). The chosen NB must possess an appropriate scope of accreditation, be willing to collaborate with the company (although it may decline), and be available to meet the company's timelines.

Communication is important. Establishing clear channels with the Notified Body is necessary. It's not just about presenting documents but engaging in a constructive dialogue. This interaction not only addresses immediate concerns but sets the stage for a collaborative and ongoing relationship.

That said, keep in mind that Notified Bodies are prohibited by EU regulations from providing consulting services or detailed explanations. Therefore, companies should not expect NBs to offer consulting during the audit process or explain what exactly the manufacturer should do to rectify deficiencies found during audits.

Audits and inspections

Once all preparations are complete and an agreement has been reached between the manufacturer and the Notified Body (NB), the next steps in the certification process involve the audit of documentation and an on-site inspection. This phase ensures that the manufacturer's technical documentation and quality management system (QMS) align with the requirements outlined in the Medical Device Regulation (MDR) or the In Vitro Diagnostic Regulation (IVDR).

During the audit of documentation, the NB thoroughly reviews the manufacturer's technical files, design dossiers, and other relevant documentation to assess compliance with regulatory standards. Following this, an on-site inspection should be conducted to verify the implementation of the QMS and the manufacturing processes. This on-site inspection provides the NB with firsthand insight into the manufacturer's facilities, procedures, and practices, allowing for a comprehensive evaluation of compliance with regulatory requirements.

Audits and inspections conducted by Notified Bodies are crucial steps in the certification process for medical device manufacturers seeking to place their products on the EU market.

Data and process integrity

During audits and inspections conducted by Notified Bodies, the integrity of data and processes is of great importance. Every claim made by the manufacturer must be substantiated with evidence. This means that there should be no assertion left unsupported; each claim must be backed by robust proof.

Coherence and consistency across all processes are essential. Manufacturers must ensure that their processes align seamlessly and that there are clear records documenting each step. Simply having Standard Operating Procedures in place is not sufficient; they must be demonstrated to be effective and actively implemented, rather than existing merely as formalities to meet regulatory requirements. By upholding data and process integrity and providing comprehensive evidence to support claims, manufacturers can strengthen their compliance with regulatory standards and increase their chances of successful certification during audits and inspections.

Certificate

Once all the necessary steps outlined above are completed and regulatory requirements are strictly adhered to, the manufacturer will receive certification from the Notified Body. This certification signifies that the medical device meets all the requisite standards and regulations, allowing it to be introduced into the European market. With the NB certificate in hand, manufacturers gain access to the vast European market, providing them with opportunities for distribution and commercialization of their medical devices across the European Union.

What you will need to sell medical devices in the EU:

Notified body
certificate
Learn more >>

EUDAMED
registration
Learn more >>

EC REP mandate

Learn more >>

Basic UDI

Learn more >>

We will help you obtain all the necessary certificates.

Learn more >>

What you need to have to succeed in certification and sell your products in the EU:

PRRC

Learn more >>

Clinical
evaluation
Learn more >>

Post-marketing
surveillance
Learn more >>

What you need to know to succeed in certification and sell your products in the EU:

CE-marking process under MDR

Learn more >>

CE-marking process under IVDR

Learn more >>

MDR checklist
Learn more >>

Notified Body audit - a manufacturer's guide

A Notified Body audit for a medical device may seem like a challenging task, requiring one big effort to succeed. However, there's no one big secret trick to ace it. Success is not one big leap but a series of small, consistent steps that, when taken together, pave the way for a successful certification.


Getting ready for these audits is not just about formally meeting regulatory standards but about showcasing a robust and in many cases scientifically sound approach to demonstrate medical device's safety and effectiveness.

Documentation

The initial step in a Notified Body audit involves reviewing technical and Quality Management System (QMS) documentation. Therefore, prior to the audit, it's crucial to prepare documentation of the highest quality. This documentation should provide scientific proof of the device's safety and effectiveness (performance). If the device carries any risks, they must be addressed. The technical documentation should clearly show that the benefits of the device outweigh its risks.

Quality Management System documentation should clearly show that all processes implemented by the manufacturer are aimed at creating safe and effective devices. Additionally, QMS documentation must outline how the manufacturer plans to handle any potential issues related to the medical device.

The documentation is more about logic and scientific integrity than just about filling all boxes in a checklist. It's like telling a story about how the product was developed, tested, and kept safe after it hit the market. This story needs to make sense, with no gaps or mistakes.

