The true cost of CE marking a medical device in 2026 ranges from roughly EUR 50,000 for a simple self-certified Class I device to EUR 1.5 million or more for a complex Class III implantable. For the typical Class IIa software-enabled device most startups bring to the EU market, expect a total first-certification cost in the range of EUR 200,000 to EUR 500,000, excluding team salaries across the 18 to 24 month pre-revenue window. This breakdown gives the honest numbers by cost category and device class, the way they should appear in an investor pitch deck and a founder's financial plan.

By Felix Lenhard and Tibor Zechmeister. Last updated 10 April 2026.

TL;DR

  • CE marking cost is driven by device class, conformity assessment route, and the clinical evidence pathway — not by how hard the team is willing to work.
  • A Class IIa software device typically runs EUR 200,000 to EUR 500,000 in direct regulatory costs. A Class IIb implantable can be double that. A Class III device with a clinical investigation can exceed EUR 1 million before the first patient is enrolled.
  • The honest breakdown has ten line items: QMS build, technical documentation, risk management, clinical evaluation, clinical investigation (when needed), testing, Notified Body fees, PRRC, legal and registration, and surveillance.
  • Every line item scales with class. The clinical investigation line is the one that can swing a budget by an order of magnitude — and the one most first-time founders forget entirely.
  • Regulatory cost belongs inside Cost of Goods Sold in your financial model, not as a separate "compliance" line. It is the cost of being allowed to sell the product.

Why this breakdown exists

Most MedTech founders walk into their first fundraising round with a regulatory budget that is wrong by a factor of two. Some are wrong by a factor of five. A small number are wrong by an order of magnitude. The cause is almost always the same: they asked the wrong people for numbers, or they asked the right people and got a shrug, or they read a consultant's blog post that gave a range so wide it was useless.

Felix has a story he tells at the start of every fundraising coaching session with a first-time MedTech founder. A team arrived confident that MDR certification would take "about two months." They had a consultant lined up. They had a Gantt chart. They had a runway calculation built around revenue landing in month four. What they did not have was a regulatory budget that matched the real shape of an MDR project. Month four passed. Month eight, the intended purpose was still contested. Month fourteen, the first bridge round. Month twenty, the second. Two years in, the company was still pre-revenue, the cap table was wrecked, and the founder was running the project on fumes. The product worked. The financial plan did not.

The specific error was not the timeline. It was the underlying cost model. The founder had treated CE marking as a line item called "regulatory consulting" with a number attached to it, instead of what it actually is — a ten-category breakdown where each category has its own range, its own drivers, and its own worst-case failure mode. When you model it properly, the number is larger, but it is also predictable. When you model it as a single line, the number is smaller on the slide and catastrophic in reality.

This post is the breakdown done properly. Use it for your investor deck. Use it for your board review. Use it for your own sanity. And when a consultant tells you the number is smaller because they are going to run the project leaner, ask them which of these ten lines they are removing, and which article or annex of the MDR no longer applies to your device.

Tibor's line on this is the one we print in bold everywhere we can: if you cannot afford regulatory, you cannot afford a MedTech project. This is not discouragement. It is arithmetic. The lines below are fixed costs of entering the EU medical device market. You can make them lean. You cannot make them disappear.

The ten cost categories

Every CE marking project under the MDR (Regulation (EU) 2017/745) has the same ten cost categories. The numbers move by class, by route, and by device complexity, but the categories do not change. Your pitch deck should show all ten, with honest ranges for each. Investors who understand MedTech will check that all ten are present. Investors who do not understand MedTech will ask why the number is so big — and that is the point at which you find out whether they are the right investor.

1. QMS build and maintenance

Typical range: EUR 15,000 to EUR 80,000 for initial build. EUR 10,000 to EUR 30,000 per year for maintenance thereafter.

Every manufacturer of a medical device above Class I (non-measuring, non-sterile, non-reusable surgical) is required to operate a quality management system. The reference standard is EN ISO 13485:2016+A11:2021. The MDR manufacturer obligations, including QMS, are set out in Article 10.

