Class IIb is the higher medium-risk class under the EU Medical Device Regulation. Every Class IIb device needs a Notified Body, and unlike Class IIa, the technical documentation is assessed per device — not sampled across a generic device group. Conformity assessment routes are set out in Article 52 and carried out under Annex IX, or under a combination of Annex X type examination and Annex XI production conformity verification. Class IIb typically arises from Rule 8 (certain implantable and long-term surgically invasive devices), Rule 9 (active therapeutic devices administering or exchanging energy in a potentially hazardous manner), and the Rule 11 branches for software that informs decisions which could cause serious deterioration of health. The step from Class IIa to Class IIb is the point where clinical evidence obligations, technical file depth, and Notified Body scrutiny all increase at once.

By Tibor Zechmeister and Felix Lenhard. Last updated 10 April 2026.

TL;DR

  • Class IIb is the higher medium-risk class under Regulation (EU) 2017/745. The class is assigned by applying the twenty-two classification rules in Annex VIII — it is not chosen by the manufacturer.
  • Every Class IIb device requires Notified Body involvement. The conformity assessment routes are set out in Article 52 and carried out under Annex IX, or under Annex X combined with Annex XI.
  • The central difference from Class IIa is the technical documentation assessment. At Class IIb, the Notified Body assesses the technical documentation for every device, not for a representative device per generic device group (with a narrow exception for certain well-established products within a group).
  • Typical Class IIb devices come from Rule 8 (certain implantable and long-term surgically invasive devices), Rule 9 (active therapeutic devices administering energy in a potentially hazardous manner), and the Rule 11 branch for software whose decisions could cause serious deterioration of health.
  • Clinical evidence obligations under Article 61 and Annex XIV scale up at Class IIb. Literature-based clinical evaluation is still possible in many cases, but the bar is higher and the justification must be stronger.
  • The QMS must comply with Article 10(9). EN ISO 13485:2016 + A11:2021 is the harmonised standard that provides presumption of conformity. Risk management is governed by EN ISO 14971:2019 + A11:2021.
  • The most common founder mistake at Class IIb is budgeting for a Class IIa project. The cost and time delta between the two classes is real and predictable, and pretending otherwise is a runway-failure pattern.

What Class IIb actually means

Class IIb sits between Class IIa and Class III. The label is not a marketing category. It is the output of applying the classification rules in Annex VIII of Regulation (EU) 2017/745 to the device's intended purpose. If the rules point to Class IIb, the device is Class IIb. If two rules point to different classes, the higher class applies under the implementing rules of Annex VIII.

The practical meaning for a founder is a meaningful step up in regulatory burden compared with Class IIa. At Class IIa, the Notified Body samples technical documentation across a generic device group. At Class IIb, the Notified Body assesses the technical documentation for every device. That single change reshapes the project: more preparation, more reviewer questions, more rounds, more time, more cost. The QMS audit is still full-scope. The clinical evidence expectations rise. The post-market surveillance obligations get heavier, because PMS feedback loops matter more for higher-risk devices.

This is also where the Subtract to Ship discipline matters most. At Class IIb, over-scoped documentation is not cautious — it is expensive. A technical file that is twice as long as it needs to be will be reviewed in full, not sampled. Every unnecessary page is a page the reviewer has to read and question. Every contradictory claim is a non-conformity waiting to happen. The job is not to add pages. The job is to make every page defensible against a specific MDR article, annex, or harmonised standard clause.

Typical Class IIb devices

The classification rules determine the class, but three rule families produce most Class IIb devices in practice.

Rule 8 — implantable and long-term surgically invasive devices. Rule 8 is the backbone of Class IIb implantable and long-term surgically invasive classification. The default position under Rule 8 is that implantable devices and long-term surgically invasive devices are Class IIb, with specific escalations to Class III where the device is intended to be used in direct contact with the heart, the central circulatory system, or the central nervous system, or where it is intended to have a biological effect, to be absorbed, or to administer medicinal products, among other criteria. Rule 8 also contains specific downgrade and upgrade sub-rules for particular device categories (for example, certain spinal disc replacements and certain active implantable device accessories). The rule is rich and the escalations are the part founders most often miss. The rule must be read in full, in the actual Regulation, before being applied.

