Software as a Medical Device for the EU MDR

A free guide to achieving MDR compliance of medical software.

What is software as a medical device?

The Medical Device Regulation (MDR) is fully in force from May 2021. Alongside extensive provisions relating to physical medical devices, the MDR also applies to any software that meets the definition of a medical device. In this free guide, we outline how to apply the Medical Device Regulation (MDR) 2017 / 745 to the unique case of software as a medical device.

While it may be a surprise to some people that software may be classed as a medical device, this has been the case since the introduction of the Medical Device Directive in 1993.

Medical device software is any software product that meets the following criteria:

  1. it is intended by the manufacturer to be used for a medical purpose
  2. it meets the MDR Article 2 definition of “medical device”.

The increasing availability of medical software means that this aspect of medical device regulation is becoming increasingly important. The ever-expanding selection of medical apps, AI diagnosis and diagnostic-assist technology, medical imaging analysis software, decision support tools and other medical software solutions required that the new MDR accounted for the full scope of software with a medical purpose.

How to understand whether a software product will be a medical device

When seeking to determine whether a software product will be a medical device, a key consideration is the intended purpose of the product as stated by the manufacturer. This would extend to any claims made about the product on promotional material and developer-associated websites. Manufacturers must take great care when writing the public description of their product since the MDR will require them to provide evidence that these claims can be met.

Beyond the stated intended purpose, Article 2 of the MDR contains a wide definition of “medical device” which extends to software. According to Article 2, any software that is intended for diagnosis, prevention, monitoring, prediction, prognosis, treatment or alleviation of disease, and/or diagnosis or monitoring of an injury or disability, would likely be classed as a medical device.

The nature of software, however, is that even with such a broad definition it can still be unclear whether the MDR will apply. Some software products, for example, have a functionality that enables healthcare activity but does not have a stated medical intended purpose (for example, software that co-ordinates shift patterns of healthcare workers, or inventory-management software). Other software may make healthcare-related information more accessible while claiming not to alter the information in any way (such as an app that shows a trend of blood sugar readings over time).

The following additional considerations may be useful in further understanding whether a software product will fall under the MDR.

1. The software must have a medical purpose on its own

This applies whether the software is a stand-alone product, or whether it is integrated into a hardware device. For example, the software that drives decisions on automated defibrillators is embedded in a hardware device; however, it would itself be a medical device if it was extracted from the defibrillator

2. The software must add medical value

Simple “archive and retrieval” software that, in effect, replicates the action of a paper recording of healthcare data is not likely to be classed as software as a medical device. However, if the software highlights data in any way (especially if it applies an analysis to trends or draws attention to potentially significant findings) then this would be classed as “adding medical value”, making it likely that the MDR would apply.

3. Software incorporating a “call to action”

Any “call to action” initiated by the software and related to any of the aspects covered by MDR Article 2 will likely cause the product to be software as a medical device. For example, an app that advises the patient to visit their doctor based on a reading or data entry is likely to be classed as software as a medical device.

4. Do virtually-identical systems operate outside the medical device sector?

An increasingly-relevant example are systems that enable remote medical consultation. If the system is simply a communication aid (such as video-conferencing software that could equally be used, unaltered, for non-medical purposes) then it is unlikely to be software as a medical device. Systems that enable remote consultation but also assist the provision of care in any way (for example, by highlighting important information) are likely to fall under the MDR.

What regulatory systems need to be in place for software as a medical device under the MDR?

EU MDR compliance

Software as a medical device must meet the same range of regulatory requirements as required for physical medical devices. Medical device software must be CE-marked, indicating that all regulatory obligations have been met, with requirements for obtaining permission to apply a CE-mark differing depending on the classification of the product.

Medical devices of all types fall into one of four risk classes: Class I, IIa, IIb or III. Class I devices are the lowest risk category (with correspondingly lighter regulatory requirements) while Class III devices are the highest risk with, accordingly, the highest regulatory burden. The key to understanding risk classification of software as a medical device is MDR Annex VIII Rule 11, which sets out a classification system that can be applied to any medical software product. While there is scope for software being in any of the four risk classes, by virtue of Rule 11 most software as a medical device will fall into Class IIa.

Manufacturers of all devices (including software) apart from Class I devices must gain approval from a Notified Body before applying a CE mark.

Specific regulatory processes that must be in place for software as a medical device include:

Need help with your MDR strategy?

Connected MDR systems for medical software compliance

Our medical experts will unlock EU MDR compliance for your software applications.

