Every MedTech founder asks this question within their first week of discovering that their product needs a CE mark. The answer they want is a number. "18 months" or "2 years". Something they can put in a Gantt chart and present to their investors.
The honest answer is: it depends. And the range is enormous.
But "it depends" is not useful, so this post gives you the real numbers. Based on what Tibor has seen across 50+ certifications and what the current market conditions look like in 2026. These are not theoretical timelines from a textbook. These are battle-tested estimates from the startup trenches.
The Variables That Drive Your Timeline
Before the numbers, you need to understand what moves the needle. Five variables determine 90% of your timeline:
1. Device risk class. A Class I device with no Notified Body involvement is fundamentally faster than a Class III implantable requiring expert panel consultation. The conformity assessment complexity scales directly with risk class.
2. Your starting point. Are you a startup with no quality management system, no regulatory documentation, and no previous device experience? Or are you a team that already has an ISO 13485-certified QMS and has done this before? The gap between where you are and where you need to be determines the preparation time.
3. Notified Body availability. This is the variable that has frustrated the industry since MDR took effect. Notified Bodies have limited capacity, and their lead times for accepting new applications, scheduling audits, and completing reviews have been a persistent bottleneck. In 2026, the situation has improved somewhat compared to 2021-2023, but waiting times are still significant.
4. Clinical evidence requirements. If you need a clinical investigation (clinical trial), that alone can add 12-24 months. If you can rely on literature and equivalence, it is faster. But the evaluation still needs to be thorough.
5. The quality of your documentation. Notified Bodies review your technical documentation and quality management system. If the documentation is well-prepared, the review is smooth. If it is incomplete, inconsistent, or unclear, you enter revision cycles. Submit, get findings, revise, resubmit, get more findings, revise again. Each cycle adds weeks or months.
Realistic Timelines by Device Class
Class I (self-certification, no Notified Body)
Total timeline: 6-12 months from scratch
This is the fastest path because no Notified Body is involved. You declare conformity yourself after preparing your technical documentation and establishing your QMS.
- QMS setup (lean, fit-for-purpose): 2-4 months
- Technical documentation preparation: 3-6 months
- Clinical evaluation (literature-based): 1-3 months (often parallel with tech doc)
- EUDAMED registration: 1-2 weeks (assuming system is functional)
- Declaration of Conformity and CE marking: 1 day
The catch: "self-certification" does not mean "easy." You still need to meet all applicable General Safety and Performance Requirements in Annex I. You still need a complete technical file per Annex II. You still need a clinical evaluation. The difference is that no external body reviews your work before you go to market. But market surveillance authorities can audit you at any time afterward, and if your documentation is insufficient, you face enforcement actions.
Class I Sterile / Class I Measuring Function
Total timeline: 9-18 months
Add Notified Body involvement for the sterile or measuring aspects. This means:
- Everything from Class I above, plus:
- Notified Body application and contracting: 1-3 months
- Notified Body review (limited scope): 2-4 months
- Audit (if required for sterile validation): 1-2 months
- Finding resolution: 1-3 months
Class IIa
Total timeline: 12-24 months
This is where most MedTech startups land. Diagnostic devices, many software as medical device (SaMD) products, therapeutic devices with moderate risk.
Breakdown: - QMS establishment and ISO 13485 alignment: 3-6 months - Technical documentation preparation: 4-8 months (largely parallel with QMS) - Clinical evaluation: 2-6 months - Notified Body application and contracting: 2-4 months - Notified Body QMS audit: 1-2 months (scheduling + the audit itself + report) - Technical documentation review by Notified Body: 2-4 months - Finding resolution (first round): 1-3 months - Possible second round of findings: 1-2 months - Certificate issuance: 2-4 weeks after resolution
The 12-month end of this range assumes you have experienced regulatory talent on your team, your documentation is strong from the first submission, and your Notified Body has reasonable availability. The 24-month end accounts for building everything from scratch, multiple revision cycles, and Notified Body delays.
Class IIb
Total timeline: 18-30 months
Higher-risk devices get more Notified Body scrutiny. The documentation requirements are more extensive, the clinical evidence bar is higher, and the Notified Body review is more thorough.
- QMS establishment: 4-6 months
- Technical documentation (more extensive than IIa): 6-12 months
- Clinical evaluation (more data required, potentially clinical investigation): 4-12 months
- Notified Body engagement: 2-4 months
- Notified Body review and audit: 4-8 months
- Finding resolution: 2-4 months
- Certificate issuance: 2-4 weeks
For Class IIb implantable devices, add additional scrutiny and potential expert panel involvement, pushing toward the higher end of the range.
Class III
Total timeline: 24-36+ months
Class III devices. Highest risk. Face the most rigorous assessment. This is where active implants, drug-device combinations, and the highest-risk therapeutic devices live.
- QMS establishment (must be robust from day one): 4-8 months
- Technical documentation (comprehensive): 8-16 months
- Clinical evidence (clinical investigation often required): 12-24 months
- Notified Body engagement: 2-6 months (longer if limited NB scope for your device type)
- Notified Body review and audit: 6-12 months
- Expert panel consultation (for Class III implantable devices): 2-4 months
- Finding resolution: 3-6 months
- Certificate issuance: 2-4 weeks
The 36+ month marker is real. Tibor has seen Class III certifications take over three years when clinical investigations are required and Notified Body capacity is constrained.
