---
title: Scaling Production for Medical Devices: 10 to 10,000 Under MDR
description: How to scale medical device production from 10 to 10,000 units under MDR without breaking validation, supplier controls, or your notified body relationship.
authors: Tibor Zechmeister, Felix Lenhard
category: Team Building, Operations & Scaling
primary_keyword: scaling production medical devices MDR
canonical_url: https://zechmeister-solutions.com/en/blog/scaling-production-medical-devices-mdr
source: zechmeister-solutions.com
license: All rights reserved. Content may be cited with attribution and a link to the canonical URL.
---

# Scaling Production for Medical Devices: 10 to 10,000 Under MDR

*By Tibor Zechmeister (EU MDR Expert, Notified Body Lead Auditor) and Felix Lenhard.*

> **Scaling a CE-marked device from pilot to volume is not a commercial exercise — it is a regulatory one. Every doubling of throughput can invalidate your process validation, trigger a significant change notification to your notified body, and expose supplier weaknesses you never saw at low volume. Plan the scale before you need it.**

**By Tibor Zechmeister and Felix Lenhard.**

## TL;DR
- Process validation under EN ISO 13485:2016+A11:2021 clause 7.5.6 is volume-sensitive; running a validated process at 10x the qualified rate requires requalification.
- Adding shifts, operators, or parallel lines is a process change that must be assessed, documented, and often re-validated.
- Scaling suppliers means re-qualification under clause 7.4 and updated supplier agreements — not a purchasing decision.
- Significant changes to the QMS or to the device production process must be notified to your notified body under MDR Annex IX Section 2.4.
- The most common 10x scale-up failures are not machines; they are tribal knowledge evaporating the moment you hire the fourth operator.

## Why scaling production is a regulatory event, not a commercial one

The first 100 devices you ship are usually built by the people who designed them. The founders know where the jig sticks. The lead engineer hand-inspects every unit. Yield is whatever the team's patience allows. It works because the team is the process.

Then you close a distribution deal. Suddenly you need 1,000 units a quarter, then 2,500, then 10,000 a year. The jig that worked for 10 units at a time now sees three shifts. The lead engineer is in customer meetings. A new operator, hired last month, is running the bonding step alone on a Saturday.

This is the moment most MedTech startups discover that their process validation was really a snapshot of their founders on a good day. Under EN ISO 13485:2016+A11:2021 clause 7.5.6, processes whose output cannot be fully verified by downstream inspection must be validated — and validation is specific to the conditions under which it was performed. Change the conditions, and the validation status is in question.

Felix has watched this movie four times with coached startups. The pattern is always the same: the team nails certification with a clean pilot, signs the distributor contract, and then runs straight into a requalification wall they did not budget for.

## What MDR and ISO 13485 actually say about scaling

MDR Article 10(9) requires manufacturers to establish, document, implement, maintain, keep up to date and continually improve a quality management system. Annex IX Section 2.4 requires the manufacturer to inform the notified body of any planned substantial change to the quality management system or to the product-range covered. The notified body must assess the proposed changes and communicate its decision.

The operational detail sits in EN ISO 13485:2016+A11:2021:

- **Clause 7.5.6 — Validation of processes for production and service provision.** Processes where the resulting output cannot be or is not verified by subsequent monitoring or measurement must be validated. Records of validation are required, and the standard explicitly requires revalidation when changes occur that affect the validated state.
- **Clause 7.5.1 — Control of production.** Production must be carried out under controlled conditions, including documented procedures, infrastructure, monitoring, and the qualification of personnel.
- **Clause 8.2.6 — Monitoring and measurement of product.** Conformity of product to requirements must be monitored and measured at appropriate stages, with records maintained.
- **Clause 7.4 — Purchasing.** Suppliers must be evaluated and re-evaluated based on their ability to supply product in accordance with requirements.

Plain-language translation: if you change anything that could affect the output — volume, equipment, shift pattern, operators, supplier, environment — you must assess the change, decide whether revalidation is required, document the decision, and if the change is substantial, tell your notified body before you make it.