The low end of this range is achievable with a startup-oriented electronic QMS platform, adapted template procedures, and a regulatory professional who customises them to the real operations of the company. The high end reflects custom builds, heavy consulting support, and the kinds of mock audits that larger companies run before their first certification.

What drives the high end: excessive template volume that does not match real operations, consulting hours spent writing documents nobody will read, and the classic Berlin template disaster pattern where a founder buys generic SOPs and replaces the company name. Every one of those lines comes back as a finding in the audit and costs several times the original saving.

What scales with class: Class I devices can run a genuinely small QMS. Class IIa and IIb devices need more process depth but can still be lean. Class III devices require a QMS that would not look out of place at a mid-sized manufacturer, because the design controls, change controls, and supplier controls required by the risk class simply cannot be compressed past a certain floor.

2. Technical documentation

Typical range: EUR 20,000 for a simple Class I file. EUR 40,000 to EUR 80,000 for a typical Class IIa software device. EUR 60,000 to EUR 120,000 for Class IIb. EUR 100,000 to EUR 150,000 or more for Class III.

The technical file is the single piece of work the Notified Body will read most carefully. It is specified by Annex II of the MDR and covers device description, specifications, labelling, design and manufacturing information, General Safety and Performance Requirements evidence, risk management, product verification and validation, and post-market surveillance plans.

What drives the high end: device complexity, the number of GSPRs that apply, the volume of verification and validation data that needs to be summarised and referenced, and the extent to which the team has to outsource writing instead of doing it internally with expert review. Outsourcing 100% of technical documentation writing typically adds 30 to 50% to the cost because the consultant has to learn the device before they can write about it.

What scales with class: Class I files are short. Class IIa files are substantive. Class IIb and III files are long enough that the sheer reviewing effort becomes a cost driver on its own.

3. Risk management

Typical range: EUR 10,000 to EUR 60,000.

Risk management under the MDR is driven by Annex I GSPRs 1 through 9 and delivered through a process compliant with EN ISO 14971:2019+A11:2021. The output is a risk management file that documents hazard identification, risk estimation, risk control, and verification of control effectiveness throughout the product lifecycle.

This is sometimes folded into the technical documentation line in sloppy budgets. Do not do that. Risk management is a distinct discipline with its own cost drivers, and treating it as a subset of documentation is how teams end up with risk files that read like box-ticking exercises and then fail audit review.

What drives the high end: complex hazard landscapes, active devices with software components, devices that combine mechanical, electrical, and biological risk categories, and the usability-engineering overlap where IEC 62366-1 use-related hazards feed back into the risk file.

4. Clinical evaluation

Typical range: EUR 15,000 to EUR 60,000 for a literature-based or equivalence-based clinical evaluation.

Clinical evaluation is required by MDR Article 61 and Annex XIV. For many lower-risk devices, a well-executed clinical evaluation can be built from a systematic literature review, appraisal of the evidence, analysis against the intended purpose, and a clinical evaluation report that demonstrates sufficient clinical evidence without a new clinical investigation.

Equivalence-based clinical evaluation is still possible under the MDR for some devices but is tighter than it was under the Directives, particularly for implantable and Class III devices. MDCG 2020-5 sets out the criteria for demonstrating equivalence. MDCG 2023-7 clarifies the cases where implantable and Class III devices may be exempted from pre-market clinical investigation and what "sufficient levels of access to data" means for equivalence claims.

What drives the high end: a clinical evidence base that is thin or contested, a literature landscape where the published studies do not cleanly cover the intended purpose, and cases where the clinical evaluation has to be iterated several times with the Notified Body.

5. Clinical investigation (when required)

Typical range: EUR 100,000 on the low end. EUR 500,000 is more common. Over EUR 1,000,000 for larger pivotal studies.

This is the category that can double or triple a total CE marking budget, and the one most first-time founders forget to include until the Notified Body or the clinical evaluation tells them they cannot avoid it.

A clinical investigation under Article 62 and following, conducted to the requirements of EN ISO 14155:2020+A11:2024, is a full clinical trial with protocol design, ethics committee submission, competent authority notification, investigator site fees, per-patient costs, monitoring, data management, statistical analysis, and a clinical study report. Every one of those items is a real cost.

