The conformity assessment procedure for a Class III device under Regulation (EU) 2017/745 is the heaviest pathway in the MDR. Article 52 is the legal basis, Annex IX is the dominant route, and Annex X combined with Annex XI is the alternative. The Annex IX procedure for Class III uses the same ordered spine as Class IIb — Notified Body selection, contract and scope, application package, QMS audit, per-device technical documentation review, certificate, surveillance — but adds two extra scrutiny layers on top: the clinical evaluation consultation procedure under Article 54 for certain implantable Class III devices, and the scrutiny procedure under Article 55 that routes the Notified Body's clinical evaluation assessment report to expert panels where the conditions apply. EN ISO 13485:2016+A11:2021 is the harmonised standard audited at Annex IX Section 2. Class III certificates are valid for up to five years, with annual surveillance and the possibility of unannounced audits throughout the cycle.

By Tibor Zechmeister and Felix Lenhard. Last updated 10 April 2026.

TL;DR

  • Article 52 of Regulation (EU) 2017/745 sets out the conformity assessment procedures available for Class III. The primary route is Annex IX. The alternative is Annex X type examination combined with Annex XI production conformity verification.
  • Every Class III device under Annex IX gets per-device technical documentation assessment. No sampling. No generic device group shortcut.
  • For specific categories of implantable Class III devices, the clinical evaluation consultation procedure under Article 54 triggers an independent expert panel review of the clinical evaluation assessment report before the certificate can be issued.
  • The scrutiny procedure under Article 55 can extend Class III assessments by additional months when the conditions for expert panel involvement are met.
  • EN ISO 13485:2016+A11:2021 is the harmonised standard that provides presumption of conformity with the Article 10(9) QMS obligations the Notified Body audits under Annex IX Section 2.
  • Class III certificates are valid for up to five years, with annual surveillance audits and the possibility of unannounced visits throughout the certificate cycle.

Why Class III is its own category of project

Class III is not a heavier version of Class IIb the way Class IIb is a heavier version of Class IIa. The step spine looks similar on paper, but the two scrutiny layers that Article 54 and Article 55 add on top change the economics of the whole project. A Class IIb Annex IX procedure is a predictable machine once the Notified Body fit is right and the documentation is good. A Class III Annex IX procedure has two extra external review gates that neither the manufacturer nor the Notified Body fully controls, and those gates reshape the timeline, the fee, and the risk profile.

This post walks through the full process step by step, with emphasis on what Class III adds beyond the Class IIb procedure covered in The Conformity Assessment Procedure for Class IIb Devices: What to Expect. The conceptual overview of what Class III means is in Class III Medical Devices Under MDR: Highest Risk, Highest Scrutiny. For the upstream route decision across Annex IX, Annex X, and Annex XI, see Choosing the Right Conformity Assessment Route for Your Startup's Device Class.

Step 1 — Notified Body selection with Class III scope

Notified Body selection is the decision that moves the Class III timeline more than any other decision the founder will make. The pool of Notified Bodies designated for Class III scopes is smaller than the pool designated for Class IIb. For specific device categories — active implantables, certain implantable cardiovascular devices, devices incorporating medicinal substances — the pool narrows further. For some niche Class III technologies, the shortlist is a handful of bodies for the entire European market, and the queues reflect that.

Three criteria apply, the same as at lower classes, but the stakes are higher. Scope match first — the Notified Body must be designated by the Commission for the specific device codes, horizontal technologies, and implantable categories that apply to your Class III device. A body designated in principle but without recent Class III experience in your technology family will cost months of translation time and reviewer questions that miss the real technical issues. Capacity second — the question is not whether they can take you, it is when they can start a Class III file, when the clinical reviewer will be available, and whether their current Class III backlog fits your runway. Communication speed third — Class III procedures run more written rounds than lower classes because the per-device review sits on top of scrutiny layers, and reviewer response latency compounds across every exchange.

Output of Step 1: a Notified Body selected with a documented rationale covering Class III scope designation for your device codes and implantable categories, recent technical experience in your technology family, capacity availability for your target start date, and references on similar Class III projects.

