---
title: Case Study: Hardware MedTech Startup Ran Out of Money
description: Anonymized case study of a hardware MedTech startup that ran out of money during MDR conformity assessment, and what they should have done. 
authors: Tibor Zechmeister, Felix Lenhard
category: MedTech Startup Strategy & PMF
primary_keyword: hardware MedTech startup ran out of money MDR
canonical_url: https://zechmeister-solutions.com/en/blog/case-study-hardware-medtech-out-of-money
source: zechmeister-solutions.com
license: All rights reserved. Content may be cited with attribution and a link to the canonical URL.
---

# Case Study: Hardware MedTech Startup Ran Out of Money

*By Tibor Zechmeister (EU MDR Expert, Notified Body Lead Auditor) and Felix Lenhard.*

> **A composite case: a Class IIa hardware startup raised EUR 4.2 million, planned a 14-month CE route, and shut down 22 months in with the Technical Documentation still under notified body review. The failure was not regulatory incompetence. It was burn-rate arithmetic nobody did in month zero.**

**By Tibor Zechmeister and Felix Lenhard.**

## TL;DR
- This is an anonymised composite of patterns we have seen across multiple hardware startups. It is not a specific named company.
- The founders modelled conformity assessment as a fixed cost and a fixed duration. Both assumptions were wrong.
- EN 60601-1 retesting after a single engineering change consumed 11 weeks and roughly EUR 85,000 they had not budgeted.
- Notified body review cycles added eight months to the plan, during which the team kept burning payroll on 14 people.
- What should have changed: smaller team, fewer hardware variants, design freeze before notified body submission, and a runway model that assumed 1.8x the nominal timeline.

## Why this matters

Every few months we see the same headline on LinkedIn: a promising hardware MedTech startup quietly winds down. The post-mortem blog is always kind. It mentions "challenging fundraising environment" or "regulatory headwinds." What it usually does not mention is that the founders built a budget in month zero that required everything to go right, and MDR conformity assessment under Article 52 and Annex IX does not go right on the first pass. Ever.

This is a composite case. We have stripped identifiers and blended patterns from several startups so nobody is identifiable. The numbers are representative, not actual. The lessons are real.

## What MDR actually says

The relevant provisions the founders in this story underestimated:

**MDR Article 10** sets out general manufacturer obligations. Paragraph 9 requires a quality management system proportionate to the risk class and device type. For hardware this is not a document folder. It means qualified suppliers, calibrated equipment, controlled design changes, and validated production processes under EN ISO 13485:2016+A11:2021.

**MDR Article 52** defines conformity assessment routes by class. A Class IIa device typically follows Annex IX (QMS plus technical documentation assessment on a representative sample per generic device group) or a combination of Annex XI with Annex II documentation. Both routes require notified body involvement.

**MDR Annex I GSPRs 14 and 17** drive the need for compliance with EN 60601-1:2006+A1+A12+A2+A13:2024 (basic safety and essential performance) and EN 60601-1-2:2015+A1:2021 (EMC) for electrically powered devices. These are presumption-of-conformity standards. Using them is not legally mandatory. Not using them means you reinvent the justification from first principles, which no startup has ever done faster or cheaper.

**EN ISO 14971:2019+A11:2021** is the risk management standard referenced against Annex I GSPRs 1 to 9. Every engineering change triggers a risk file update, which can cascade into verification retests.

None of this is news to an experienced QA/RA lead. It is, however, almost always news to a first-time hardware founder building a budget on a Notion page.

## A worked example

Here is the composite timeline. Numbers are rounded.

**Month 0.** Seed close. EUR 4.2 million raised. Team of 9. The pitch deck CE-mark line item: EUR 650,000, 14 months, ready to ship at month 20. Notified body quote in hand. Test house quote in hand. Regulatory consultant engaged part-time.

**Months 1 to 8.** Engineering sprints. QMS spin-up in parallel on a lean eQMS. Design freeze scheduled for month 9. Team grows to 14 because hiring is the first thing founders do when they raise.

