How to Verify a CE Certificate for a Medical Device: A Distributor's Guide to Reading Notified-Body Certificates, NANDO Designation, Scope and Extended MDD Validity

The Five-Check Verification Rule: How to Verify an EU Medical Device CE Certificate in 10 Minutes

Every international medical-device distributor, hospital procurement committee, and private-label OEM brand owner sourcing surgical consumables from European or Asian manufacturers encounters the same commercial artifact: an email attachment containing a clean, multi-page PDF titled EC Certificate or EU Quality Management System Certificate, stamped with the iconic CE logo and a four-digit identification number.

Whether qualifying sterile disposable circumcision devices, negative pressure wound therapy (NPWT) foam dressings, endovenous medical laser fibers, or surgical puncture kits, accepting that PDF at face value is one of the most dangerous operational oversights in international medical trade. Scanned certificates can be digitally forged, altered to insert unapproved product models, issued by unregulated testing houses lacking medical designation, or secretly suspended by a European notified body following an unannounced audit.

Under Regulation (EU) 2017/745 (MDR), regulatory compliance is not determined by static paper in a filing cabinet; it is determined by the living regulatory record in European public databases and strict adherence to statutory transition rules. ¹ A professional buyer's verification protocol follows five sequential gates:

1. Check 1: Audit Certificate Content against MDR Annex XII: Match the legal manufacturer's name, registered address, Single Registration Number (SRN), applied conformity annex, and explicit device scope against your commercial quotation and pro-forma invoice.
2. Check 2: Verify Notified Body 4-Digit ID & MDR Scope in NANDO: Search the European Commission's NANDO information system to confirm the issuing body is actively designated under Regulation (EU) 2017/745 for the specific product technology code, rather than merely holding general industrial ISO accreditations.
3. Check 3: Establish Legal Regime (MDR vs. Extended MDD vs. Class I Self-Certification): Determine whether the device is certified under MDR (strict 5-year maximum validity), covered by the statutory legacy MDD extension under Regulation (EU) 2023/607 (valid until 2027/2028 with mandatory condition evidence), or self-certified under Class I (where no notified body certificate exists).
4. Check 4: Query Live Status in the EUDAMED Public Certificate Register: Verify that the certificate is not suspended, restricted, cancelled, or withdrawn in the EUDAMED Notified Bodies & Certificates module (officially mandatory since 28 May 2026).
5. Check 5: Secure Contractual Evidence, Re-Verification Triggers, and Buyback Covenants: Embed mandatory regulatory reporting covenants, 48-hour status change alerts, and inventory repurchase remedies into your master distribution or OEM agreement.

What Must a CE Certificate Contain — And Which Fields Most Often Fail When You Match Against a Quotation?

When a European notified body issues a CE certificate under Regulation (EU) 2017/745, the document must adhere strictly to the mandatory content specifications set forth in MDR Annex XII (Certificates issued by a notified body). ¹ Any certificate that omits these statutory fields or displays contradictory information represents an immediate audit failure.

Annex XII divides certificate requirements into two core chapters: Chapter I outlines general requirements (certificates must be in an official Union language, refer to a single conformity assessment procedure, and be issued to exactly one legal manufacturer matching the electronic registration system in Article 30), while Chapter II defines the minimum mandatory content points:

1. Notified Body Identification (Point 1): Full legal name, registered address, and official four-digit identification number assigned by the European Commission.
2. Legal Manufacturer Information (Point 2): Name and registered address of the legal manufacturer (and Authorized Representative / EC REP if the manufacturer is established outside the EU).
3. Unique Certificate Number (Point 3): A unique identification number assigned by the issuing notified body.
4. Single Registration Number - SRN (Point 4): The manufacturer's economic operator SRN issued through EUDAMED (if already obtained).
5. Issue & Expiry Dates (Points 5–6): Exact date of issue and date of expiry (expiry cannot exceed five years from issuance pursuant to MDR Article 56(2)).
6. Unambiguous Device Identification (Point 7): Clear identification of covered devices. For technical documentation, type-examination, and product verification certificates, this must include product name, model codes, risk classification, intended purpose, and the Basic UDI-DI. For QMS certificates, it includes device categories, risk classes, and intended purpose for Class IIb devices.
7. Conformity Assessment Route (Point 9): Explicit statutory reference to the Regulation and the conformity assessment procedure applied (e.g., Annex IX Chapter I & III for QMS and Technical Documentation, Annex X for Type Examination, or Annex XI Part A for Production Quality Assurance).
8. Conditions, Surveillance & Signature (Points 12, 14–15): Any surveillance arrangements, specific restrictions or limitations on validity (e.g., on patient population) imposed by the notified body, and the legally binding signature of the notified body.