Step 2 — Contract, scope, and documentation depth

The contract names the conformity assessment procedure (Annex IX, or Annex X + Annex XI), the scope of the QMS to be audited, the specific devices covered, the language, the fee structure, the planned audit dates, and the surveillance cadence for the five-year certificate cycle. At Class III, the contract must also anticipate the Article 54 consultation procedure where it applies and the Article 55 scrutiny procedure where the conditions are met — including the additional calendar time these procedures add and the way fees are handled for the external expert involvement.

The documentation depth expected at Class III is higher than at Class IIb across every section of the technical file, and the clinical evaluation is the section where the gap is largest. The GSPR conformity matrix against Annex I must be tightly argued for every GSPR that applies. The risk management file must show close coupling to the clinical evaluation under Article 61 and Annex XIV and to the post-market surveillance plan under Annex III. The clinical evaluation itself must meet the Class III evidence bar — for most Class III devices this means clinical investigations under Articles 62 to 82 and Annex XV, because the equivalence and literature routes under Article 61 are constrained at Class III and for implantables in particular.

Output of Step 2: a signed contract listing the devices the certificate will cover, the audit calendar for the first certificate cycle, the annex and chapters governing the procedure, and an explicit acknowledgement of whether the Article 54 consultation procedure and the Article 55 scrutiny procedure are expected to apply.

Step 3 — Application package submission

The Class III application package is the heaviest deliverable in the MDR universe outside the manufacturer's actual product. The package typically includes the QMS manual and the core QMS procedures, the device description and intended purpose for each device in scope, the classification rationale citing the specific Annex VIII rule, the GSPR conformity matrix for every device, the full technical documentation per Annex II including the risk management file, the clinical evaluation report per Article 61 and Annex XIV at Class III depth, clinical investigation reports under Articles 62 to 82 where applicable, the post-market surveillance plan per Annex III, the post-market clinical follow-up plan per Annex XIV Part B, the labelling and instructions for use per Annex I Chapter III, the summary of safety and clinical performance under Article 32, and — for implantable Class III devices — the implant card and patient information required under Article 18.

The package has to be complete per device. This is the same structural rule as Class IIb — no sampling across a generic device group — but at Class III the completeness bar is higher because the reviewer, the clinical expert, and potentially an external expert panel will all read the file. A file that is incomplete for a single device in scope will fail the completeness check before the on-site audit is scheduled and will stall the whole certificate.

Output of Step 3: the complete application package submitted, acknowledged as received and complete for every device, with any completeness-check queries resolved before the on-site audit is scheduled.

Step 4 — QMS audit under Annex IX Section 2

The fourth step is the Quality Management System audit. Annex IX Section 2 of Regulation (EU) 2017/745 sets out the requirements for the QMS assessment under the Annex IX procedure. The statutory QMS obligation the audit maps to is Article 10(9), and the harmonised standard that provides presumption of conformity with the MDR QMS requirements is EN ISO 13485:2016+A11:2021.

At Class III, the QMS audit is on-site, full-scope, and run by auditors with Class III experience in the technology family. Reviewer attention concentrates on design control, risk management, clinical evaluation governance, post-market surveillance, and vigilance — the processes that carry the highest-risk product. Design and development is examined end to end: design inputs traced to risk controls, design outputs traced to verification and validation, design changes traced to re-evaluation of risk and clinical evidence. Risk management is examined in depth, including how the risk management file couples to the clinical evaluation and to the PMS plan. PMS and vigilance processes are tested against real incident handling — the auditor will ask to see how a real field event was handled, not just the documented procedure.

The test is whether the documented QMS is the QMS that actually runs. Non-conformities at Class III are normal and should be planned for; the surface area under review is larger than at Class IIb, and template QMS manuals that look good on paper but do not match real operations are detected faster.

Output of Step 4: a QMS audit report listing any non-conformities, the manufacturer's corrective action responses, and, once the non-conformities are closed, confirmation that the QMS meets the requirements of Annex IX Section 2.