What drives the high end: study size, number of sites, follow-up duration, and the extent to which the competent authorities require additional evidence during the review. A single-site, small-N feasibility study sits near the low end. A multi-site, long-follow-up pivotal study for a Class III implantable sits at the top.

What scales with class: Class I and most Class IIa devices do not need clinical investigations. Class IIb devices sometimes need them. Class III and implantable devices very often need them, unless the clinical evaluation demonstrates sufficient evidence through other routes.

If your device is heading toward a clinical investigation, this is the line where budgeting errors become company-ending. Plan for it early. Get an honest quote from a clinical research organisation before the first funding round closes, not after.

6. Testing

Typical range: EUR 10,000 for a pure software device with minimal external testing. EUR 50,000 to EUR 200,000 or more for a hardware device with electrical, EMC, biocompatibility, and sterilisation testing.

Testing costs depend entirely on what the device is and which harmonised standards apply. The main categories are:

  • Software verification and validation under EN 62304:2006+A1:2015 — largely internal effort plus tooling. Low external cost for a pure software device, but the internal effort is substantial.
  • Usability engineering under EN 62366-1:2015+A1:2020 — often EUR 10,000 to EUR 30,000 when run properly with formative and summative evaluation.
  • Electrical safety under EN 60601-1 (including current amendments) — EUR 15,000 to EUR 50,000 for active medical devices. Only applies to electrical equipment.
  • Electromagnetic compatibility under EN 60601-1-2 — EUR 10,000 to EUR 30,000. Again, only for electrical devices.
  • Biocompatibility under EN ISO 10993-1:2025 — EUR 15,000 to EUR 60,000 for devices with tissue contact.
  • Sterilisation validation — EUR 20,000 to EUR 60,000 for sterile devices.
  • Packaging, shelf life, and environmental testing — another EUR 10,000 to EUR 30,000 combined where relevant.

What drives the high end: test lab queue times, re-test cycles after a failure, and the compounding cost of running tests in the wrong order so that a finding in one test invalidates work in another.

Tibor's standing advice: get quotes from test laboratories early. Lead times and lab fees are two of the largest surprises for first-time founders, and a single biocompatibility programme can cost EUR 40,000 and take four months. Knowing this before the round closes is cheaper than discovering it after.

7. Notified Body fees

Typical range: EUR 0 for self-certified Class I. EUR 8,000 to EUR 20,000 for Class I sterile, measuring, or reusable surgical. EUR 20,000 to EUR 50,000 for Class IIa. EUR 35,000 to EUR 80,000 for Class IIb. EUR 50,000 to EUR 150,000 or more for Class III.

Notified Body fees cover the conformity assessment work set out in MDR Article 52 and the relevant annexes — application review, QMS audit, technical documentation assessment, certificate issuance, and for higher-risk devices, expert panel consultation where required.

Surveillance audits run annually thereafter at roughly EUR 10,000 to EUR 40,000 per year for the life of the certificate. At least one of the surveillance audits across the certification cycle may be unannounced.

Important clarification for investor decks: these are the fees the Notified Body charges for their work. They do not include your internal time spent preparing for and supporting the audit, which is substantial and should appear in the team cost side of your model.

8. PRRC — Person Responsible for Regulatory Compliance

Typical range: EUR 0 if covered internally by a qualified team member. EUR 5,000 to EUR 30,000 per year for external PRRC arrangements.

MDR Article 15 requires manufacturers to have at least one Person Responsible for Regulatory Compliance with specified qualifications. Micro and small enterprises may engage the PRRC externally under the provisions of Article 15(2) rather than employing one directly.

For a startup, the external route is often the correct one — it is cheaper than a full internal hire and gives access to senior regulatory experience. For a company with multiple devices and a steady pipeline, internal PRRC becomes more efficient.

Typical range: EUR 5,000 to EUR 25,000.

This bucket covers the administrative and legal work that is easy to underestimate because it is spread across many small items: EUDAMED registration, UDI implementation and issuing entity fees, authorised representative appointment (if applicable), importer and distributor contracts, declarations of conformity, and the legal review of intended purpose and labelling claims.