The 'Voluntary Certificate' Trap: How Unregulated Certificates Masquerade as CE Marks

One of the most prevalent deceptive practices in international sourcing is the presentation of 'Voluntary Certificates' (often titled Certificate of Compliance, Attestation of CE Conformity, or Verification of Technical File) issued by commercial testing laboratories or consulting entities. ⁵

The European Commission explicitly warns: 'These practices are misleading, since only notified bodies may issue certificates of compliance for harmonised products and only in the area for which they are notified... Voluntary certificates must not be confused with third party conformity assessment certification by notified bodies.'— European Commission, Single Market Compliance Space (NANDO) Warning on Unregulated Certificates

These voluntary documents are often issued by organizations that assign themselves an arbitrary 4-digit internal code or mimic the layout of prominent European notified bodies. Under European law, a voluntary certificate issued by an unnotified testing body carries zero legal validity for placing medical devices on the EU market. If an importer or distributor distributes devices based on a voluntary certificate, the products are legally classified as non-compliant or counterfeit, exposing the distributor to immediate regulatory enforcement, mandatory product recalls, and severe statutory fines.

Certificate Number Formats: Why There Is No EU-Standard Regex

Procurement teams frequently ask whether an algorithm or regular expression (regex) can automatically validate an EU CE certificate number. The answer is an unequivocal no: there is no standardized EU certificate numbering syntax. Under MDR Article 56, each notified body establishes and maintains its own proprietary certificate numbering scheme.

Our comprehensive analysis of 3,651 MDR certificates in the EUDAMED public register (snapshot 25 July 2026) reveals wide structural variety across European notified bodies: ⁹

• 2026-MDR/TD-011/A: 3EC International a.s. (NB 2265, Slovakia) — year, MDR marker, certificate scope, serial and amendment-suffix scheme.
• Z-25-052-S-IX-E: Berlin Cert GmbH (NB 0633, Germany) — hyphenated internal sequence with annex indicator.
• MDR.2292-2025/0027: UDEM Uluslararasi Belgelendirme (NB 2292, Türkiye) — embeds its 4-digit NB number, approval year, and serial.
• M.2024.MDR.1044: UDEM Adriatic d.o.o. (NB 2696, Croatia) — prefix-year-MDR-serial format.
• HZ 1802909-1: TÜV Rheinland LGA Products GmbH (NB 0197, Germany) — classic two-letter prefix followed by a 7-digit root and version index.
• 0425-MDR-030113-00: ICIM S.P.A. (NB 0425, Italy) — NB number prefix, MDR designation, and 6-digit serial.
• 170783435: DQS Medizinprodukte GmbH (NB 0297, Germany) — purely numeric 9-digit corporate database identifier.
• 10000515641-PA-NoMA-IND: DNV Product Assurance AS (NB 2460, Norway) — 11-digit master root with regional branch and program qualifiers.

Because syntax varies completely by issuing body, attempting to validate a certificate by regex format alone is impossible. Validation requires verifying the certificate directly within the issuing body's scope in NANDO and querying its live status in EUDAMED.

How Do You Check the Four-Digit Notified-Body Number in NANDO — And Why Does MDR Designation Matter More Than Existing?

The single authoritative truth source for European notified bodies is the NANDO (New Approach Notified and Designated Organisations) information system, hosted within the European Commission's Single Market Compliance Space. ⁵

To verify an issuing body, distributors must execute a precise lookup protocol:

1. Navigate to the European Commission Single Market Compliance Space notified-body portal (webgate.ec.europa.eu/single-market-compliance-space/notified-bodies). ⁵
2. Filter the directory by Legislation: Regulation (EU) 2017/745 on medical devices. Do not search the generic notified body list without filtering by legislation. ⁶
3. Enter the four-digit identification number printed on your supplier's certificate (e.g., 0197, 0123, 1639, 2265).
4. Verify the body's legal corporate name, official country of establishment, and active designation status.
5. Open the body's detailed Designation Scope and verify that it is authorized for the specific designation codes applicable to your device (for example, MDN 1204 for non-active wound and skin-care devices, MDS 1005 for devices supplied in sterile condition, or MDS 1006 for reusable surgical instruments).

