Personalized medicine is one of the strongest trends in healthcare. 3D-printed implants tailored to individual patient anatomy. Patient-specific surgical guides. Custom orthoses manufactured from individual scans. The technology is advancing fast — and the regulatory framework is struggling to keep pace.
MDR has specific provisions for custom-made devices, and they are different from the rules governing mass-produced devices. If your startup is building personalized medical technology, understanding these provisions is essential. Getting them wrong can mean either over-engineering your regulatory approach (spending time and money on requirements that do not apply) or under-engineering it (missing requirements that do apply, with serious legal consequences).
What Is a Custom-Made Device Under MDR?
MDR Article 2(3) defines a custom-made device as a device specifically made in accordance with a written prescription of any person authorized by national law by virtue of that person's professional qualifications, which gives, under that person's responsibility, specific design characteristics. The device is intended for the sole use of a particular patient exclusively to meet their individual conditions and needs.
The key elements of this definition:
1. Written prescription from an authorized person. The device must be prescribed by someone authorized under national law — typically a physician, dentist, or other qualified healthcare professional. The prescription must be in writing.
2. Specific design characteristics. The prescription must specify design characteristics unique to the individual patient. "Give me a knee brace" is not a custom-made device prescription. "Fabricate a knee brace with these specific dimensions, this angle of flexion limitation, and these materials based on this patient's imaging data" is closer.
3. Intended for the sole use of a particular patient. One patient, one device. If you manufacture the same design for multiple patients, it is not custom-made under this definition.
4. Meeting individual conditions and needs. The customization must be driven by the patient's specific medical condition and clinical needs, not by aesthetic preferences or convenience.
What Is NOT a Custom-Made Device
MDR explicitly excludes from the custom-made definition any mass-produced device that needs to be adapted to meet specific requirements of a professional user, or any device that is mass-produced by means of industrial manufacturing processes in accordance with the written prescriptions of any authorized person.
This exclusion is critical for startups. If your business model involves taking a standard product platform and making adaptations for individual patients using industrial manufacturing processes (such as selecting size variants, adjusting settings, or choosing from pre-defined options), your product is likely NOT a custom-made device under MDR — even though it may feel "customized" to the end user.
The distinction matters because custom-made devices follow a different (and in some ways simpler) regulatory path, while mass-produced devices with patient-specific adaptations follow the standard CE marking path.
Tibor encounters this confusion regularly: "Startups building 3D-printed devices often assume they are making custom-made devices because each unit is unique. But if you are using an industrial 3D printing process, with standardized design software, following a validated design process, and the output is a device for a specific patient — the MDR definition may not apply as they expect. The key question is: is the device designed based on a written prescription from an authorized healthcare professional, or is it designed based on your company's algorithm processing patient data? These are different regulatory paths."
The Regulatory Path for Custom-Made Devices
Custom-made devices are partially exempt from the standard conformity assessment procedures. Article 52(8) states that custom-made devices are not subject to the conformity assessment procedures involving a Notified Body (with exceptions noted below). Instead, they must follow the procedure described in Annex XIII.
What Annex XIII Requires
Annex XIII sets out specific requirements for custom-made devices:
1. Documentation for each individual device: The manufacturer must prepare documentation that identifies the device, the patient, the prescribing healthcare professional, the specific characteristics as prescribed, and a statement that the device is intended for exclusive use by the identified patient.
2. A statement making available to the patient or user: The manufacturer must make available a statement containing specific information about the device, including the name and address of the manufacturer, the information needed to identify the device, and a statement that the device is designed exclusively for the identified patient.
3. Compliance with General Safety and Performance Requirements: Custom-made devices must still meet all applicable GSPRs in Annex I. The exemption is from the conformity assessment procedure (no NB), not from the safety and performance requirements themselves.
4. Design and manufacture under appropriate QMS: The manufacturer must have a quality management system proportionate to the class of device. While Annex XIII does not mandate ISO 13485 certification assessed by a Notified Body, it does require documented procedures for design, manufacture, and performance monitoring.
5. Post-market surveillance and vigilance: Custom-made device manufacturers have the same post-market surveillance and vigilance obligations as manufacturers of mass-produced devices. You must monitor the performance of your custom-made devices, report serious incidents, and implement field safety corrective actions when necessary.
The Class III Exception
Here is the critical exception: Class III custom-made implantable devices are subject to the conformity assessment procedures of Annex IX (Chapter I) in addition to the Annex XIII requirements. This means they DO require Notified Body involvement — specifically, the Notified Body must audit the manufacturer's QMS.
If your startup is making custom 3D-printed implants, this exception almost certainly applies. Class III implantable devices are the highest-risk category, and MDR does not allow them to be placed on the market without external QMS oversight, even when they are custom-made.
