Case Study: An EU Authorized Representative Mandate for a Surgical Robotics Line

The hard part was supposed to be behind them. A manufacturer of surgical robotics had taken its flagship platform through conformity assessment with a Notified Body, come out the other side with a certificate, and turned to the rest of the catalog: the instruments and components that go into the robot's arms and get replaced between procedures. Self-declared, Class I, no Notified Body anywhere near them. The easy part.

Then someone asked who was going to be their Authorized Representative, and the calendar changed shape.

The company that had to exist before the account could

The manufacturer was not established in an EU Member State, which under EU MDR Article 11(1) meant its devices could not be placed on the Union market at all until it designated a sole authorized representative. No size threshold, no exemption for the self-declared end of the catalog. That much they had expected.

Their first instinct was to hand the role to their EU distributor, who was willing and already had the boxes in a warehouse. The regulation does not forbid that — one legal entity may hold more than one role — but the obligations do not merge. An importer carries its own duties under Article 13 and appears separately in the economic operator chain and in EUDAMED, and there is an awkwardness in asking the party whose margin depends on the shipment to also be the party that verifies the file behind it. The same conversation surfaced a second assumption worth killing early: that one appointment would cover the United Kingdom and Switzerland as well. Neither is an EU Member State. Each runs its own regime — a UK Responsible Person, a Swiss authorized representative — appointed separately, and an EU mandate reaches neither.

What they had not expected was the sequencing. Their plan had EUDAMED registration as a task to be worked through in parallel — an account to open, records to fill in. But an actor registration request routes to a competent authority only when the applicant is established in the EU. When the manufacturer is established outside it, the request routes to the appointed Authorized Representative, who verifies it; the competent authority of the representative's Member State then validates the registration, and the Single Registration Number is issued. Their SRN could not exist until a representative existed to verify the request, and without an SRN there would be no device records, and without device records nothing could be lawfully placed on the market.

There was a deadline attached to that discovery. Mandatory use of the first four EUDAMED modules had begun on 28 May 2026, and legacy devices still being placed on the market have to be registered by 28 November 2026.

The mandate went to our EU entity, whose actor account has been registered in EUDAMED since 2021. That detail mattered for exactly one reason: the validation step was a task somebody could perform that week, rather than a prerequisite that had to be built first. The role, its statutory duties and its liability position are set out on our EU Authorized Representative page; the equivalent roles in other markets are mapped on our in-country representation page.

One consequence of the choice was not obvious to them until it was pointed out. Under Article 11(7), every reference in the MDR to the competent authority of the Member State where the manufacturer has its registered place of business is read, for a non-EU manufacturer, as the authority where its representative is established. Choosing a representative had chosen their regulator.

What the file review caught

The designation is a written mandate and is valid only once the representative accepts it in writing. Nobody accepts it without reading the file first, because Article 11(3)(a) requires the representative to verify that the Declaration of Conformity and technical documentation have been drawn up and that the appropriate conformity assessment was carried out. MDCG 2022-16 turns that into an expectation of documented verification — a real read, not a receipt.

Two findings came out of it, both of the kind that recur constantly in this work.

The first was in the certificate, which the manufacturer had produced with the confidence of a company holding a current one. It was current. It was also written in MDR codes and device descriptions whose scope stopped short of one model in the flagship family — so the assumption that a certificate in force is a certificate that covers the product turned out to be the wrong assumption. Discovered after the mandate was signed and the records filed, that is a market-surveillance conversation. Discovered before, it was a scope extension with the Notified Body: slow, unwelcome, and survivable.

The second was in the Declaration of Conformity, which had been treated the way DoCs usually are — as a formality to be produced rather than a document to be checked. It had been copied forward and still pointed at a certificate that had since been superseded. The DoC is not a formality; it is the legally binding assertion the rest of the file hangs from, and it is the single most frequently stale document we encounter. It was reissued against the current certificate.

There was also a question the manufacturer had to answer about people rather than paper. ISO 13485 evidence was in order, but MDR Article 15 requires a Person Responsible for Regulatory Compliance on the manufacturer's side, and separately requires the representative to have its own PRRC permanently and continuously at its disposal. Two people, two roles, not interchangeable — and a representative that cannot name its own is a compliance problem the manufacturer inherits.

The accessories were not the easy part

The instruments and components had been treated as an afterthought all year, and the review is where that assumption came apart.