The critical audit trap is assuming that because an organization is an active notified body in NANDO, it is authorized to certify medical devices. NANDO contains 3,410 active notified body organization records across all EU directives (covering Personal Protective Equipment, Machinery, Radio Equipment, and Construction Products). An organization may be fully accredited for PPE (Regulation (EU) 2016/425) or Pressure Equipment (Directive 2014/68/EU), but possess zero designation under MDR Regulation (EU) 2017/745. A medical device certificate issued by a body lacking MDR designation is completely invalid.

Notified-Body Capacity and Concentration: Evidence from the Public Register

As of early 2026, approximately 52 notified bodies hold designation under Regulation (EU) 2017/745 across the EU and associated territories. ⁶ However, analysis of actual certificate issuance reveals extreme market concentration.

In our analysis of 3,651 MDR certificate records in the EUDAMED public register (snapshot 25 July 2026), certificates were distributed across only 47 distinct notified bodies. ⁹ The top two German notified bodies—TÜV Rheinland LGA Products GmbH (NB 0197, 543 records) and TÜV SÜD Product Service GmbH (NB 0123, 441 records)—account for 984 records, or 27.0% of all MDR-type records in the register snapshot.

This high concentration demonstrates that international distributors will frequently encounter certificates issued by a relatively compact group of ten to twelve dominant European notified bodies. Knowing the issuing body's exact country, corporate structure, and NANDO scope provides immediate context when reviewing supplier documentation.

MDR Certificate, Extended MDD Certificate or ISO 13485 Certificate — Which Document Proves What?

When qualifying an international device manufacturer, distributors often receive a compilation of ten to fifteen corporate credentials. Conflating quality management system certifications with product-specific pre-market marketing authorizations is a primary cause of customs seizures and tender disqualifications.

The Class I Self-Certification Exception: When No Notified-Body Certificate Is Expected

A critical nuance that causes widespread confusion among procurement teams is the Class I self-certification pathway. Under MDR Article 52(7), medical devices classified as Class I that are non-sterile, have no measuring function, and are not reusable surgical instruments (e.g., standard examination lights, manual hospital beds, non-sterile post-op protective underwear) undergo conformity assessment under the sole responsibility of the legal manufacturer.

For these standard Class I devices, no notified body is involved, and no CE certificate exists or can legally be issued. Demanding a 'CE Certificate' from a Class I manufacturer is an audit error. Instead, distributors must request and verify:

1. EU Declaration of Conformity (DoC): Issued and signed by the manufacturer pursuant to MDR Article 19 and Annex IV, explicitly stating conformity with Regulation (EU) 2017/745.
2. Product Labeling & CE Mark: CE marking affixed to the device packaging without any 4-digit notified body number (since no notified body was involved).
3. EUDAMED Actor & Device Registration: The manufacturer's Single Registration Number (SRN) and the device's Basic UDI-DI registered in the EUDAMED UDI/Devices module. (For complete guidance on UDI and actor registration, see our guide on UDI requirements for private-label and OEM devices in the US, EU and China).
4. Technical Documentation Summary: Verification that the manufacturer maintains a complete technical file compliant with MDR Annexes II and III.

However, if a Class I device is placed on the market in sterile condition (Class Is), with a measuring function (Class Im), or as a reusable surgical instrument (Class Ir), notified body involvement is mandatory under Article 52(7). In those cases, the notified body issues a certificate limited strictly to the aspects of manufacture concerned with securing and maintaining sterile conditions, metrological requirements, or reuse/reprocessing processes.

Why Can a Legitimately 'Expired' MDD Certificate Still Be Valid — And What Extension Evidence Must You Request?

The single greatest source of commercial friction in European medical trade between 2024 and 2028 is the 'expired certificate paradox'. A distributor receives a supplier's certificate issued under Council Directive 93/42/EEC (MDD) displaying a printed expiration date of 15 May 2024. The distributor's automated compliance software flags the document as expired and rejects the shipment.