Typical Rule 8 Class IIb devices include many non-absorbable orthopaedic implants, certain long-term surgical meshes, certain dental implants, and a range of implantable devices that do not cross the Class III triggers. The boundary with Class III is where the classification work pays off — getting it wrong in either direction is expensive.

Rule 9 — active therapeutic devices administering or exchanging energy in a potentially hazardous manner. Rule 9 covers active therapeutic devices intended to administer or exchange energy. Class IIa is the default. Class IIb applies where the characteristics of the device mean that the administration or exchange of energy can be in a potentially hazardous manner — for example, where the nature, density, and site of application of the energy could cause harm. Typical Rule 9 Class IIb devices include higher-power therapeutic lasers, certain radiofrequency ablation devices, certain defibrillators (with further escalations depending on use context), and a range of high-energy therapeutic equipment. The Class IIa versus Class IIb distinction here is judgment-intensive and is exactly the kind of call that MDCG 2021-24 guidance and a qualified Notified Body reviewer will scrutinise.

Rule 11 — software, the Class IIb branch. Rule 11 classifies software intended to provide information used for decisions with diagnostic or therapeutic purposes as Class IIa by default, with escalation to Class IIb where the decisions could cause serious deterioration of a person's state of health or a surgical intervention, and to Class III where the decisions could cause death or an irreversible deterioration. Software intended to monitor physiological processes is Class IIa by default, with escalation to Class IIb for monitoring of vital physiological parameters where variations could result in immediate danger to the patient. The Class IIb branch of Rule 11 captures a substantial share of clinically meaningful decision-support software — triage tools with serious clinical consequences, imaging analysis tools supporting decisions about surgical intervention, and monitoring tools for vital parameters. MDCG 2019-11 Rev.1 (June 2025) is the authoritative guidance and must be read before applying Rule 11 to any real SaMD product.

Other Class IIb patterns include certain infusion pumps, certain anaesthesia machines, certain surgical lasers, and a range of energy-delivering therapeutic devices. The specific class for any real device must always be determined by reading Annex VIII, applying the rules to the actual intended purpose, and documenting the decision with a specific rule citation.

The conformity assessment routes for Class IIb

Article 52 sets out the conformity assessment procedures by class. At Class IIb, the manufacturer has options, and the choice has operational consequences.

Route 1 — Annex IX. Annex IX combines a full Quality Management System assessment with an assessment of the technical documentation. At Class IIb, the technical documentation assessment is performed on every device — not sampled across a generic device group — with limited, narrowly defined exceptions inside the Annex. This is the most common route for Class IIb startups because it integrates the QMS and the technical documentation review into a single engagement. The downside is that every device in the pipeline creates review effort. The upside is that the route is well understood and aligns with how most startups actually operate.

Route 2 — Annex X combined with Annex XI. Annex X provides for type examination, and Annex XI provides for conformity assessment based on product conformity verification. For some Class IIb devices, the manufacturer can combine these annexes as an alternative to Annex IX. This route can make sense where the manufacturer wants a type-examination certificate for a stable design and then runs production under a verification regime. It is less common for small startups shipping one or two products, because the overhead of the split route is rarely justified at small volumes.

The choice between Annex IX and the Annex X / Annex XI combination should always be made against the current consolidated text of the Regulation and after discussion with the Notified Body, whose capacity and preferences matter operationally. The right choice for a startup is usually Annex IX, but "usually" is not "always." The specific sub-paragraphs of Article 52 and the specific Annex chapters that apply must be confirmed against the current Regulation before a plan is finalised.

The clinical evidence bar at Class IIb

Article 61 and Annex XIV govern clinical evaluation for every device, but the substance of the obligation scales with class. At Class IIb, the expected depth of the clinical evaluation is higher than at Class IIa. Literature-based clinical evaluation is still possible in many Class IIb cases, but the methodology has to be defensible under tighter scrutiny. Equivalence claims under Article 61 and MDCG 2020-5 must meet the technical, biological, and clinical criteria fully — and the Notified Body will test that.

