CE mark is the midpoint of the MedTech journey, not the finish line. Tibor lost roughly two million euros on the wrong development partners, the wrong manufacturing partners, and investor-recommended advice that turned out to be theoretical and inefficient. A compliant product is not automatically a bought product. Founders who treat the CE mark as market success confuse regulatory permission with commercial traction, and they usually discover the confusion only after they have burned through their runway.

By Tibor Zechmeister and Felix Lenhard.

TL;DR

  • Tibor lost approximately two million euros across multiple MedTech ventures on the wrong development partners, wrong manufacturing partners, and inefficient investor-recommended advisors.
  • CE mark grants permission to place a device on the EU market. It does not grant customers, revenue, or product-market fit.
  • MDR Article 10(15) requires manufacturers to qualify suppliers and control outsourced processes, but many startups treat supplier selection as a commercial decision rather than a regulatory one.
  • The anti-pattern catalogue: relying on theoretical advisors who have never certified a device, signing suppliers on marketing claims rather than evidence, and treating CE mark as the finish line.
  • The Subtract to Ship response: qualify suppliers hard, treat CE mark as the midpoint, and separate compliance from commercial success in every plan, every pitch, and every board meeting.

Why this matters (Hook)

Tibor tells this story reluctantly. It is not a founder's favourite story to tell. Across his four MedTech companies and the ventures he was involved in before Zechmeister Strategic Solutions, he estimates that roughly two million euros were lost to three overlapping mistakes. The wrong development partners. The wrong manufacturing partners. Advisors recommended by investors who, when their recommendations were audited with hindsight, turned out to be theoretical, inefficient, and occasionally actively harmful to the product.

The mistakes were not technically regulatory mistakes. The MDR did not cause them. But each of them was a decision a more experienced founder would have made differently, and each of them compounded with the regulatory burden to drain runway faster than the roadmap predicted.

Around the same period Tibor landed on a second realisation that cost him less money but more time. Just because a product is CE-marked does not mean it is automatically bought by the market. The CE mark opens a door. It does not push the customer through it.

Felix has watched this exact pattern repeat across the 44 startups he has coached. The founders who internalise these two lessons early, before they have lost their own two million euros, build lean teams, rigorous supplier qualification processes, and commercial plans that start long before certification is complete. The founders who do not internalise them ship a compliant device into a market that has not yet been built, and run out of money before they figure out the difference.

What MDR actually says (Surface)

The regulation is surprisingly explicit about supplier and partner responsibility, even if founders rarely read it through this lens.

Article 10(9) requires manufacturers of devices other than custom-made to establish, document, implement, maintain, keep up to date, and continually improve a quality management system. EN ISO 13485:2016+A11:2021 is the harmonised standard for this QMS and it contains detailed requirements on supplier control, outsourced processes, purchasing, and verification of purchased product.

Article 10(15) extends manufacturer responsibility to ensure that devices comply when placed on the market, which in practice means the manufacturer is accountable for the quality of everything that comes from a supplier, subcontractor, or contract manufacturer. Legal responsibility does not transfer with a purchase order.

EN ISO 13485:2016+A11:2021 clause 7.4 on purchasing requires evaluation and selection of suppliers based on their ability to supply product in accordance with the organisation's requirements. Controls must be proportionate to the risk associated with the purchased product. Records of supplier evaluations must be maintained.

Taken together, the regulation says this: the founder is fully responsible for anything a supplier touches, the founder must qualify suppliers before using them, and the qualification must be documented, risk-based, and kept current. A supplier who says they are ISO 13485 certified is not the same as a supplier who is qualified for your specific device.

What the regulation does not say is anything about market success. Nothing in MDR, no MDCG guidance, and no harmonised standard will tell a founder whether hospitals will buy the device, at what price, through which procurement process, or on what timeline. The regulation is silent on commercial outcomes. Founders who confuse regulatory permission with commercial traction are filling in that silence with wishful thinking.

A worked example (Test)

A simplified version of the two-million-euro pattern, reconstructed from Tibor's own experience and the pattern Felix sees repeatedly in coaching.

A hardware MedTech startup raises a seed round of two-and-a-half million euros. The founding team is technical, serious, and ambitious. The board is stocked with investors who have deep networks and firm opinions about how to run a MedTech company. The board introduces the team to a development partner they have used on previous deals. The team signs the development contract on reputation, without running a structured qualification on the partner's medical device experience, QMS maturity, or track record with CE-marked hardware.

Eighteen months and 700,000 euros later, the development output is a prototype that does not meet the product requirements, has no design history file, and cannot be transferred into production as-is. The founders rebuild key subsystems with a second partner. That partner is better but expensive. Another 600,000 euros goes into rework.

Meanwhile, the investor network recommends a regulatory advisor. The advisor is impressive in meetings, has a long CV, and charges a premium rate. It later becomes clear the advisor has tenure in a narrow role at a large company but has never personally led a startup to CE mark. The advice is theoretical. The timelines are wrong. The technical file structure requires substantial rework when a new advisor with actual certification experience joins. Another 300,000 euros, plus months, gone.

Manufacturing partner selection follows the same pattern. A supplier wins the contract on a low quoted price and a polished presentation. When production runs begin, tolerances drift, batches fail QC, and the quality agreement proves to be too thin to enforce corrective action. The founders switch manufacturers after their first commercial batches, paying the tooling cost twice. Another 400,000 euros, and more critically, a delay in first revenue.