In reality, that certificate may be 100% legally valid under European Union law. On 15 March 2023, the European Parliament and Council adopted Regulation (EU) 2023/607 (in force since 20 March 2023), amending MDR Article 120 to provide a statutory extension of validity for legacy MDD and AIMDD certificates. ²

The Statutory Conditions of Regulation (EU) 2023/607

Under amended MDR Article 120(2) and 120(3a), legacy MDD certificates that were still valid on 26 May 2021 and not withdrawn (for certificates issued before 25 May 2017), or still valid on 20 March 2023 (for certificates issued from 25 May 2017), remain legally valid beyond their printed expiration date up to the class-specific deadlines below. Certificates that expired before 20 March 2023 count as valid until the same deadlines only where the manufacturer had signed a written notified-body agreement before the certificate expired, or a Member State competent authority granted a derogation: ²

• 31 December 2027: For all Class III devices and Class IIb implantable devices (excluding well-established technologies such as sutures, staples, dental fillings, braces, tooth crowns, screws, plates, wires, pins, and clips).
• 31 December 2028: For other Class IIb devices, all Class IIa devices (including circumcision devices, wound adhesives, and medical laser fibers), and Class I devices placed on the market in sterile condition or with a measuring function.

However, this extension is not automatic or unconditional. Under amended Article 120(3c), the manufacturer must satisfy strict statutory conditions:

1. Continued Directive Compliance: The device must continue to comply with Directive 93/42/EEC.
2. No Significant Changes (MDCG 2020-3): There are no significant changes in the device design or intended clinical purpose.
3. No Unacceptable Safety Risk: The device does not present an unacceptable risk to the health or safety of patients or users.
4. The Two 2024 Milestone Deadlines: (a) No later than 26 May 2024, the manufacturer established an MDR-compliant Quality Management System; (b) No later than 26 May 2024, the manufacturer lodged a formal application for MDR conformity assessment with an MDR-designated notified body; and (c) No later than 26 September 2024, the notified body and manufacturer signed a binding written agreement pursuant to MDR Annex VII Section 4.3. ²

To rely on an expired-looking MDD certificate, distributors must demand and inspect the complete Regulation (EU) 2023/607 Extension Evidence Pack:

1. 1. Manufacturer Self-Declaration: A formal self-declaration signed by executive management, confirming compliance with all Article 120(3c) conditions and identifying the covered legacy devices and Basic UDI-DIs.
2. 2. Notified Body Confirmation Letter: An official, signed confirmation letter from an MDR-designated notified body confirming that the manufacturer lodged a formal MDR application by 26 May 2024 and executed a signed written agreement under Annex VII Section 4.3 by 26 September 2024.
3. 3. Original Unrevoked MDD Certificate: The original MDD certificate issued prior to 26 May 2021 that was not withdrawn or cancelled by the issuing body.

If a supplier presents an expired MDD certificate but cannot provide the Notified Body Confirmation Letter proving a signed written agreement by September 2024, the certificate is dead, and the devices cannot be legally imported into the European Union.

Removal of the Sell-Off Limit: Can You Distribute Stock After the Manufacturer Transitions?

A major commercial breakthrough in Regulation (EU) 2023/607 was the complete deletion of the 'sell-off' date in MDR Article 120(4). Under the original MDR text, devices placed on the market under the MDD had to be sold to end-users within one year of the transition end date.

Amended MDR Article 120(4) explicitly provides: 'Devices lawfully placed on the market pursuant to Directives 90/385/EEC and 93/42/EEC prior to 26 May 2021, and devices lawfully placed on the market from 26 May 2021 pursuant to paragraphs 3, 3a, 3b and 3f of this Article, may continue to be made available on the market or put into service.'— Regulation (EU) 2023/607, Article 1(1)(d), amending MDR Article 120(4)

This means there is no time limit on distributing or utilizing inventory that was lawfully placed on the market (i.e., transferred from manufacturer to distributor or imported into the EU) prior to the expiration of the transition period. Distributors may continue selling lawfully imported inventory until the product's sterile shelf life expires.

Legislative Watch: Proposal COM(2025) 1023 and the Future of Five-Year Expiry Rules

In December 2025, the European Commission published legislative proposal COM(2025) 1023 aimed at targeted simplification of the MDR and IVDR frameworks. ¹⁰ Among its headline provisions, the proposal recommends eliminating the rigid 5-year maximum certificate validity rule, allowing MDR certificates to remain valid indefinitely subject to ongoing surveillance audits, unless a notified body establishes a specific time limit for justified safety reasons.

Crucial Compliance Caveat: As of August 2026, COM(2025) 1023 remains under formal examination by the European Parliament and Council and is NOT yet law. ¹² Distributors must continue auditing certificates under current MDR law (the 5-year validity cap in Article 56(2) and the strict 2027/2028 deadlines of Regulation (EU) 2023/607). Conflating proposed future legislation with active statutory rules is a critical compliance hazard.