The specific question at Class IIb is whether the available clinical data, from whatever combination of sources, is sufficient to demonstrate conformity with the relevant general safety and performance requirements under the foreseeable conditions of use. "Sufficient" is not a fixed number. It is a judgment the Notified Body makes on the basis of the clinical evaluation plan, the clinical evaluation report, the risk management file, the post-market clinical follow-up plan, and the post-market surveillance plan. A clinical evaluation that would have scraped through at Class IIa will often not scrape through at Class IIb. Budget accordingly.

For implantable Class IIb devices, the Notified Body may also engage a clinical evaluation consultation procedure for specific categories, and the rules on this are in Article 54 and related provisions. The details matter and must be read in the actual Regulation for the specific device category at hand.

What Notified Body scrutiny looks like at Class IIb

The shape of a Class IIb Notified Body engagement under Annex IX is predictable in broad terms.

QMS audit (on-site). Full-scope QMS audit against Article 10(9) and EN ISO 13485:2016 + A11:2021. Typically a larger engagement than Class IIa because of the higher product risk profile, tighter expectations on design control, more attention to risk management under EN ISO 14971:2019 + A11:2021, and more attention to post-market surveillance and vigilance processes.

Technical documentation review (per device). The Notified Body reviews the technical documentation for every Class IIb device in scope. The review covers the device description, the GSPR conformity matrix against Annex I, the design and manufacturing information, the risk management file, the verification and validation evidence, the clinical evaluation report under Article 61 and Annex XIV, the labelling and the IFU, the post-market surveillance plan under Article 83, and — where the device is implantable — the implant card and patient information requirements. Expect written questions, written answers, and multiple rounds. Expect a reviewer who is looking specifically for the Class IIb escalations and wants to see them reflected in the documentation.

Non-conformities and rounds. Class IIb projects typically see more non-conformity rounds than Class IIa projects, not because the manufacturer is worse but because there is simply more surface area under review. Planning for this avoids the runway shock that hits founders who expected a Class IIa-sized engagement.

Surveillance and renewal. Once certificates are issued, surveillance audits continue throughout the validity period, and renewal involves re-assessment. For implantable Class IIb devices in particular, ongoing PMCF data and PSUR reporting feed into the surveillance cycle and can trigger additional reviewer questions between audits.

Cost and timeline reality

The honest order of magnitude for a Class IIb project from QMS-ready state to certificate is twelve to twenty-four months, with wide variance driven by Notified Body capacity, scope match, the quality of the clinical evidence, and the depth of the technical documentation. The honest cost is meaningfully higher than Class IIa — typically low to mid six-figure euros for Notified Body fees alone on a first device, before internal effort, consultants, clinical data costs, and testing. These ranges are rough, every project is different, and exceptional projects run faster, but founders who budget for a Class IIa-sized engagement and end up in a Class IIb project are the most common runway-failure pattern we see in the Class IIa-to-Class IIb gap.

Common Class IIb misunderstandings

Assuming Class IIb is "Class IIa with one more document." It is not. The per-device technical documentation review is a structural change, not an incremental one. Every device in the pipeline now creates review effort that did not exist at Class IIa. Plan the pipeline accordingly.

Inheriting Directive-era classification. Under Rule 8 and Rule 11 in particular, devices that were comfortably in lower classes under the former Directives can find themselves at Class IIb under the MDR. Re-classify every device under MDR Annex VIII. Do not inherit class from legacy documentation.

Underestimating the clinical evidence lift. Class IIb clinical evaluation under Article 61 and Annex XIV is real work, and the Notified Body will test every load-bearing claim. A weak clinical evaluation is the most common reason Class IIb projects stall at technical documentation review, and the cost of fixing it mid-project is much higher than the cost of building it properly up-front.

Confusing Class IIb and Class III for implantables. Rule 8 contains specific escalations from Class IIb to Class III for particular device categories and particular contact sites. Getting this wrong in either direction is expensive. The remedy is to read Rule 8 in full, check every escalation criterion against the actual intended purpose, and document the decision with a specific rule citation.