None of these is individually large. Together they routinely add up to more than founders budget. The UDI work alone can run EUR 2,000 to EUR 10,000 depending on the number of device variants.

10. Post-market surveillance

Typical range: EUR 10,000 to EUR 40,000 per year ongoing, with a larger one-time cost to build the system.

MDR Article 83 requires every manufacturer to have a PMS system proportionate to the risk class and appropriate for the device. MDCG 2025-10 describes what this looks like in practice. The system covers data collection, analysis, periodic safety update reports for higher classes, trend reporting, and the feedback loop into the technical documentation and risk management file.

This is the line most founders leave out of the first-year budget entirely, because it does not feel like part of "getting the CE mark." It is. The PMS system has to exist at certification, and it has to run from day one post-launch. If it does not, the next surveillance audit finds it, and the findings are expensive.

Total cost summary by device class

Putting all ten lines together, the honest first-certification ranges are:

  • Class I self-certified: EUR 50,000 to EUR 150,000.
  • Class I sterile, measuring, or reusable surgical: EUR 100,000 to EUR 250,000.
  • Class IIa (the typical startup SaMD range): EUR 200,000 to EUR 500,000.
  • Class IIb: EUR 400,000 to EUR 800,000.
  • Class III (implantable or high-risk): EUR 600,000 to EUR 1,500,000 or more, driven heavily by whether a clinical investigation is required.

These are direct regulatory costs. They do not include team salaries across the 18 to 24 month pre-revenue window, which for a lean MedTech startup add another EUR 400,000 to EUR 900,000 depending on headcount and location. The total runway requirement to reach a first certified device — direct regulatory plus team plus infrastructure — is the number that actually matters for fundraising, and we cover that in detail in the funding pillar.

The Subtract to Ship angle — what NOT to spend on

The Subtract to Ship position on regulatory spending is not "spend less." It is "spend correctly." Some categories of spend produce no regulatory value and can be cut without touching a single MDR obligation. Others look like savings in the pitch deck and come back as findings in the audit.

What to cut:

  • Template documentation packages that do not match your actual operations. The cheap template QMS that gets bought and not customised is the single most reliable way to fail a first audit.
  • Consulting hours spent writing documents nobody on your team will read, understand, or maintain. If the document will not be lived with, it should not exist.
  • Speculative risk analyses for hazards that cannot occur with your device. Annex I does not reward volume; it rewards coverage.
  • Parallel evidence chains where one well-documented pathway would suffice. The Evidence Pass of the Subtract to Ship framework exists to find these.
  • Early-stage investment in elaborate project management infrastructure that exists mainly to make the project look organised to outsiders.

What not to cut:

  • Clinical evidence work. Every euro here is load-bearing.
  • Testing lab fees for anything that is actually required by the applicable harmonised standards.
  • Notified Body fees. There is no lean version of the certification fee itself.
  • PMS build. The system has to exist at certification.
  • PRRC qualification. The person has to be qualified whether they are internal or external.
  • Good-quality risk management. This is the backbone of the file.

The rule is the one that runs through the entire Subtract to Ship framework: every line of spend must trace to a specific MDR obligation. If it does, fund it properly. If it does not, cut it entirely.

Reality Check — Where do you stand?

  1. Does your financial plan show all ten cost categories with honest ranges, or does it show a single "regulatory consulting" line with an optimistic number attached?
  2. Have you had test laboratory quotes in writing for every test your device actually needs, or are you working from estimates?
  3. Do you know whether your device needs a clinical investigation, and if yes, have you budgeted the EUR 100,000 to EUR 500,000+ range honestly?
  4. Is your PMS system budget present in year one, or did you defer it mentally to "after certification"?
  5. Is your PRRC arrangement in place and budgeted, or is it still a TBD?
  6. Have you loaded regulatory cost into Cost of Goods Sold in your unit economics model, or is it sitting outside the model as a separate line?
  7. If an investor asked you to defend the number in each of the ten lines, could you name the specific MDR article or harmonised standard that drives it?
  8. Have you added a contingency buffer of at least 20 to 30% for the things that always go differently than planned?