  • Data analysis
  • CE-marking support
  • Technical documentation
  • Real-time data collection

Find out more

Call us now to discuss your MDR requirements:

(+44) 0114 386 3349

Or send us your details and we will contact you:

MDR Consulting

Our team of MDR professionals are medical device regulatory consulting specialists offering tailored MDR compliance services.

MDR Training

Our comprehensive training services are delivered by experts and address all aspects of MDR compliance.

Who we work with

Our clients come from across the industry and range from pre-start businesses to stockmarket-listed multinationals. We also have key strategic partners based in the UK and Denmark.

  • It was a pleasure working with you. We are completely satisfied with your service and look forward to working with you again.

    CEO, EU medical software company
  • Your service surpassed our expectations and added value across our organisation. We now feel much better placed to prepare for the MDR.

    Chief Executive, MedTech pre-start
  • A comprehensive, detailed and highly professional service.

    Regulatory Manager, UK device manufacturer
  • International

    We work with medical device manufacturers based in the UK, Europe, the US and Asia, developing MDR strategies for both physical devices and software as a medical device.

  • Diversified

    Working with us gives you access to our growing international team of MDR-trained healthcare professionals from a wide variety of clinical backgrounds.

Read more about our team and philosophy

Get our free White Paper: Mastering the MDR — A comprehensive summary of the EU MDR

Download

FAQs

We have compiled some of our frequently asked questions. If you'd like to know anything else about what we do, feel free to ask us a question.

  1. We can work with the majority of medical device manufacturers seeking compliance of their devices in accordance with Medical Device Regulation (EU) 2017/745, including both hardware and software devices. We also offer a free, no-obligation consultation, so please feel confident about discussing your requirements with a member of our team.

  2. No. We will work with you to produce systems and to support your EU MDR compliance, but we do not conduct research ourselves. We will provide tools for you to conduct your own Post-Market Surveillance. Our range of services are designed to assist you in this matter.

  3. Yes. We adhere to the highest standards of professionalism and regard maintaining confidentiality and data security as a cornerstone of our practice. We also comply fully with the requirements of GDPR.

  4. Our medical device regulatory consulting is built around a strict quality framework and we only work with clients who share this commitment to quality. Our CEO is a medical doctor with years of experience in the medical device industry and assumes personal responsibility for every project. Our product development process integrates client feedback throughout product production, ensuring a constant focus on your needs.

  5. We work with clients of all sizes and at all stages of their regulatory compliance journey. Our team are here to help and are happy to respond to general enquiries, even if you don't feel like you know where to start. We are experts at 'tuning in' to your requirements and will guide you through the entire process. Our free MDR Compliance Guide and suite of MDR downloads stand as proof of our commitment to help you understand your obligations under the MDR.

  6. Yes. Software as a Medical Device is an increasingly-important segment of the medical device market. We have extensive experience in building regulatory systems for medical software and offer a special application of all our MDR services for software products. We also offer unique downloads and white papers that focus specifically on Software as a Medical Device.

  7. At its core, working with the MDR is about working with clinical evidence. Whether you need to generate evidence for PMCF, analyse data for writing a CER, or build an MDR-ready PMS system, our medical experts have the clinical acumen to ensure that your clinical evidence is produced and interpreted with the highest levels of professionalism. Medical professionals work with clinical evidence all day. We bring their specialist capabilities directly to your MDR strategy.

  8. We believe in transparency and aim to build long-term relationships with our clients. This commitment is demonstrated by our customer-focused pricing strategy. You pay a small deposit upfront, only paying the balance when the work has been completed to your total satisfaction. For higher-value projects we offer flexible payment packages on an individual basis — please contact a member of our team to find out more.

  9. Yes. Our unique business model allows us to scale to accommodate almost any amount of work. Many of our medical professionals remain clinically active, meaning that we have trained more than we presently need. This system allows us to have ready availability of redundant capacity that can be called upon in the event of a surge in demand. Whatever your requirements, our unique business model allows us to step in faster than any of our competitors.

  10. Yes. We run a number of events throughout the year focusing on specific aspects of MDR compliance. We also offer a limited number of free webinars on a limited basis — subscribe to our newsletter to be notified early when we publish new events. Of course, we also have our extensive MDR Compliance Guide and free MDR downloads suite, both of which offer extensive training on all aspects of MDR compliance.

Do you need help with your MDR strategy?

Contact us