Assuming Article 15 PRRC can be part-time by default. At Class IIb, the Person Responsible for Regulatory Compliance role is real operational work. Article 15(2) arrangements for micro and small enterprises are available within the limits of the Regulation, but the substantive obligations do not shrink with company size. Plan for real PRRC capacity, not a checkbox.

Over-documenting instead of over-engineering. At Class IIb, teams under pressure often react by adding documentation volume. Reviewers at Class IIb are experienced, and they will notice when volume substitutes for substance. The remedy is fewer, tighter, better-traced documents — not longer ones.

The Subtract to Ship angle on Class IIb

Class IIb is where Subtract to Ship gets the most leverage per hour of work. At Class IIa, the framework keeps a small team alive. At Class IIb, the framework often determines whether a small team can reach the certificate at all.

The moves are specific. Classify under Annex VIII with a written rule citation, and — at Class IIb — check every escalation criterion against the actual intended purpose so the class does not drift upward during review. Choose the Notified Body on scope match and capacity before anything else, and talk to them early about the conformity assessment route. Build the QMS scoped to the operations of the actual company, and use EN ISO 13485:2016 + A11:2021 as the reference rather than reinventing the wheel. Build the risk management file against EN ISO 14971:2019 + A11:2021 and make sure it is coupled tightly to the clinical evaluation and the post-market surveillance plan, because the Notified Body reads these together. Build the clinical evaluation under Article 61 and Annex XIV using the cheapest legitimate pathway the evidence supports, and do not default to a new clinical investigation unless the evidence genuinely demands one. Cut every document that does not trace to a specific GSPR, an Annex IX requirement, or a harmonised standard clause.

The test is the same at every class. Can every remaining activity be defended by pointing to a specific MDR article, annex, or harmonised standard requirement? At Class IIb, the answer has to be yes — because everything that cannot be defended will cost review time you do not have.

Reality Check — Where do you stand on Class IIb?

  1. Have you classified your device under Annex VIII with a specific rule citation, including any Rule 8 or Rule 9 escalations that might apply?
  2. Have you checked the Class IIb / Class III boundary for your specific device against Rule 8 and any other relevant rules, with the decision documented in the technical file?
  3. If your device is software, have you read MDCG 2019-11 Rev.1 (June 2025) and applied Rule 11 with the Class IIa / Class IIb / Class III branches explicitly considered?
  4. Have you selected a Notified Body whose scope covers your Class IIb device category and whose capacity realistically matches your timeline?
  5. Is your QMS plan built against EN ISO 13485:2016 + A11:2021 and Article 10(9), sized to actual operations rather than a generic template?
  6. Is your risk management file built against EN ISO 14971:2019 + A11:2021 and coupled tightly to the clinical evaluation and the post-market surveillance plan?
  7. Does your clinical evaluation plan under Article 61 and Annex XIV use the cheapest legitimate pathway the evidence supports, and does it meet MDCG 2020-5 criteria where equivalence is claimed?
  8. Have you identified the conformity assessment route from Article 52 (Annex IX, or Annex X + Annex XI) and the specific Annex chapters that will govern your project?
  9. Have you budgeted realistic Class IIb ranges for time and cost, not a Class IIa plan with a small markup?
  10. Can you defend every activity in your Class IIb plan by pointing to a specific article, annex, or harmonised standard clause?

Frequently Asked Questions

What is the main difference between Class IIa and Class IIb under the MDR? The main difference is the technical documentation assessment. At Class IIa, the Notified Body assesses the technical documentation for at least one representative device per generic device group under Annex IX. At Class IIb, the Notified Body assesses the technical documentation for every device, with only narrow exceptions inside the Annex. The QMS audit is full-scope at both classes, but the per-device technical documentation review at Class IIb is the structural change that drives the higher cost and longer timeline.

Which classification rules most commonly produce Class IIb devices? Three rule families produce most Class IIb devices in practice. Rule 8 covers implantable and long-term surgically invasive devices, with a Class IIb default and specific escalations to Class III. Rule 9 covers active therapeutic devices administering or exchanging energy, with a Class IIa default and escalation to Class IIb where the administration of energy is potentially hazardous. Rule 11 has a Class IIb branch for software whose decisions could cause serious deterioration of health or surgical intervention, and for software monitoring vital physiological parameters where variations could result in immediate danger.