**Month 9.** Design freeze slips. A supplier change forces a material substitution on an enclosure. Risk file update triggered. No big deal, the team thinks.

**Month 11.** EN 60601-1 pre-compliance testing at the test house surfaces a creepage-distance issue on the new enclosure and a leakage current flag. Engineering change. Full retest required on the affected subsystems. Cost of retest: roughly EUR 85,000. Schedule impact: 11 weeks.

**Month 14.** Technical Documentation submitted to the notified body. The submission is complete against Annex II but has three areas the reviewers later flag: clinical evaluation depth, biocompatibility rationale for the new material, and software-of-unknown-provenance documentation for a third-party Bluetooth stack.

**Month 16.** First round of notified body deficiencies. 34 findings. Most are minor. Four are major and require new test data.

**Month 18.** Response submitted. Burn rate at this point is approximately EUR 320,000 per month because the full team is still on payroll, waiting.

**Month 20.** Second round of deficiencies. Seven findings remain. Two require a small additional clinical data collection.

**Month 22.** Cash at EUR 400,000. Bridge round conversations collapse because investors want CE mark in hand. The company files for insolvency. Technical Documentation still unapproved. Device never reaches market.

The painful part: the device was fine. The QMS was fine. The team was competent. What killed them was the delta between plan and reality multiplied by a team size that assumed the plan would hold.

## The Subtract to Ship playbook

Looking at this composite case honestly, the Subtract to Ship reframe is not "hire better regulatory people." It is "build a runway model that survives 1.8x the nominal timeline, and keep the team small enough that the 1.8x multiplier does not kill you."

**Model conformity assessment as a range, not a number.** The honest range for a Class IIa hardware device from kickoff to CE certificate is 14 to 28 months. Budget for 24. If you come in at 18, great. If you budgeted for 14 you are dead at month 20.

**Design freeze before notified body submission is non-negotiable.** Every post-freeze change risks a cascade through risk management, verification, validation, and potentially retest. Article 10(9) and EN ISO 13485 clause 7.3 require change control. Notified bodies will reopen reviews for significant changes. The cheapest change is the one you do not make.

**Keep the team small until the certificate is in hand.** The composite startup had 14 people. Eight was enough. The extra six were a bet that the CE mark would land on time and commercial ramp-up would begin. When the CE mark slipped, the six extra people were still on payroll for another year. Roughly EUR 1.4 million of runway evaporated into headcount waiting for regulatory green light.

**Freeze supplier choices early.** Material changes, component substitutions, and contract manufacturer changes all trigger GSPR re-evaluation and frequently retest. Qualify your primary supplier under clause 7.4 of EN ISO 13485 before verification testing begins, not after.

**Run EN 60601-1 pre-compliance testing twice.** Once at engineering-prototype maturity, once at production-equivalent maturity. The first pass finds the expensive problems early. The second pass confirms nothing regressed. Startups skip the first pass to save EUR 30,000 and then spend EUR 85,000 on unplanned retests.

**Treat the clinical evaluation as a first-class workstream from month one, not as paperwork at month twelve.** Under Article 61 and Annex XIV Part A, clinical evaluation drives the benefit-risk analysis the notified body will scrutinise. It cannot be written in two weeks before submission.

**Build a reserve line into the budget: 25 percent minimum.** For hardware with electrical safety and EMC, 35 percent is more honest. This is not padding. This is the cost of the second test round, the notified body deficiency responses, and the payroll during review cycles.

**Have the bridge-round conversation at month 12, not month 20.** Investors fund progress toward milestones, not rescue operations at insolvency. The composite startup waited too long because the founders kept believing the original timeline.

The pattern here is not unique to hardware. But hardware amplifies it: you cannot recompile an enclosure. Retests are physical, time-bound, and expensive. The subtraction move is to reduce the number of things that can go wrong, then model the budget assuming some of them will anyway.