Step 5 — Technical documentation review per device

The fifth step runs in parallel with or immediately after the QMS audit. Under Annex IX for Class III, the Notified Body assesses the technical documentation for every device in the scope of the certificate. There is no sampling. The review is conducted by a qualified reviewer at the Notified Body, supported by a clinical reviewer for the clinical evaluation section. The reviewer goes through the device description, the GSPR conformity matrix against Annex I, the design and manufacturing information, the risk management file, the verification and validation evidence, the clinical evaluation report under Article 61 and Annex XIV, the clinical investigation reports where applicable, the labelling and the IFU, the summary of safety and clinical performance, and the post-market surveillance plan.

Questions are issued in writing per device, answers are returned in writing per device, and the review proceeds in rounds until each device file is acceptable. At Class III, the round game is longer than at Class IIb because the clinical section carries more weight and the clinical reviewer's questions are more demanding. Teams that save at Step 3 by submitting weak clinical evaluations pay at Step 5 in reviewer hours, calendar months, and sometimes in the decision to run an additional clinical investigation mid-procedure — which restarts the cycle.

Output of Step 5: a technical documentation assessment report from the Notified Body confirming that each device in scope meets the requirements of Annex I and the other applicable provisions, with any non-conformities closed through written rounds of questions and responses, and, where applicable, a clinical evaluation assessment report prepared by the Notified Body for the Article 54 consultation procedure.

Step 6 — Article 54 clinical evaluation consultation procedure where it applies

Article 54 of Regulation (EU) 2017/745 establishes the clinical evaluation consultation procedure. For specific categories of implantable Class III devices, before a certificate can be issued, the Notified Body sends its clinical evaluation assessment report to the Commission, which forwards it to an expert panel for scientific opinion. The expert panel's views inform the Notified Body's final decision. The categories of devices that trigger Article 54, and the conditions under which the consultation applies, are set out in the Regulation and must be checked against the current consolidated text for the specific device at hand — the rules distinguish between first-of-kind devices, devices in certain implantable categories, and devices where prior panel opinions on equivalent devices exist.

The practical implication for the founder is calendar time. The consultation procedure adds weeks to months to the overall certificate timeline, and the Notified Body cannot shortcut this. The expert panel operates on its own cadence and its scientific opinion is delivered when it is ready. Founders running a Class III implantable project where Article 54 is likely to apply should budget this calendar time from the start rather than discovering it mid-procedure.

The Notified Body remains the decision-maker on certificate issuance — the expert panel opinion is an input, not a veto — but the Notified Body is required to give due consideration to the panel's views and to explain, in its final assessment, how those views were taken into account.

Output of Step 6: where the Article 54 consultation procedure applies, the expert panel's scientific opinion, the Notified Body's documented consideration of that opinion, and the updated clinical evaluation assessment report reflecting any changes that resulted from the consultation.

Step 7 — Article 55 scrutiny procedure where the conditions apply

Article 55 of Regulation (EU) 2017/745 establishes the scrutiny procedure. Where the conditions set out in the Regulation are met, the Notified Body's clinical evaluation assessment for certain Class III devices is subject to an additional scrutiny step. The Article 55 procedure sits on top of — not instead of — the Article 54 consultation and the ordinary Annex IX per-device review.

Founders planning a Class III Annex IX procedure should treat Article 54 and Article 55 as distinct, potentially cumulative, external review layers. The exact triggers, the exact timelines, and the exact interaction between the two procedures must be checked against the current consolidated text of the Regulation and the applicable implementing and delegated acts for the specific device category at hand. This is one of the places in the MDR where a one-line summary is dangerous — the rules have been amended and clarified since the Regulation was first published, and only the current consolidated text and the specific Notified Body's procedure for the device in question give a reliable answer.

Output of Step 7: where the Article 55 scrutiny procedure applies, the documented outcome of the scrutiny procedure and its incorporation into the Notified Body's final certificate decision.

Step 8 — Certificate issuance

Once the QMS audit, the per-device technical documentation assessment, and any Article 54 consultation and Article 55 scrutiny steps have all been completed, the Notified Body issues the certificates. The outcome of a successful Annex IX procedure for Class III is an EU quality management system certificate and EU technical documentation assessment certificates covering the devices in scope. Certificates name the manufacturer, the Notified Body, the devices covered, the applicable annex and chapters, and the validity period. Certificates are valid for up to five years, subject to the surveillance audits scheduled in the contract at Step 2.