Class I self-declared does mean no Notified Body is involved anywhere in the file. What it also means — and this is the part that lands badly when it lands late — is that the representative's verification review is the only external examination those files will ever get. The flagship platform had been read by a certification body. The accessory line had been read by nobody. The manufacturer had written its own GSPR conformity argument, assembled its own technical documentation, and signed its own DoC, and until that review no third party had tested a word of it.

Lighter gatekeeping, identical obligations. Each accessory still needed a complete Annex II and III technical file, a GSPR argument addressed requirement by requirement, a signed DoC, a Basic UDI-DI from a designated issuing entity, and its own EUDAMED device record — self-certified Class I devices being explicitly in scope for registration. A device with an immaculate technical file and no database entry cannot be placed on the market — a strange thing to learn about a product line everyone had considered finished.

The classification work was redone properly against the MDR classification rules rather than inherited from the platform's paperwork. Class is a risk determination, not a product family: a company whose flagship sits high can easily have an accessory line self-declared at the bottom of the scale and governed by an entirely different set of expectations from the machine it plugs into.

The order things had to happen in

With the mandate signed, the sequence ran as EUDAMED requires, each step gating the next. The manufacturer registered as an Actor — EU Login account, company details, named regulatory personnel including its PRRC and its representative. The representative reviewed and validated the registration. The SRN issued. Only then could the device records be built: one per Basic UDI-DI, carrying UDI-DI and UDI-PI, the issuing entity, catalogue reference, EMDN code, trade name, classification, characteristics such as single-use and sterility status, any human or animal tissue content, and every Member State where the device would be made available. Article 11(3)(c) then required the representative to verify those registrations had actually been made. The mechanics of each module are on our EUDAMED registration page.

The regulatory ground had shifted underneath all of this, which is why the deadline mattered. Commission Decision (EU) 2025/2371 confirmed the functionality of the first four modules on 27 November 2025 and opened a six-month transition; mandatory use began on 28 May 2026; legacy devices still being placed on the market must be registered by 28 November 2026.

The last assumption to go was that this was a filing — something completed once and left alone. It is a record that has to stay true. For a portfolio already inside the database, mandatory use turned the change into a data-quality exercise rather than a filing one: actor records current, device records agreeing with the DoC and the certificate and the label, the SRN chain live. Stale entries stopped being untidy and became a liability. For a manufacturer arriving now it is both jobs at once, which is the argument for entering records carefully rather than quickly — whatever goes in becomes the baseline every later filing is measured against, and records drift quietly afterwards. People leave, addresses change, products get revised, and none of that generates a prompt.

The artwork nobody had costed

Artwork had been scheduled the way most manufacturers schedule it: after approval, once everything else was settled. The label was the last thing anyone expected to reopen. But MDR Annex I Chapter III requires the label to carry the name, registered trade name or registered trade mark of the authorized representative and the address of its registered place of business, where the manufacturer's own registered place of business is outside the Union — which means the representative has to be chosen before the artwork can be finished, not after. The "EC REP" symbol comes from EN ISO 15223-1 — whose 2025 amendment adds an "EU REP" variant, with both symbols usable until mid-2031.

That is a line of text, and it turned into an artwork program. Labels, packaging and instructions for use all had to be revised and reprinted, in the official language of every Member State where the devices would be made available — and the accessory line, being consumable, had more individual references carrying that text than the flagship did. Appointing a representative is an artwork and IFU project with a print run attached, not an administrative step, and the same is true of changing one later. It is the largest hidden cost of choosing the wrong representative first.

Two other lines under the same mandate

The same mandate covers work that looks nothing like a robotics catalog, and two of those lines answer questions this manufacturer never had to ask.

One is a group of laboratory and point-of-care IVD platforms — including nucleic-acid purification instruments and point-of-care test docks — registered at Class A. That classification surprises people, and the IVDR classification rules explain it: Annex VIII places instruments intended specifically for use in in vitro diagnostic procedures, along with general laboratory products and specimen receptacles, in the lowest class. The assays those instruments run are classified on their own merits, frequently land higher, and may need CE marking through a Notified Body. One diagnostic system, split across the classification scale. The deadline there passed longer ago than most people think: non-sterile self-certified Class A IVDs received no transitional extension at all — they had to comply from 26 May 2022, the IVDR's own date of application — while the classes above them were granted staged extensions running to the end of 2027, 2028 and 2029. The bottom of the ladder had the earliest hard date, so the devices least likely to be prioritized internally were the ones due first.