How to Use the EUDAMED Certificate Register: Status Vocabulary, Suspensions, and Stock You Already Hold

Under MDR Article 56(5), notified bodies are legally mandated to enter all information regarding issued, supplemented, amended, suspended, reinstated, and withdrawn certificates into the European database on medical devices (EUDAMED). ¹

The May 2026 Mandatory Module vs. May 2027 Pre-Existing Upload Deadline

Following the adoption of Commission Decision (EU) 2025/2371, use of the first four EUDAMED modules—Actor Registration, UDI/Device Registration, Notified Bodies & Certificates, and Market Surveillance—became statutorily mandatory on 28 May 2026. ³

However, distributors must understand a vital transitional rule: under the statutory transition schedule confirmed by national authorities (such as the HPRA notice of 23 March 2026), notified bodies have an 18-month grace period—until 28 May 2027—to upload pre-existing MDR/IVDR certificates issued prior to 28 May 2026. ⁴

This creates two fundamental verification principles:

• Absence is Weak Evidence (Before May 2027): If an MDR certificate issued in 2024 or 2025 does not appear in EUDAMED today, it is not necessarily invalid; the notified body may still be within its 18-month historical upload window.
• Presence with Adverse Status is Conclusive: If a certificate appears in EUDAMED with a status of Suspended, Restricted, or Withdrawn, that record is legally binding and instantaneous across the entire European Union.

Furthermore, the EUDAMED Notified Bodies & Certificates module contains zero legacy MDD certificates (confirmed across all 3,937 records in our July 2026 snapshot). Searching EUDAMED for an MDD certificate is methodologically incorrect and returns no results; legacy MDD validity is proven solely through the physical 2023/607 Extension Evidence Pack.

Decoding Register Status Codes: What Suspended, Restricted, and Withdrawn Mean in Practice

When querying a certificate in the public EUDAMED search engine (ec.europa.eu/tools/eudamed/), the register assigns each certificate a standardized status code: ⁷, ⁸

• Issued / Reissued: Certificate is active and valid.
• Supplemented / Amended: Certificate has been updated with scope additions, manufacturing site changes, or design revisions. Distributors must verify they hold the matching supplement document.
• Reinstated: A previously suspended certificate has been officially restored following successful completion of corrective actions.
• Restricted: The notified body has imposed statutory limitations (e.g., removing specific product models, excluding certain high-risk patient populations, or requiring enhanced post-market clinical follow-up).
• Suspended: The certificate is temporarily invalidated while major non-conformities identified during surveillance or unannounced audits are addressed. No new devices may be placed on the market during suspension.
• Withdrawn / Cancelled / Refused: The certificate is permanently terminated. Marketing authorization is extinguished.

In our snapshot census of 3,651 MDR certificates (25 July 2026), 161 certificates (4.4%) carried adverse statuses: 73 withdrawn, 52 cancelled, 23 restricted, and 13 suspended. ⁹ The 13 suspended certificates include real-world medical device manufacturers across orthopedics, surgical consumables, and ophthalmic devices (such as easee b.v. under NB 0197, Perflow Medical under NB 0297, and Protex Healthcare under NB 2696). If a buyer reviewed only the supplier's initial PDF, these suspensions would remain completely invisible.

As shown in the chart above, there is no single 'MDR expiration cliff'. Expiration dates spread smoothly across 2026 to 2031, reflecting standard 5-year issuance cycles (the 33 live-status records still carrying 2024–2025 dates are a register-hygiene reminder that status codes and printed dates do not always agree). The binding legal cliff in European medical trade is not MDR expiry, but rather the hard 31 December 2027 and 31 December 2028 deadlines governing the legacy MDD transition.

Action Plan for Distributors: What to Do If a Supplier's Certificate Is Suspended

If your quarterly EUDAMED audit reveals that an active supplier's CE certificate has been suspended or withdrawn, distributors must execute an immediate 4-step quarantine protocol:

1. 1. Immediate Commercial Freeze: Halt all incoming purchase orders and customs clearances. No device manufactured or shipped after the suspension date can be legally placed on the EU market.
2. 2. Warehouse Inventory Audit: Segregate on-hand inventory. Determine exact manufacturing dates and import customs release dates for every lot. Devices placed on the market prior to the suspension date remain legally merchantable unless the competent authority issues an explicit recall.
3. 3. Contact the Legal Manufacturer & Authorized Representative: Demand written clarification regarding the root cause of the suspension (e.g., QMS audit non-conformity vs. clinical safety issue) and the formal Corrective and Preventive Action (CAPA) timeline submitted to the notified body.
4. 4. Activate Contractual Stock Buyback Remedies: If the suspension is not resolved within 60 days, trigger contractual termination and inventory repurchase clauses.