Additional steps to get ready for the audit

Preparing for an audit involves more than just organizing technical documentation and Quality Management System (QMS). Medical device companies must also meet additional requirements to ensure compliance. This includes appointing an Authorized Representative for non-EU companies, obtaining Basic Unique Device Identification (UDI) and Unique Device Identifiers (UDIs), registering on EUDAMED, and acquiring a Single Registration Number (SRN). These steps are necessary for demonstrating regulatory compliance and facilitating a smooth audit process.

Notified Bodies require that medical device manufacturers complete these steps before approaching them for audits and certifications. By completing these requirements beforehand, manufacturers demonstrate their commitment to regulatory compliance and streamline the audit process with Notified Bodies.

Communication

Once all preparations are complete, the medical device company must seek out a suitable Notified Body (NB). The chosen NB must possess an appropriate scope of accreditation, be willing to collaborate with the company (although it may decline), and be available to meet the company's timelines.

Communication is important. Establishing clear channels with the Notified Body is necessary. It's not just about presenting documents but engaging in a constructive dialogue. This interaction not only addresses immediate concerns but sets the stage for a collaborative and ongoing relationship.

That said, keep in mind that Notified Bodies are prohibited by EU regulations from providing consulting services or detailed explanations. Therefore, companies should not expect NBs to offer consulting during the audit process or explain what exactly the manufacturer should do to rectify deficiencies found during audits.

Audits and inspections

Once all preparations are complete and an agreement has been reached between the manufacturer and the Notified Body (NB), the next steps in the certification process involve the audit of documentation and an on-site inspection. This phase ensures that the manufacturer's technical documentation and quality management system (QMS) align with the requirements outlined in the Medical Device Regulation (MDR) or the In Vitro Diagnostic Regulation (IVDR).

During the audit of documentation, the NB thoroughly reviews the manufacturer's technical files, design dossiers, and other relevant documentation to assess compliance with regulatory standards. Following this, an on-site inspection should be conducted to verify the implementation of the QMS and the manufacturing processes. This on-site inspection provides the NB with firsthand insight into the manufacturer's facilities, procedures, and practices, allowing for a comprehensive evaluation of compliance with regulatory requirements.

Audits and inspections conducted by Notified Bodies are crucial steps in the certification process for medical device manufacturers seeking to place their products on the EU market.

Data and process integrity

During audits and inspections conducted by Notified Bodies, the integrity of data and processes is of great importance. Every claim made by the manufacturer must be substantiated with evidence. This means that there should be no assertion left unsupported; each claim must be backed by robust proof.

Coherence and consistency across all processes are essential. Manufacturers must ensure that their processes align seamlessly and that there are clear records documenting each step. Simply having Standard Operating Procedures in place is not sufficient; they must be demonstrated to be effective and actively implemented, rather than existing merely as formalities to meet regulatory requirements. By upholding data and process integrity and providing comprehensive evidence to support claims, manufacturers can strengthen their compliance with regulatory standards and increase their chances of successful certification during audits and inspections.

Certificate

Once all the necessary steps outlined above are completed and regulatory requirements are strictly adhered to, the manufacturer will receive certification from the Notified Body. This certification signifies that the medical device meets all the requisite standards and regulations, allowing it to be introduced into the European market. With the NB certificate in hand, manufacturers gain access to the vast European market, providing them with opportunities for distribution and commercialization of their medical devices across the European Union.

Further reading

CE-Certificate vs. EC-Certificate

Basic UDI-DI (bUDI) - what is it, where to obtain it, and what to do with it

EUDAMED registration - a brief guide

Contract with the Authorised Representative in the European Union (Authorised Representative Mandate)

GSPR – General Safety and Performance Requirements for medical devices in the European Union

How to obtain CE marking for medical software under the EU MDR or IVDR?

Technical documentation for Medical Device Software in the EU

IEC 62304 - the pivotal standard for software medical devices

Medical Device Regulation (MDR) - basics

ISO and IEC standards for medical device software

Clinical Evaluation, PMCF, and PMS in Medical Device Lifecycle

Notified Bodies and their role in certification of medical devices

What is NANDO and why medical device companies should know about it?

Labeling and UDI requirements for medical devices in the EU

Understanding the roles of Authorised Representatives and Importers under MDR/IVDR

MDR implementation - challenges and solutions

Post-market surveillance under MDR and IVDR - requirements and best practices

Notified Body audit - a manufacturer's guide

Risk management plan - guide for medical device companies

Should my medical device comply with GDPR?

EC-certificate for a medical device - Q&A

How long does it take to CE-mark a medical device?

What is a PRRC?

Essential requirements for importers and distributors under MDR and IVDR

Language requirements for IFUs and labels under the MDR and IVDR

Legal Manufacturer and Original Equipment Manufacturer in medical devices

All articles >>

Send us an email:
info@mdrc-services.com

Or use the contact form below