The other is a contrast-media injection and imaging-suite consumables line — hose tubing systems and related fluid lines — at Class IIa and IIb, where a Notified Body is in the file and the certificate carries an expiry to manage. Its interest is arithmetic. Consumable families multiply along predictable axes: configuration, length, connector geometry, compatibility with particular injector systems, sterile presentation. Individual product references far outnumber the registrations covering them, because a Basic UDI-DI covers devices sharing the same intended purpose, risk class, design and essential characteristics — which is exactly what a family of tubing variants is. Where the grouping lines are drawn is a real decision: too broad and a variant differing in an essential characteristic sits inside a record that does not describe it; too narrow and the registration and upkeep burden multiplies for nothing. And because every variant reaching a new Member State needs that state's language, the artwork matrix on a line like that is variants times languages, not variants plus languages. A Class III implant registered once may sit still for years. A tubing catalog never does.

What the mandate does after signature

Representation turned out to be a standing operation rather than a filing. Complaints and incident reports route through it. Authority requests arrive and have to be answered with documentation in an official Union language the Member State determines. Post-market surveillance and PSUR cadence run proportionate to risk class. Certificates come up for renewal. EUDAMED records need updating every time a product changes.

Two obligations have tails long enough that the manufacturer learned to ask about them before signing anything. Technical documentation must be kept available for at least 10 years after the last device covered by the DoC was placed on the market — 15 years for implantable devices — and Article 11(3)(b) puts the representative under the same clock, which makes "how does your archive work, and what happens to it if you are acquired or dissolved" a fair question to ask a prospective partner. And changing representative later is governed by MDR Article 12, which requires a written agreement covering termination dates, document transfer and complaint forwarding, sequenced so coverage never lapses. Both were settled before signature, which is the only moment either side has much appetite to negotiate them.

On market, and the bill

The devices are registered and on the market — flagship and accessory line both, under one mandate, with the accessory files having been read properly for the first time on their way through.

The EU is unusual, and for once in the manufacturer's favor: there is no government fee for EUDAMED registration. Actor registration and device registration cost nothing to file. What gets paid for is conformity assessment and representation.

Government fee position as published, last verified 12 January 2026. Our representation fee is flat, annual, and does not vary by risk class — the same price for a self-declared Class I accessory as for a Class III implant:

The fee covers document review, EUDAMED support and Certificate of Free Sale request support, with no hourly billing. Third-party fees — Notified Body, UDI issuing entity, testing, legalization — are separate and never marked up. A three-year contract locks the rates.

Priced at those rates, a catalog shaped like this one — three device groups brought under one mandate — comes to $3,000 per year in representation, against nothing at all in government registration fees. The Notified Body's own charge for the flagship's assessment sits outside that figure and would have been owed to whoever held the mandate. The cap is the part worth modelling if a catalog is still growing: because the fee flattens at $4,000 from six to ten groups, the per-group cost falls from $2,000 at one group to $800 at five and $400 at ten, so bringing groups in together costs materially less than adding them one at a time. Price your own mix in the fee calculator.

For anyone timing a market entry: where a Notified Body is involved, the certification range our EU market page publishes is 12 to 24 months, longer for higher-risk devices, with shorter timelines possible using smaller-scale Notified Bodies. Self-declared Class I and Class A devices skip that assessment entirely, which is what makes it so easy to believe they are finished when they are not. Those are market-level figures from our published guidance; we do not publish timings from our own filings.

Doing this for your product line

The order this engagement followed is the order that works. Settle the representative before you plan around EUDAMED, because outside the EU your SRN cannot be issued until a representative validates your actor registration. Have the certificate scope and the Declaration of Conformity read against each other before the mandate is signed rather than after the records are filed. Give your self-declared products the scrutiny nobody else is going to give them. Budget the label change and its print run as part of market entry. Ask about the archive and the exit terms while you still have leverage. And if your devices are not in the database yet, work backwards from 28 November 2026.

Start with the EU market page for the full MDR and IVDR picture including transitional deadlines, read how CE marking fits around it, or talk to our team about your catalog. If the EU is one of several markets in front of you, the same holder-and-representation question arrives in different legal clothing everywhere else — see Vietnam and Brazil — and note that an EU mandate covers neither the United Kingdom nor Switzerland, each of which requires its own appointment.