Frequently Asked Questions

How much does CE marking cost for a typical Class IIa software medical device in 2026? The honest direct-regulatory-cost range for a typical Class IIa software device is EUR 200,000 to EUR 500,000 for first certification. This covers QMS build, technical documentation, risk management, literature-based clinical evaluation, software verification and validation, usability engineering, Notified Body fees, PRRC arrangement, administrative work, and PMS build. It does not cover team salaries across the pre-revenue window, which add another EUR 400,000 to EUR 900,000 for a lean team over 18 to 24 months.

What is the single largest cost category in CE marking? For devices that do not require a clinical investigation, the largest category is usually technical documentation combined with clinical evaluation. For devices that do require a clinical investigation — which includes many Class IIb, Class III, and implantable devices — the clinical investigation is by far the largest category and can exceed the total of every other line combined.

Why do consultants refuse to give specific numbers? Because every device is different and the range for any single project is wide. The honest answer is to give the full ten-category breakdown with ranges and to explain what drives the high end of each category, which is what this post does. A consultant who refuses to give numbers at all is not protecting you from uncertainty; they are protecting themselves from being held to a commitment.

Can I reduce these costs without cutting corners? Yes, within limits. A disciplined Subtract to Ship approach — clean intended purpose, lowest defensible classification, lightest legitimate conformity assessment route, literature-based clinical evaluation where permissible, lean QMS sized to actual risk — can bring a bloated plan back to the low end of the ranges above. It cannot bring the ranges to zero because the structural minimum is set by the regulation itself.

Should regulatory cost appear as a separate line or inside COGS in my investor deck? Inside Cost of Goods Sold. The QMS, the technical file, the clinical evidence, and the post-market obligations are the cost of being allowed to sell the device at all. Treating them as a fourth line outside COGS produces a misleading gross margin and is the modelling error behind most MedTech budget failures.

What is the biggest mistake founders make when budgeting CE marking? Underestimating the clinical evidence pathway and forgetting the post-market surveillance cost in the first-year budget. Both are required by the MDR. Both get left out of the first version of the pitch deck. Both come back as the reason the first bridge round has to be raised.

Sources

  1. Regulation (EU) 2017/745 of the European Parliament and of the Council of 5 April 2017 on medical devices. Article 10 (manufacturer obligations), Article 15 (Person Responsible for Regulatory Compliance), Article 52 (conformity assessment procedures), Article 83 (PMS system). Official Journal L 117, 5.5.2017.
  2. EN ISO 13485:2016 + A11:2021 — Medical devices — Quality management systems — Requirements for regulatory purposes.
  3. EN ISO 14971:2019 + A11:2021 — Medical devices — Application of risk management to medical devices.
  4. EN 62304:2006 + A1:2015 — Medical device software — Software life-cycle processes.
  5. EN 62366-1:2015 + A1:2020 — Medical devices — Application of usability engineering to medical devices.
  6. EN 60601-1 (with current amendments) — Medical electrical equipment — General requirements for basic safety and essential performance.
  7. EN 60601-1-2 — Collateral standard on electromagnetic disturbances.
  8. EN ISO 10993-1:2025 — Biological evaluation of medical devices — Part 1.
  9. EN ISO 14155:2020 + A11:2024 — Clinical investigation of medical devices for human subjects — Good clinical practice.
  10. MDCG 2020-5 — Clinical Evaluation — Equivalence, April 2020.
  11. MDCG 2023-7 — Guidance on exemptions from the requirement to perform clinical investigations pursuant to Article 61(4)-(6) MDR, December 2023.
  12. MDCG 2025-10 — Guidance on post-market surveillance of medical devices and in vitro diagnostic medical devices, December 2025.

This post is part of the Funding, Business Models and Reimbursement series in the Subtract to Ship: MDR blog. Authored by Felix Lenhard and Tibor Zechmeister. If you cannot afford regulatory, you cannot afford a MedTech project — but if you can, the ten lines above are the map of where the money actually goes, and the starting point for a financial plan that survives first contact with a Notified Body.