Practical Implications for Startups
The 3D Printing Question
3D printing (additive manufacturing) is the technology most commonly associated with custom-made medical devices. But the regulatory classification depends on the business model, not the manufacturing technology:
Scenario A: Healthcare professional prescribes, you manufacture per prescription. If a surgeon provides a written prescription with specific design characteristics for a patient-specific surgical guide, and your company manufactures it per that prescription — this may qualify as a custom-made device under MDR.
Scenario B: Your software designs the device, healthcare professional approves. If your software automatically generates a device design from patient imaging data, and the healthcare professional reviews and approves the output — the regulatory analysis is more complex. The healthcare professional may be providing a "prescription" by approving the design, but the design characteristics were determined by your software, not prescribed by the professional.
Scenario C: Standard device platform with patient-specific dimensions. If you manufacture a standard device type (like an ankle brace) but adjust dimensions based on patient measurements — this is likely a mass-produced device adapted to individual needs, not a custom-made device. Standard CE marking path applies.
Scenario D: Patient-matched implant from a validated design process. If you use validated design software to create patient-matched implants from a standardized process — this may fall under mass-produced devices with patient-specific adaptation, requiring standard CE marking. This is increasingly the interpretation being applied to patient-matched devices produced through industrial-scale 3D printing.
The boundaries between these scenarios are not always clear, and regulatory interpretations continue to evolve. When in doubt, consult with a competent authority or a regulatory expert before committing to a path.
Documentation Per Device
Unlike mass-produced devices where one technical file covers all units of the same design, custom-made devices require documentation for each individual unit. This means your documentation process must be scalable — you cannot spend weeks preparing documentation for each device if your business model involves manufacturing hundreds per year.
Startup tactic: Build templates and standardized processes that allow you to generate per-device documentation efficiently. The content changes (patient name, specific dimensions, prescriber details) but the structure stays the same. An electronic system is almost essential here.
No CE Mark on Custom-Made Devices
This surprises many people: custom-made devices do NOT bear the CE mark. Instead, they are accompanied by the Annex XIII statement.
This has commercial implications. Many procurement processes and distributor agreements reference CE marking as a requirement. If your device is custom-made and does not bear a CE mark, you need to explain this to commercial partners and provide the Annex XIII statement as the alternative documentation.
Registration Requirements
Custom-made device manufacturers still need to register as manufacturers and register their devices. The specific registration requirements may differ from those for mass-produced devices — check the current EUDAMED requirements for custom-made devices.
The Startup Decision: Custom-Made or Standard Path?
If your device could potentially qualify as either custom-made or mass-produced (with patient-specific adaptations), you face a strategic decision:
Advantages of the Custom-Made Path
- No Notified Body involvement (except Class III implantable)
- No CE marking required
- Potentially faster to market for initial products
- Lower upfront cost (no NB fees)
Disadvantages of the Custom-Made Path
- Per-device documentation burden (scales with volume)
- No CE mark (can limit commercial opportunities)
- Dependency on individual prescriptions from healthcare professionals
- Potentially more complex post-market surveillance (tracking individual devices)
- More limited market perception — some buyers view custom-made as "less regulated"
Advantages of the Standard CE Marking Path
- CE mark provides broad market recognition and commercial advantage
- One technical file covers all units of the same design
- More scalable for high-volume production
- Better understood by investors, distributors, and procurement
- Stronger position for international market access (FSCs reference CE marking)
Disadvantages of the Standard CE Marking Path
- Notified Body involvement (cost, time, dependency)
- Must demonstrate that the design process and manufacturing process are validated for the full range of patient-specific outputs
- Higher upfront investment
Tibor's general guidance: "If your volume is going to be more than a handful of devices per year, and your process is standardized even though the output is patient-specific, think seriously about the standard CE marking path. The per-device documentation burden of the custom-made route becomes unsustainable at scale. And commercially, the CE mark opens doors that the Annex XIII statement does not."
What Comes Next
The regulatory framework for personalized and patient-specific medical devices is still evolving. MDCG guidance on custom-made devices, 3D printing, and patient-matched devices continues to develop.
For startups in this space, staying current with guidance documents is essential. The interpretation of what constitutes a "custom-made device" versus a "mass-produced device with patient-specific adaptation" is an area of active regulatory development, and the boundaries may shift as technology evolves and regulators gain more experience.
The Bottom Line
Custom-made devices under MDR occupy a specific regulatory niche with clear definitions and requirements. The path is simpler in some ways (no NB for most classes, no CE mark) but more complex in others (per-device documentation, dependency on prescriptions).
For startups building personalized MedTech, the first critical step is determining whether your product truly meets the MDR definition of "custom-made" or whether it falls under the standard conformity assessment framework. This determination drives everything — your documentation strategy, your commercial model, your cost structure, and your timeline to market.
Get the classification right. Build the appropriate regulatory approach around it. And do not assume that "personalized" automatically means "custom-made" under MDR — the regulation draws that line in a very specific place.