A MedTech business plan has two audiences that rarely read the same documents — investors want market, traction, and exit; regulators want intended purpose, classification, and conformity route. A plan that convinces both treats the regulatory strategy as a business strategy, with MDR Article 51 classification and Article 61 clinical evidence as forecast drivers, not appendices.

By Tibor Zechmeister and Felix Lenhard.

TL;DR

  • A MedTech business plan must serve two audiences — capital providers and regulatory reviewers — without becoming two different documents.
  • The regulatory sections are not a chapter appendix. They drive timeline, burn rate, and valuation.
  • Intended purpose (Article 2(12)) is the single most important line in the plan because it determines classification, conformity route, clinical evidence requirements, and therefore most of the cost and timeline.
  • Classification (Article 51, Annex VIII) is the second most consequential line — the difference between Class I and Class IIb is often 18 months and several million euros.
  • Investors who have seen one MedTech company before will scrutinise the regulatory slide harder than the traction slide.
  • The clinical evaluation strategy (Article 61, Annex XIV) is the section where inexperienced founders lose credibility fastest.

Why this matters

Pitch a MedTech company using a SaaS business plan template and you will confuse experienced investors and alarm regulators. The SaaS template assumes you can launch, iterate, and grow on a continuous curve. MedTech has discrete regulatory milestones that block revenue entirely — CE marking, reimbursement decisions, notified body certificate issuance. Until those are in hand, revenue is not just low. It is zero, and legally must be zero.

Investors who understand MedTech know this. When they open your plan, they look for four things in the first five minutes: intended purpose, classification, conformity route, and expected time to CE marking. If those are missing, fuzzy, or internally inconsistent with your financial forecast, you have lost credibility before you get to the market size slide.

Regulators — and the regulatory consultants, notified body contacts, and potential hires who will read your plan on an investor's behalf — look for the same four things, plus a credible clinical evidence strategy. A plan that handles both audiences is not longer. It is structured differently.

What MDR actually says

Three anchors in the regulation define the regulatory spine of a MedTech business plan.

Article 2(12) — Intended purpose. "Intended purpose means the use for which a device is intended according to the data supplied by the manufacturer on the label, in the instructions for use or in promotional or sales materials or statements and as specified by the manufacturer in the clinical evaluation."

This is the hinge. Every claim you make about what your device does — in your pitch deck, on your website, in your business plan — is legally part of your intended purpose. A pitch deck that says "our AI diagnoses X" has committed to a diagnostic claim that will determine classification. A plan that says "our platform supports clinicians in reviewing Y" positions differently. Founders often do not realise the business plan itself is a regulatory document in this sense.

Article 51 and Annex VIII — Classification. Article 51 requires that devices are classified into classes I, IIa, IIb, and III according to the rules in Annex VIII, taking into account the intended purpose and inherent risks. Annex VIII contains 22 classification rules. Rule 11 is the decisive rule for most Software as a Medical Device products and tends to push software into Class IIa or higher. The notified body will not negotiate classification — they will verify it. Investors want to see a justified classification, not a guessed one.

Article 61 and Annex XIV — Clinical evaluation. Confirmation of conformity with the relevant GSPRs must be based on sufficient clinical evidence. The clinical evaluation is a planned, documented, and continuously updated process following Annex XIV Part A. For implantable and Class III devices, a clinical investigation is typically required unless Article 61(4)–(6) exemptions apply. For investors, the clinical evaluation strategy is where capital burns fastest, so a credible plan is a valuation driver.

A worked example

A founder is writing a Series A business plan for a connected ECG patch with an AI arrhythmia detection algorithm. Here are two versions of the same plan.

Version A — investor-only framing:

"Our device uses AI to detect atrial fibrillation from wearable ECG data. We estimate CE marking in 12 months at a cost of 500,000 EUR. TAM is 4.2B EUR in Europe. We will reach breakeven in year four."

This plan loses credibility on two fronts. The classification is not stated. The clinical evidence strategy is not stated. The 12-month CE marking claim is unsupported. An experienced MedTech investor reads this and stops, because the numbers cannot be true if the classification turns out to be IIb or III.

Version B — dual-audience framing:

"Intended purpose (draft, subject to final lock at technical file freeze): software intended to analyse single-lead ECG data from a wearable patch and flag suspected atrial fibrillation episodes for clinician review. The device does not provide a diagnosis. Clinicians remain responsible for all diagnostic and treatment decisions.

Classification: Class IIa under MDR Annex VIII Rule 11 on the basis that the software provides information used for diagnosis or monitoring of physiological processes, without directly driving therapy. Classification justification document is included in Appendix C.

Conformity route: Annex IX (QMS + technical documentation assessment) with a notified body. Shortlist of three notified bodies in Appendix D with lead times and capacity confirmation.

Clinical evidence strategy: literature-based clinical evaluation for the condition and the state of the art, combined with a prospective clinical investigation of 400 subjects across four sites, powered to demonstrate sensitivity and specificity against 12-lead reference. Timeline 14 months. Budget 1.1M EUR. The investigation is the critical path to CE marking.

CE marking target: month 22. CE marking cost: 1.8M EUR (full breakdown Appendix E). First revenue in EU: month 23. Revenue ramp assumes 2 year lag until German DiGA-equivalent reimbursement pathway — a detailed reimbursement strategy is in Section 7."