## Reality Check

- Does your runway model assume 1.0x or 1.8x the nominal CE timeline? If 1.0x, stop reading and go fix it.
- What is your burn rate during notified body review cycles, and how many months of review can you afford before you are forced to bridge?
- Is your design frozen before notified body submission, or are you planning to "handle changes as they come up"?
- Have you budgeted for a second round of EN 60601-1 testing, or only the first pass?
- How many people on your team are there for the CE certificate, and how many are there for the commercial launch after it? Could the launch-phase people start 6 months later?
- Do you have a clinical evaluation workstream running from month 1, with a named owner?
- Have you qualified your primary suppliers under clause 7.4 of EN ISO 13485 before verification testing?
- If your notified body returns 30 minor findings and 4 majors, what does that do to your cash runway?

## Frequently Asked Questions

**How much should a Class IIa hardware startup budget for MDR conformity assessment in 2026?**
The honest range is EUR 400,000 to EUR 1.2 million depending on device complexity, number of variants, clinical evaluation effort, and whether electrical safety and EMC testing are required. This excludes QMS build-out, headcount, and working capital. Budget with a 25 to 35 percent reserve.

**How long does Class IIa notified body review typically take?**
The regulatory timelines are not fixed by law. In practice, from submission of complete Technical Documentation to certificate issuance, we see 6 to 14 months for Class IIa hardware, dominated by deficiency response cycles. Plan for 10.

**Can we raise a bridge round if we are behind schedule on CE mark?**
It depends when you start the conversation. At 12 months behind with 4 months of runway, yes, often. At 20 months behind with 2 months of runway, rarely. Investors fund progress toward milestones, not insolvency rescues.

**Should we reduce team size before CE mark to extend runway?**
If the team members are waiting for regulatory approval to start their actual job, yes. Commercial, scale-up manufacturing, and customer success hires can usually start 3 to 6 months later than founders plan. Engineering and regulatory cannot.

**What is the single biggest avoidable cost in this kind of failure?**
Unplanned retests from post-freeze design changes. Freeze the design, freeze the suppliers, freeze the materials, then submit.

**Is this story representative of most hardware MedTech startups?**
Patterns in it are common. Not every startup runs out of money, but the cost overruns and timeline slips are near-universal. The ones that survive had reserve budgets and small teams.

## Related reading
- [The true cost of CE marking: a transparent breakdown](/blog/true-cost-ce-marking-transparent-breakdown) — ground-truth numbers for budgeting.
- [Burn rate management for MedTech startups](/blog/burn-rate-management-medtech) — modelling the 1.8x timeline scenario.
- [MedTech startup failure modes: 10 reasons](/blog/medtech-startup-failure-modes-10-reasons) — how this case fits the broader failure pattern.
- [How long does CE mark actually take?](/blog/how-long-does-ce-mark-take-honest-timelines) — honest ranges by class.
- [Minimum viable regulatory strategy with limited resources](/blog/minimum-viable-regulatory-strategy-ce-mark-limited-resources) — the subtraction playbook before you raise.

## Sources
1. Regulation (EU) 2017/745 on medical devices, consolidated text. Articles 10, 52, 61, Annex I, Annex II, Annex IX, Annex XIV Part A.
2. EN ISO 13485:2016+A11:2021 — Medical devices — Quality management systems — Requirements for regulatory purposes.
3. EN 60601-1:2006+A1+A12+A2+A13:2024 — Medical electrical equipment — General requirements for basic safety and essential performance.
4. EN 60601-1-2:2015+A1:2021 — Medical electrical equipment — EMC requirements and tests.
5. EN ISO 14971:2019+A11:2021 — Medical devices — Application of risk management to medical devices.

---

*This post is part of the [MedTech Startup Strategy & PMF](https://zechmeister-solutions.com/en/blog/category/startup-strategy) cluster in the [Subtract to Ship: MDR Blog](https://zechmeister-solutions.com/en/blog). For EU MDR certification consulting, see [zechmeister-solutions.com](https://zechmeister-solutions.com).*