From the date of certificate issuance, the manufacturer can affix the CE marking with the Notified Body's four-digit identification number and place each covered device on the market in the European Union. The declaration of conformity under Article 19, drawn up in the format of Annex IV, is the manufacturer's own legal instrument referencing the Notified Body certificates. For implantable Class III devices, the implant card requirements under Article 18 and the summary of safety and clinical performance under Article 32 apply from the moment the device reaches the market.

Output of Step 8: the EU QMS certificate and the EU technical documentation assessment certificates, the EU declaration of conformity, and the CE marking affixed in accordance with the Regulation.

Step 9 — Surveillance

Surveillance scrutiny at Class III is the heaviest in the MDR. The Notified Body conducts annual surveillance audits throughout the five-year certificate cycle. Each surveillance re-samples QMS processes and re-samples technical documentation for the devices covered. Unannounced audits under Annex IX can occur at any point during the certificate cycle, at the manufacturer or at critical suppliers, and the test at an unannounced audit is whether the documented QMS matches the QMS running on the day of the visit. Significant changes to devices covered by the certificate trigger additional review; in some cases they trigger a fresh Article 54 consultation if the change affects the clinical evidence materially.

Output of Step 9: an active surveillance record across the five-year certificate cycle, with non-conformities closed, changes properly notified, and the certificate maintained in good standing until renewal.

The Subtract to Ship angle

At Class III, Subtract to Ship is the difference between a fundable project and an unfundable one. The external review layers added by Article 54 and Article 55 cannot be subtracted — they are regulatory gates. What can be subtracted is everything in the application package that does not earn its place. Cut every document that does not trace to a specific GSPR, an Annex IX requirement, a harmonised standard clause, or a clinical evaluation obligation under Article 61 and Annex XIV. Cut every speculative analysis. Cut every redundant verification chain. Cut every project management artifact that exists to make the project look organised rather than to make the device safe.

What remains is the real Class III technical file. It is still large — Class III files are not small — but every page earns its place, and the reviewer's questions are precise because the file is readable. The round game shortens. The calendar time for the Notified Body portion of the procedure compresses. The external review layers at Article 54 and Article 55 still run on their own clock, but the manufacturer's side of the timeline is as short as the regulation allows. For the full methodology, see The Subtract to Ship Framework for MDR Compliance.

Reality Check — Where do you stand on the Class III procedure?

  1. Have you selected a Notified Body whose designated scope covers your Class III device codes and implantable categories, whose recent experience in your technology family you have verified, and whose capacity matches your timeline?
  2. Does your contract explicitly acknowledge whether Article 54 consultation and Article 55 scrutiny are expected to apply to your device, with calendar time budgeted accordingly?
  3. Is every device in scope supported by its own complete technical documentation package at Class III depth?
  4. Is your clinical evaluation built to the Class III evidence bar — with clinical investigations under Articles 62 to 82 where the equivalence and literature routes do not reach?
  5. Does your QMS actually match the processes your company runs, so that the Annex IX Section 2 audit will confirm a real system rather than expose a template?
  6. Is your risk management file coupled tightly to the clinical evaluation and to the post-market surveillance plan?
  7. Have you budgeted time and money for more non-conformity rounds than at Class IIb, and for the external review layers at Article 54 and Article 55 where they apply?
  8. Is your surveillance plan for the five-year certificate cycle documented, with unannounced-audit readiness treated as an operational requirement rather than a paperwork exercise?
  9. Can you defend every page in your application package by tracing it to a specific MDR article, annex, GSPR, or harmonised standard clause — for every device in scope?

Frequently Asked Questions

What is the legal basis for Class III conformity assessment? Article 52 of Regulation (EU) 2017/745 is the legal basis. For Class III, Article 52 allows conformity assessment under Annex IX (quality management system plus per-device technical documentation assessment) or under a combination of Annex X (type examination) and Annex XI (production conformity verification). Annex IX is the most common route for Class III because it consolidates the QMS audit and the per-device technical documentation review into a single integrated procedure with one Notified Body contract.