## A worked example: from 40 units per month to 1,500

A Class IIa wound-care device manufacturer had CE marking with a pilot line producing around 40 units per month. Operators: the two founders plus one technician. Bonding process: manually timed UV cure, qualified at 90 seconds under specific lamp conditions, validated with three successful runs of 20 units each.

Then a hospital group ordered 1,500 units per month for 18 months.

Here is what the scale-up actually required:

1. **Process validation re-examination.** The UV bonding was qualified for a batch size of 20 with a single lamp. At 1,500 per month they needed either parallel lamps or longer runs. Both required new IQ/OQ/PQ protocols. The lamp intensity decayed faster than the team expected — the original PQ had not captured lamp life because the pilot lamps had never aged.
2. **Operator qualification.** They hired two additional operators. EN ISO 13485 clause 6.2 requires competence based on education, training, skills and experience. They needed a documented training plan, objective evidence of qualification, and a record showing each operator was authorised before running the process alone.
3. **Environmental monitoring.** The pilot was in a converted office. At volume, temperature and humidity variation across a full shift affected the bond. They added continuous environmental monitoring and defined acceptance limits in the validation protocol.
4. **Supplier scaling.** The adhesive supplier's pilot-scale batches were not the same as their production-scale batches. The team had to requalify the production-grade material, run biocompatibility bridging data under EN ISO 10993-1:2025, and update the device master record.
5. **Notified body notification.** The combination of new equipment, new operators, new environmental controls, and a new material batch grade triggered a substantial change notification under Annex IX Section 2.4. The notified body took 11 weeks to respond. The team had not planned for that delay in their supply commitment.

Outcome: they shipped, but six weeks late and with a commercial penalty. Everything they did was doable. None of it was optional. All of it was foreseeable.

## The Subtract to Ship playbook for scaling production

You cannot eliminate the regulatory work of scaling. You can eliminate the scramble. Here is the lean version.

### 1. Design the validation envelope for where you are going, not where you are

When you first validate a process, document the intended operating range, not only the pilot conditions. If you plan to run 1,500 units per month in 18 months, validate the equipment, batch size, shift pattern, and operator count that supports that — or explicitly scope what a future requalification would look like. Tibor's auditor rule of thumb: if your validation report does not say what the process is qualified for, it is qualified for nothing beyond what was on the day.

### 2. Write a formal change control procedure that maps changes to regulatory consequences

Under clause 7.3.9 (design and development changes) and clause 4.1.4 (changes to QMS processes), every change is assessed. Build a one-page decision matrix covering:

- Volume change beyond validated range → revalidation required
- New operator on validated process → training record + competence verification required
- New shift pattern → production control review + environmental monitoring review
- New supplier or supplier site → clause 7.4 re-qualification + risk management update
- New equipment → IQ/OQ/PQ + potential notified body notification
- New material grade or batch size at supplier → bridging evaluation

This matrix is not regulatory theatre. It is how you answer the notified body auditor's favourite question: "How did you decide this change did not require revalidation?"

### 3. Notify your notified body early for substantial changes

MDR Annex IX Section 2.4 says you inform the notified body of planned substantial changes. The word planned matters. Notifying after you have already scaled is a finding. Notifying 12 weeks before go-live gives your notified body time to review without blocking your customer commitment.

Tibor's notified body perspective: auditors would rather see a proactive change notification with a clean assessment than a reactive one after a customer complaint. The former looks like a mature QMS. The latter looks like a QMS under stress.

### 4. Scale supplier controls in parallel with production

A supplier who delivers 500 units per year at hand-packed tolerances is not necessarily the same supplier at 15,000 units per year on automated lines. Under clause 7.4.1 you re-evaluate suppliers based on their ability to meet requirements — and the requirements change with volume. Build an incoming inspection plan that sharpens, not loosens, as volume grows. If you are working with a contract manufacturer, see our post on [outsourced processes and contract manufacturers](/blog/outsourced-processes-contract-manufacturers) for the division-of-responsibility detail.