The CE mark is eventually achieved. The day the certificate arrives, the team believes the hardest part is over. Within six months they discover that hospitals do not know the product exists, that procurement cycles take a year, that the pricing model does not match reimbursement reality, and that a competitor with worse technology but better distribution is winning deals the team believed were theirs. The CE mark was real. The market was not yet built.

Total damage across the partner mistakes and the CE-as-finish-line assumption: roughly two million euros and more than a year of runway. None of it caused by MDR directly. All of it avoidable with a different operating discipline around partners and around commercial preparation.

The Subtract to Ship playbook (Ship)

Felix and Tibor have converted the pattern into a playbook. It has three parts: partner discipline, supplier discipline, and commercial-regulatory separation.

Partner discipline.

  1. Never sign a development partner on a board introduction alone. Require references from at least two CE-marked devices the partner helped deliver, and call the references directly.
  2. Inspect the partner's QMS. If they cannot show an EN ISO 13485 certificate and walk you through their design control procedures, they are not a medical device development partner.
  3. Define the exit ramps in the contract before signing. Milestone-based payments. IP ownership. Transfer of the design history file on termination. A contract that is painful to exit is a contract you will exit painfully.
  4. For advisors, apply Tibor's rule: years in a narrow role is not expertise. First-hand certification experience is expertise. Ask how many CE marks the advisor has personally led, and for which classes. Verify.

Supplier discipline.

  1. Qualify suppliers on evidence, not on claims. ISO 13485 certification is a starting point, not a conclusion. Request and review the supplier's QMS documentation, audit reports, and test data for your specific device type.
  2. Write a proper quality agreement. Define notification of change, notification of nonconformity, access for audits, and sub-tier supplier control. Standard templates from EN ISO 13485 practice are fine. Handshake agreements are not.
  3. Run a first-article inspection and a pilot production run before committing to volume. The cheapest supplier discovery is the one that happens before the tooling is paid for.
  4. Document the supplier qualification in the technical file. MDR Article 10(9) and EN ISO 13485 clause 7.4 both require it. Notified Body auditors will ask for it.

Commercial-regulatory separation.

  1. Build a commercial plan that is independent of the regulatory plan. The CE mark unlocks the ability to sell. It does not unlock selling. Map decision-making units, procurement processes, reimbursement reality, and real pricing long before certification.
  2. Treat the CE mark as the midpoint, not the finish line. Runway planning should reflect the truth that revenue typically begins six to eighteen months after CE mark, not on the day the certificate arrives. Budget for the gap.
  3. Qualify early customers during the clinical and usability phases. Felix has seen founders convert summative usability study participants and clinical investigation sites into reference customers. This is honest, ethical, and efficient.
  4. Separate pitch narratives. Regulatory milestones for the regulatory audience. Commercial milestones for the commercial audience. Do not pitch CE mark as market validation to commercial investors, and do not pitch early sales as regulatory readiness to regulatory-savvy investors.

Reality Check

  1. Can you name, for each of your current partners, two CE-marked devices they have helped deliver, verified by reference calls?
  2. Do you have written quality agreements with every supplier touching a regulated component, and have you actually read them?
  3. Have you personally audited, or had a competent person audit, your contract manufacturer within the last twelve months?
  4. Does your regulatory advisor have documented first-hand experience leading CE marks for your device class?
  5. Is your runway plan built on the CE mark unlocking revenue on day one, or on the realistic commercial ramp after certification?
  6. Have you mapped the real decision-making unit for your buyer, including procurement, clinical users, IT, and finance?
  7. Is your pricing model tested against the actual reimbursement and procurement reality of your target market?
  8. If your largest partner or supplier had to be replaced tomorrow, do you know what it would cost and how long it would take?

Frequently Asked Questions

Is the two-million-euro figure a worst case? It is not a worst case. It is a pattern figure built from Tibor's own experience across multiple ventures, compounded across partner and advisor decisions. Felix has coached founders who have lost more, and founders who have lost less. The specific number matters less than the pattern.

Should startups avoid investor-recommended advisors entirely? No. Investor networks are a legitimate source of introductions. The discipline is to run the same qualification on an investor-recommended advisor that the team would run on a stranger. The warm introduction is not the qualification.

What is the single biggest supplier mistake? Signing on marketing claims without evidence. An ISO 13485 certificate tells you the supplier has a certified QMS, not that the QMS is fit for your device. Always request supporting documentation and audit rights.

How much of the CE mark cost should be mirrored by commercial preparation? Felix's rule of thumb for coached startups is that the commercial preparation budget should be at least one-third the size of the regulatory budget by the time the CE mark arrives. Less than that and the team is guaranteed to have a gap between certification and revenue.

Does this problem get smaller with larger funding rounds? No. Larger rounds tend to amplify the same mistakes because there is more money to burn on the wrong partners and more pressure to deploy it quickly. The discipline is independent of round size.

Where does Subtract to Ship fit in? Subtract to Ship applies equally to partner portfolios and to technical files. Cut partners that do not belong. Cut advisors whose advice is theoretical. Cut suppliers who have not qualified. The subtraction mindset is the same mindset used on the technical file, applied to the operating model.

Sources

  1. Regulation (EU) 2017/745 on medical devices, consolidated text. Articles 10(9), 10(15).
  2. EN ISO 13485:2016+A11:2021 Medical devices. Quality management systems. Requirements for regulatory purposes. Clause 7.4 Purchasing.
  3. MDCG 2021-24 Classification of medical devices (October 2021).