What is the Article 54 clinical evaluation consultation procedure? Article 54 of Regulation (EU) 2017/745 establishes the clinical evaluation consultation procedure. For specific categories of implantable Class III devices, before the Notified Body can issue a certificate, the Notified Body's clinical evaluation assessment report is sent via the Commission to an independent expert panel for scientific opinion. The Notified Body gives due consideration to the panel's views and documents how they were taken into account in the final decision. The categories and conditions are set out in the Regulation and must be checked against the current consolidated text for the specific device at hand.

What is the Article 55 scrutiny procedure? Article 55 of Regulation (EU) 2017/745 establishes the scrutiny procedure, which adds an additional scrutiny layer on top of the ordinary Annex IX review and the Article 54 consultation where the conditions set out in the Regulation are met. The practical effect is additional calendar time and an additional external review of the clinical evaluation assessment. The exact triggers and the interaction between Article 54 and Article 55 must be checked against the current consolidated text of the Regulation for the specific device category.

How long does a Class III Annex IX procedure take? The honest order of magnitude is eighteen to thirty-six months from a QMS-ready state to certificate issuance, driven by Notified Body capacity, scope match, the quality of the clinical evidence, whether Article 54 consultation applies, whether Article 55 scrutiny applies, and the depth of the technical documentation. Projects with weak clinical evidence or poor Notified Body fit can stretch beyond three years. Projects where a clinical investigation has to be designed, run, and reported before the file is submissible add the duration of the investigation on top.

What QMS standard is audited under Annex IX Section 2 for Class III? The harmonised standard that provides presumption of conformity with the Article 10(9) QMS obligations is EN ISO 13485:2016+A11:2021. The Notified Body audits the manufacturer's QMS against the MDR requirements using EN ISO 13485:2016+A11:2021 as the reference standard. At Class III, the audit is on-site, full-scope, and conducted by auditors with Class III experience in the technology family.

Can a Class III manufacturer use Annex X combined with Annex XI instead of Annex IX? Yes. Article 52 allows a Class III manufacturer to combine Annex X type examination with Annex XI production conformity verification as an alternative to the Annex IX route. For most Class III startups with one or two products, Annex IX is the better fit because it consolidates the QMS audit, the per-device technical documentation review, and the Article 54 consultation (where applicable) into a single contract. The Annex X + Annex XI combination is more common for manufacturers with stable designs and established production lines where a type-examination-plus-verification structure fits the operational model better.

What happens at surveillance for Class III? The Notified Body conducts annual surveillance audits throughout the five-year certificate cycle. Each surveillance re-samples QMS processes and technical documentation for the devices covered. Unannounced audits under Annex IX can occur at any point, at the manufacturer or at critical suppliers. Significant changes to devices covered by the certificate trigger additional review; in some cases they trigger a fresh Article 54 consultation if the change affects the clinical evidence materially.

Sources

  1. Regulation (EU) 2017/745 of the European Parliament and of the Council of 5 April 2017 on medical devices, Article 52 (conformity assessment procedures), Article 54 (clinical evaluation consultation procedure), Article 55 (mechanism for scrutiny of conformity assessments of certain Class III and Class IIb devices), Annex IX (conformity assessment based on a quality management system and on assessment of technical documentation), Annex X (conformity assessment based on type examination). Official Journal L 117, 5.5.2017.
  2. EN ISO 13485:2016+A11:2021 — Medical devices — Quality management systems — Requirements for regulatory purposes.

This post is part of the Device Classification & Conformity Assessment series in the Subtract to Ship: MDR blog. Authored by Felix Lenhard and Tibor Zechmeister. The Class III Annex IX procedure is the heaviest pathway in the MDR — the per-device review from Class IIb carried forward, the clinical evaluation consultation under Article 54 added on top where it applies, and the scrutiny procedure under Article 55 layered above that. The manufacturer's job is to make the internal side of the timeline as short as the regulation allows, so that the external review clocks run on the shortest possible overall calendar.