Skip to main content

Reading a medical device certificate: CE, EU MDR, FDA and ISO 13485

By Vvon Engineering Team | Published | Updated

How to distinguish manufacturer quality-system evidence, device conformity, FDA market status and current transition rules when checking a medical-equipment offer.

Medical equipment RFQ checklist (TXT)

A certificate is useful only when its issuer, scope and relationship to the offered device are understood. Procurement teams should distinguish manufacturer quality-system evidence, device conformity documentation and domestic regulatory requirements before evaluating an offer.

Start with one question: product or company

Medical device certificates fall into two families, and confusing them is the most common error in the room.

An ISO 13485 certificate concerns a named organisation’s medical-device quality management system within its stated sites and scope. It is not, by itself, evidence that a particular device has market authorisation or that every claimed performance characteristic has been independently verified.

A product conformity document, such as an EU certificate issued by a notified body or a United States clearance letter, attaches to devices. It says that this device, or this family of devices, has been assessed against a defined set of requirements.

Request the documents relevant to the actual device and procurement route. Explain discrepancies and verify coverage before deciding responsiveness under the tender’s published rules.

DocumentWhat it actually tells youWhat it does not tell you
ISO 13485 certificateA certification body audited this company's medical device quality system, for this scope, at these sites, valid to this dateWhether the device you are buying is covered, and whether it is safe
EU notified-body certificateEvidence within the stated conformity-assessment route, scope and conditions, where notified-body involvement is requiredA substitute for the manufacturer declaration, instructions or evidence for other models
EU declaration of conformityThe manufacturer’s signed declaration of conformity with applicable legislation and identification of the covered deviceIndependent test evidence or automatic proof that a differently configured offer is covered
United States 510(k) clearanceThe regulator agreed this device is substantially equivalent to an existing legally marketed device, and issued a number you can look upThat it was independently tested, and that the exact variant offered is included
Establishment registration or device listingThe manufacturer told the regulator that it exists and what it makesAnything at all about approval or quality. This is a notification, not an assessment
Test report to IEC 60601-1 or a related standardA laboratory tested a specific configuration and issued a report numberThat other models in the range were tested, unless the report says so

CE marking and EU MDR in practice

For EU medical devices, Regulation (EU) 2017/745 applies alongside conditional transition provisions for eligible legacy devices; in-vitro diagnostics have their own IVDR framework. A printed expiry date alone may not establish a legacy certificate’s current legal status. Obtain the applicable declaration, certificate and transition evidence and check current European Commission guidance.

Under the EU MDR, devices are classified I, IIa, IIb or III through the applicable classification rules. Other jurisdictions and in-vitro diagnostics use different frameworks; the device’s intended purpose and characteristics determine the route.

Check the manufacturer, any required EU authorised representative and the notified body’s designation and device scope through official sources. Great Britain has a separate regulatory system but continues to recognise qualifying CE-marked devices during applicable transition periods; do not reject a device solely because it lacks UKCA marking without checking the current MHRA rules.

United States terminology: cleared, approved, registered, listed

These four words are used interchangeably in sales material and mean quite different things.

ISO 13485: read the scope, the sites and the dates

Read the scope, listed sites and current status of the quality-system certificate. Differences between the brand owner, legal manufacturer and contract manufacturer require explanation, not an assumption that the document is either valid or fraudulent.

  1. Match the legal manufacturer and any relevant contract-manufacturing relationships to the product documentation.
  2. Check that the activities and sites relevant to the offered device are covered by the certificate or an explained certification structure.
  3. Read the certified scope and confirm the device family falls within the relevant activities.
  4. Verify current status with the issuer, including suspensions or withdrawals.
  5. Check accreditation and scope where required by the procurement rules; ISO itself does not certify manufacturers.

How to verify the documentation

  1. Find the issuer or regulator through an independently located official website.
  2. Verify the certificate number, holder, scope and status in the available register or directly with the issuer. Absence from one register is a reason to investigate, not proof of forgery.
  3. For EU evidence, check the relevant legislative route, notified-body designation where applicable, and any legacy-transition conditions.
  4. For a claimed US clearance or approval, check the exact device and status in FDA records.
  5. Resolve inconsistent names, model coverage or dates in writing; allow sufficient time rather than promising a fixed verification turnaround.

Red flags

Why a datasheet claim is not evidence

Marketing phrases such as CE certified or internationally approved need supporting documents. The relevant evidence may include a manufacturer’s declaration, a notified-body certificate, regulator records or test reports; not every legitimate document has an expiry date or a third-party certificate number.

There is a related and subtler distinction. Designed in accordance with IEC 60601-1 is an engineering intention. Tested to IEC 60601-1 by a named laboratory, report number and date stated is evidence. Ask for the report, and when it arrives, check which model variants and which configuration it covers, because certification is granted to specific configurations. A trolley mounted version of an approved wall mounted device is not automatically included, and a certificate covering one model in a family does not automatically extend to the one you are buying. If the offered model is not named or clearly within a named range, ask the manufacturer to confirm coverage in writing.

Putting this into your tender document

Primary references and equipment checks

Have a project to scope?

Share your application, equipment requirements and procurement timeline. Our engineers can help clarify the configuration and scope for your enquiry.

Discuss your requirements

Browse buying and selection guides | Back to all Insights