Version B is three times as long on the regulatory section. It is also the version that raises.

The Subtract to Ship playbook

Here is the dual-audience structure we use with founders preparing a MedTech business plan.

Step 1: Put the intended purpose on page one. Not in the appendix. Not in a regulatory side-document. On page one of the plan, in the founder's own words, with a note that it is a working draft subject to final lock. This single paragraph drives the rest of the plan, and investors who know MedTech will turn to it first.

Step 2: State the classification and justify it in one paragraph. Cite Annex VIII, name the applicable rule, and explain the reasoning. Attach a classification justification document as an appendix. If your classification is contested or borderline, say so and explain how you will resolve it. Our post on how regulatory strategy supports business strategy unpacks why this line is the hinge of the whole plan.

Step 3: Name the conformity route and the notified body shortlist. Annex IX, X, or XI. Which notified body? What are their lead times? Have you had informal conversations? Notified body capacity is a real constraint — plans that ignore it are read as naive. See preparing for your first notified body audit for what NB engagement actually looks like.

Step 4: Make the clinical evidence strategy a full section, not a sentence. Clinical data sources, equivalence strategy (or absence thereof), clinical investigation plan, PMCF commitments. If your plan has a one-line clinical section, your investors will assume you have not thought about it — because nobody who has thought about clinical evidence can describe it in one line. See clinical evidence strategy portfolio.

Step 5: Tie regulatory milestones to financial milestones. CE marking is a cash-flow event. Before it, revenue is zero. After it, revenue starts ramping at whatever pace your go-to-market allows. The financial forecast must show this cliff, not smooth it away. Our breakdown of the true cost of CE marking gives benchmark numbers by class.

Step 6: Include a dedicated regulatory slide in the pitch deck. One slide. Intended purpose, class, route, notified body status, clinical evidence strategy, CE marking date, milestones. Our MedTech regulatory slide guide shows the exact format.

Step 7: Use regulatory milestones as valuation inflection points. Notified body application accepted, clinical investigation first-patient-in, clinical investigation last-patient-out, notified body audit complete, CE certificate issued. Each of these is a valuation step-up. Investors who have been around the block know this and will price accordingly. See MedTech startup valuation and regulatory milestones.

Step 8: Make the business model traceable to the device. A wearable with a consumable refill has different unit economics than a one-time capital purchase. A reimbursed SaMD has different economics from a direct-to-consumer app. The MedTech business model analysis post covers the common patterns.

Reality Check

  1. Can you state your intended purpose in one sentence, and does that sentence appear on page one of the plan?
  2. Is your classification explicit, justified, and attached as an appendix?
  3. Does your pitch deck have a dedicated regulatory slide, or is the regulatory strategy scattered across three slides and an appendix?
  4. Does your financial forecast show the pre-CE revenue cliff, or does it smooth revenue across the CE marking date?
  5. Can you name your target notified body and describe the current state of your conversation with them?
  6. Is your clinical evidence strategy a full section, or a single line?
  7. Would an experienced MedTech investor agree with your CE marking date if they saw your classification and conformity route?
  8. Are your regulatory milestones tied explicitly to valuation step-ups in your funding narrative?

Frequently Asked Questions

How long should the regulatory section of a MedTech business plan be? At least 15–20% of the plan by length, with appendices for classification justification, notified body shortlist, clinical evidence plan, and a cost breakdown. If it is shorter, you have not done the work.

Can we keep the intended purpose vague to preserve flexibility? Inside early discovery, yes. Inside a formal business plan being shown to investors, no. Vague intended purpose signals that classification, clinical strategy, and timeline are guesses. Investors with MedTech experience read vagueness as risk.

How do investors evaluate regulatory risk? They look for four things: is the classification justified and realistic, is the clinical evidence strategy credible, is the notified body relationship real, and are the timelines consistent with those commitments. A plan that answers all four cleanly is rare and stands out.

Should we mention regulatory standards by name? Yes — EN ISO 13485:2016+A11:2021, EN ISO 14971:2019+A11:2021, and any product-specific standards like EN 62304:2006+A1:2015 for software lifecycle. Naming standards shows fluency and is what a regulatory reviewer expects to see.

What is the most common regulatory mistake in MedTech business plans? Under-budgeting clinical evaluation. Founders assume literature review plus a small investigation. Notified bodies often ask for more. The second most common mistake is ignoring notified body capacity and lead times.

How is the regulatory slide different from the overall plan? The slide is a one-minute read. Intended purpose, class, route, notified body, CE date, clinical investigation status, cost-to-CE. Investors decide whether to dig deeper based on whether the slide is specific or generic.

Sources

  1. Regulation (EU) 2017/745 on medical devices, consolidated text. Article 2(12), Article 51, Article 61, Annex VIII, Annex XIV.
  2. MDCG 2021-24 (October 2021) — Guidance on classification of medical devices.
  3. MDCG 2019-11 Rev.1 (October 2019, Rev.1 June 2025) — Qualification and classification of software in Regulation (EU) 2017/745 — MDR.
  4. EN ISO 13485:2016+A11:2021 — Medical devices — Quality management systems.