The CE mark is a summary, not the substance

A CE mark printed on a medical device is the manufacturer’s own declaration — backed, for most device classes, by a notified body’s assessment — that the device meets the EU Medical Device Regulation’s applicable requirements. What actually establishes that isn’t the mark itself but the technical documentation file behind it: the body of evidence a manufacturer compiles, and is legally required to keep current, that demonstrates the device was designed, tested, and is manufactured to meet those requirements. The mark is the visible one-line output; the file is where the actual compliance work lives.

What the technical documentation covers

MDR Annex II lays out the structure most manufacturers organize this file around, and while the depth required scales with device risk classification, the categories of content are broadly consistent:

  • Device description and specification, including intended purpose, the patient or user population, and how the device is classified under MDR’s risk-based rules.
  • Design and manufacturing information — enough detail that the design and production process could, in principle, be reproduced or audited.
  • General safety and performance requirements, and the evidence (standards applied, test reports) showing each applicable requirement is met.
  • Risk management documentation, following a defined risk management process that identifies hazards, evaluates them, and shows the mitigations taken.
  • Verification and validation data — bench testing, biocompatibility data where relevant, software validation for any device incorporating software, and clinical evaluation data appropriate to the device’s risk class.
  • Labeling and instructions for use, in the languages required by the markets the device will actually be sold into.
  • Post-market surveillance planning — the file doesn’t end at first sale; manufacturers are required to actively monitor device performance in the field and feed that data back into the technical documentation over the device’s life.

Why the Declaration of Conformity is a separate, later step

The EU Declaration of Conformity, required under MDR Article 20, is the manufacturer’s formal written statement that a specific device meets the applicable requirements — but it’s downstream of the technical file, not a substitute for it. A manufacturer signs the Declaration of Conformity once the technical documentation actually supports that claim; for higher-risk device classes, a notified body’s assessment of that same documentation typically has to happen first. Signing a Declaration of Conformity without the underlying file being complete and accurate isn’t a shortcut — it’s the manufacturer making a legal claim it can’t back up if challenged.

Why this matters for a buyer or distributor, not just a manufacturer

A distributor bringing a sterilizer or a sterile barrier product into the EU market is relying on the manufacturer’s technical file being real and current, even without seeing it directly. Practical due diligence questions worth asking a supplier include:

  • Is the CE mark backed by a currently valid Declaration of Conformity for the specific model and configuration being purchased — not an older or different variant from the same product family?
  • For higher-risk device classes, was a notified body actually involved, and is that notified body’s identification number visible alongside the CE mark, as required?
  • Is the manufacturer maintaining post-market surveillance — a manufacturer with no visible process for that isn’t meeting an ongoing MDR obligation, not just a one-time filing requirement.

None of this is something a distributor’s own paperwork can substitute for — it’s a property of the manufacturer’s own technical file, which is exactly why verifying it before committing to a supplier relationship is worth the effort.