The Hidden Time Sinks
The timelines above account for the major work packages. But several hidden time sinks catch startups by surprise:
Notified Body Queue Times
You cannot start working with a Notified Body the day you decide you need one. There is a queue. In 2021-2023, queue times of 6-12 months were common. By 2026, this has improved but is still significant. Expect 2-6 months from application to contract signing for most Notified Bodies, depending on your device type and the Notified Body's current workload.
Startup tactic: Apply to your Notified Body early. Even before your documentation is complete. You can start the relationship and queue process while still building your technical file. Many Notified Bodies will begin with the QMS audit while your technical documentation is being finalized.
Standard Testing Lead Times
Your technical documentation needs test reports. Biocompatibility testing, electrical safety testing, EMC testing, software testing, sterility testing, and more depending on your device. These tests are performed by accredited laboratories, and those laboratories have their own lead times.
Biocompatibility testing (ISO 10993) can take 3-6 months for a full program. Electrical safety testing (IEC 60601-1 and its collateral standards) can take 2-4 months. If your device is complex, you may be juggling multiple test laboratories simultaneously.
Startup tactic: Identify your testing requirements early. Book laboratory slots as soon as you have a design-frozen prototype. Laboratory lead times are often the longest non-regulatory wait in the entire process.
Revision Cycles
No one submits a perfect technical file on the first attempt. The Notified Body will have questions, observations, and non-conformities. Each revision cycle follows this pattern: receive findings, analyze them, prepare responses, update documentation, resubmit, wait for the Notified Body to review your responses. A single cycle takes 4-8 weeks minimum. Two or three cycles are normal for a first-time manufacturer.
Tibor's perspective: "When I was on the Notified Body side, the biggest difference between manufacturers who got through quickly and those who got stuck was the quality of their first submission. Companies that invested in getting the documentation right before submission. Even if it took a bit longer to prepare. Saved months in revision cycles. The companies that submitted half-finished documentation hoping for quick feedback wasted everyone's time."
Internal Decision-Making
This one is entirely within your control and is often underestimated. Regulatory decisions require input from multiple disciplines. Engineering, quality, regulatory, clinical, management. In a startup, these may all be the same two or three people, but decisions still take time. Design decisions, risk management decisions, clinical strategy decisions, labeling decisions. Each one requires thought, discussion, and documentation.
Supplier Qualification
If you have suppliers or contract manufacturers, they need to be qualified under your QMS. This means auditing them, assessing their quality systems, and establishing quality agreements. For critical suppliers (those providing components that directly affect device safety or performance), this can take 1-3 months.
What Investors Need to Hear
Founders often face pressure from investors to commit to aggressive regulatory timelines. Here is the honest framing:
"Our regulatory timeline estimate is X months, based on our device classification (Class Y), our current state of readiness, and realistic Notified Body lead times. This estimate includes buffer for one round of Notified Body findings and resolution. Key risks to the timeline include Notified Body capacity constraints, testing laboratory lead times, and the possibility of clinical evidence gaps identified during the Notified Body review."
Do not promise what you cannot control. Investors who understand MedTech will respect an honest assessment far more than an optimistic fantasy that blows up at month 18.
Tibor has a story he tells about this: "I had a startup that told their Series A investors they would have the CE mark in 8 months. They were Class IIb. They had no QMS. They had not even chosen a Notified Body. When I asked how they arrived at 8 months, they said their business plan required it. That is not how regulations work. Regulations do not care about your business plan. The CE marking timeline is driven by regulatory requirements and Notified Body capacity, not by investor presentations."
How to Compress the Timeline (Legitimately)
You cannot skip steps. But you can be smarter about how you execute them:
1. Start your QMS on day one. Do not wait until you have a finished product to build your quality management system. Start with design and development control. This lets you capture your design decisions and verification data as you go, rather than trying to reconstruct them later.
2. Hire or engage regulatory expertise early. A regulatory professional who has done this before will save you months by steering you away from common mistakes and toward efficient documentation strategies.
3. Parallelize aggressively. QMS setup, technical documentation, clinical evaluation, standard testing, and Notified Body engagement can all happen in parallel to varying degrees. Map the dependencies and run as many workstreams simultaneously as your team can handle.
4. Get your Notified Body application in early. Even before your documentation is complete. Use the queue time productively.
5. Invest in first-submission quality. Spend the extra week getting a document right rather than submitting it early and spending two months in revision cycles.
6. Use harmonized standards. They give you a presumption of conformity and provide a clear, accepted framework for meeting MDR requirements. This simplifies both your work and the Notified Body's review.
7. Pre-submission meetings with the Notified Body. Many Notified Bodies offer pre-submission meetings where you can discuss your device, your classification, and your conformity assessment strategy before formally submitting. Use them. The insight you gain can prevent expensive wrong turns.
The Honest Bottom Line
A startup building a Class IIa medical device from scratch. No existing QMS, no previous certification experience. Should plan for 18-24 months from starting regulatory work to CE mark. If everything goes well, 12-15 months is possible. If complications arise (and they usually do), 24+ months is realistic.
For Class IIb and III devices, extend that range accordingly.
The founders who navigate this successfully share three traits: they plan realistically, they start early, and they treat regulatory not as an obstacle at the end of product development but as a parallel workstream from the very beginning.
At the end of the day, the CE marking timeline is not something that happens to you. It is something you manage. The more you understand the process, the more control you have over the outcome.