### 5. Capture tribal knowledge before the fourth operator

This is the subtract step most teams miss. At 10 units per month, the founder is the process. At 10,000 units per year, the work instruction is the process. The transition must happen in writing, with photos, with video, with the actual founders watching a new operator execute the document and flagging every place where the document is ambiguous. Do this before you hire, not after.

## Reality Check

1. Does your current process validation report explicitly state the batch size, shift pattern, equipment, and operator count it is qualified for?
2. If you doubled your monthly volume tomorrow, could you show an auditor a change assessment demonstrating whether revalidation is required?
3. Do you have a documented threshold above which a production change triggers a notified body notification under Annex IX Section 2.4?
4. Is every operator currently running validated processes listed on a competence record tied to objective evidence of training?
5. If your adhesive, polymer, or electronic component supplier changed production site tomorrow, would you know within 30 days?
6. Have you validated at least one production batch under realistic worst-case conditions — lamp at end of life, operator on last hour of shift, environment at humidity ceiling?
7. Does your supply agreement commit you to volumes you have not yet qualified your process for?
8. Who in your team owns the decision "this change is substantial and must be notified"?

## Frequently Asked Questions

**Do I have to revalidate a process every time I add an operator?**
No. You have to assess the change. If the process is validated with documented operator qualification requirements and the new operator meets them, the validation status is preserved. What you must not do is skip the qualification step.

**What counts as a substantial change under Annex IX Section 2.4?**
MDR does not give a closed list. MDCG guidance and notified body internal criteria treat changes to the device, its intended purpose, manufacturing site, critical suppliers, or sterilisation process as substantial. When in doubt, ask your notified body in writing — their answer becomes part of your record.

**How long does a notified body take to respond to a substantial change notification?**
Plan for 8 to 16 weeks for typical changes. Complex changes involving clinical or biocompatibility impact can take longer. This is a planning constraint, not a negotiation point.

**Can I scale production to a contract manufacturer instead of my own line?**
Yes, but this is itself a substantial change. The contract manufacturer becomes a critical supplier under clause 7.4, and their site is part of your QMS scope. See our posts on [contract manufacturers](/blog/outsourced-processes-contract-manufacturers) and [working with CMOs](/blog/working-with-cmos-mdr-startup).

**What is the cheapest way to make a process scalable from day one?**
Design the validation envelope wide. Qualify at the upper end of your realistic 24-month volume forecast, not at current pilot volume. The marginal cost of one wider PQ is far less than a full requalification project.

## Related reading
- [Process validation under MDR and ISO 13485](/blog/process-validation-mdr-iso-13485) — the validation-lifecycle fundamentals that scaling builds on.
- [Outsourced processes and contract manufacturers](/blog/outsourced-processes-contract-manufacturers) — how QMS responsibility is divided when scale means a CMO.
- [Supplier qualification under MDR and ISO 13485](/blog/supplier-qualification-mdr-iso-13485) — the clause 7.4 work that scaling forces back open.
- [Working with CMOs as an MDR startup](/blog/working-with-cmos-mdr-startup) — the relationship management side of outsourced scaling.

## Sources
1. Regulation (EU) 2017/745 on medical devices, consolidated text. Article 10, Annex IX Section 2.4.
2. EN ISO 13485:2016+A11:2021 — Medical devices — Quality management systems — Requirements for regulatory purposes. Clauses 4.1.4, 6.2, 7.3.9, 7.4, 7.5.1, 7.5.6, 8.2.6.
3. EN ISO 14971:2019+A11:2021 — Medical devices — Application of risk management to medical devices.

---

*This post is part of the [Team Building, Operations & Scaling](https://zechmeister-solutions.com/en/blog/category/team-operations) cluster in the [Subtract to Ship: MDR Blog](https://zechmeister-solutions.com/en/blog). For EU MDR certification consulting, see [zechmeister-solutions.com](https://zechmeister-solutions.com).*