Is a Notified Body always required for a Class IIb device? Yes. Every Class IIb device requires Notified Body involvement under Article 52 of Regulation (EU) 2017/745. The specific conformity assessment route is Annex IX, or a combination of Annex X type examination and Annex XI production conformity verification, depending on the choice made by the manufacturer and the specific device category. There is no self-declaration pathway for Class IIb.

How much more clinical evidence does Class IIb need compared with Class IIa? There is no fixed multiplier. The clinical evaluation obligation under Article 61 and Annex XIV scales with risk, and Class IIb is higher risk than Class IIa, so the depth and defensibility expected by the Notified Body are higher. Literature-based clinical evaluation is still possible in many Class IIb cases, but the methodology has to be stronger and equivalence claims have to meet the full technical, biological, and clinical criteria defined in Article 61 and clarified in MDCG 2020-5. A clinical evaluation that scraped through at Class IIa will often not scrape through at Class IIb.

What QMS and risk management standards apply at Class IIb? The harmonised QMS standard is EN ISO 13485:2016 + A11:2021, which provides presumption of conformity with the MDR QMS obligations under Article 10(9). The risk management standard is EN ISO 14971:2019 + A11:2021, which provides presumption of conformity with the risk management obligations in Annex I. Both standards apply across classes, but Notified Body expectations on the depth of implementation scale up at Class IIb.

How long does a Class IIb conformity assessment take? The honest order of magnitude is twelve to twenty-four months from QMS-ready state to certificate, with wide variance driven by Notified Body capacity, scope match, documentation quality, and clinical evidence strength. Exceptional projects run faster. Projects with weak clinical evidence or poor Notified Body fit run longer. Planning on the middle of the range rather than the best case is the conservative move.

Can I move a Class IIb device down to Class IIa by changing the intended purpose? Sometimes, with caveats. The class follows the intended purpose as stated on the label, in the instructions for use, in promotional materials, and as specified by the manufacturer in the clinical evaluation. If a narrower, legitimate intended purpose produces a lower class under Annex VIII, the lower class applies. But narrowing intended purpose to game classification is a dangerous move — it can undermine clinical and commercial positioning, and it can create enforcement risk if the actual use in the market exceeds the stated intended purpose. Classify honestly, document the reasoning, and if a narrower intended purpose genuinely fits the product, use it.

Sources

  1. Regulation (EU) 2017/745 of the European Parliament and of the Council of 5 April 2017 on medical devices, Article 10 (manufacturer obligations, including 10(9) on QMS), Article 52 (conformity assessment procedures), Article 61 (clinical evaluation), Annex VIII (classification rules, including Rule 8 on implantable and long-term surgically invasive devices, Rule 9 on active therapeutic devices, and Rule 11 on software), Annex IX (conformity assessment based on a quality management system and on assessment of technical documentation), Annex X (type examination), Annex XI (conformity assessment based on product conformity verification). Official Journal L 117, 5.5.2017.
  2. MDCG 2021-24 — Guidance on classification of medical devices, October 2021.
  3. MDCG 2019-11 Rev.1 — Guidance on Qualification and Classification of Software in Regulation (EU) 2017/745 — MDR and Regulation (EU) 2017/746 — IVDR, October 2019, Revision 1 June 2025.
  4. EN ISO 13485:2016 + A11:2021 — Medical devices — Quality management systems — Requirements for regulatory purposes.
  5. EN ISO 14971:2019 + A11:2021 — Medical devices — Application of risk management to medical devices.

This post is part of the Device Classification & Conformity Assessment series in the Subtract to Ship: MDR blog. Authored by Felix Lenhard and Tibor Zechmeister. Class IIb is where the gap between a survivable regulatory plan and a runway-failure plan opens widest — the per-device technical documentation review, the deeper clinical evidence bar, and the heavier Notified Body scrutiny all arrive at the same time, and the teams that ship are the ones who cut every document that cannot be tied to a specific MDR article, annex, or harmonised standard clause.