Red-Flag Decision Matrix: Immediate Deal-Breakers vs. Clarification Items

Not every documentation discrepancy justifies abandoning a supplier relationship. Distributors must distinguish fatal regulatory violations from resolvable administrative gaps.

What CE-Certificate Evidence and Re-Verification Terms Belong in a Distribution Agreement?

Under MDR Article 13 and Article 14, distributors and importers share statutory post-market compliance obligations with manufacturers. ¹ Transforming regulatory verification into enforceable commercial protection requires embedding specific regulatory schedules into your Master Distribution Agreement.

Statutory Verification and Record-Keeping Duties under MDR Articles 13 and 14

European legislation establishes clear legal liability across the distribution chain:

• Distributor Verification Duty (Article 14(2)): Before making a device available on the market, distributors shall verify that the device bears the CE marking, that the EU declaration of conformity has been drawn up, and that the manufacturer and importer comply with UDI labeling rules. If a distributor believes a device presents a serious risk or is a falsified device, it must immediately inform the competent authority. ¹
• Importer Record Retention Duty (Article 13(9)): Importers must keep a copy of the EU declaration of conformity and, if applicable, any relevant certificate including all amendments and supplements at the disposal of competent authorities for at least 10 years (15 years for implantable devices) after the last device has been placed on the market. ¹

Essential Contractual Covenants and Re-Verification Triggers

To fulfill these statutory duties and protect your business against supplier regulatory default, incorporate four mandatory covenants into your supply contract:

1. 1. Mandatory 8-Month Renewal & Transition Milestone Covenant: For MDR certificates, the supplier warrants it will submit recertification dossiers at least eight (8) months prior to expiration. For legacy MDD products, the supplier covenants that it has satisfied all Regulation (EU) 2023/607 milestones and will provide quarterly audits of its MDR technical documentation review progress.
2. 2. 48-Hour Regulatory Event & Status Change Alert: The supplier must provide written notification within forty-eight (48) hours of any notified body surveillance audit findings, suspension notices, restriction orders, certificate withdrawals, or competent authority warning letters.
3. 3. Complete Dossier & Supplement Delivery Obligation: The supplier must deliver authenticated copies of all official amendment sheets and supplements, revised Declarations of Conformity, and updated EUDAMED registration records within ten (10) business days of issuance.
4. 4. Regulatory Failure Termination & Inventory Buyback Remedy: If the supplier fails to maintain valid CE certification or suffers certificate suspension exceeding sixty (60) days, the distributor shall have the immediate right to terminate the contract, receive a full refund of tooling/deposits, and require the supplier to repurchase all unsold inventory at landed cost.

Where VEMERIX fits — and where due diligence still begins

VEMERIX is the international brand of Weihai Medison Medical Equipment Co., Ltd., positioned as a Minimally Invasive Surgery Total Solution Platform serving urology, vascular surgery and perioperative care.

Our core urology platform—including the CE-marked Auto-Circumcision Ring (Lu Mech Reg. 20172020238)—is manufactured in ISO 13485:2016 audited cleanroom facilities and supported by fully queryable regulatory dossiers. (For a dedicated evaluation of circumcision supplier qualification and QMS scopes, see our CE certificate versus ISO 13485 certificate for circumcision device programs, and for the domestic Chinese regulatory counterpart, see our guide on how to verify a Chinese supplier's NMPA registration certificate).

We maintain absolute transparency across our entire product portfolio: each product line maintains its exact, documented regulatory classification and market authorization. For partners exploring international market access across our vascular, urology, and procedure kit lines (detailed in our guides on registering and distributing disposable circumcision devices in the US, EU and China, registering a single-use endovenous laser fiber in the US, EU and China, and how sterile procedure kits are regulated under FDA and EU MDR rules), our regulatory affairs team provides complete Technical Documentation packs, EU Declarations of Conformity, and sterilization validation reports on demand.

We encourage distributors and OEM procurement teams to audit our regulatory credentials, request documentation packs via vemerix.com/downloads, or contact our international regulatory team directly at vemerix.com/contact.

Frequently Asked Questions

Is there a standard EU CE certificate number format I can validate with software?

No. Under Regulation (EU) 2017/745, there is no standardized European certificate numbering syntax. Each designated notified body defines its own internal numbering structure (e.g., TÜV Rheinland uses HZ 1802909-1, UDEM uses MDR.2292-2025/0027, and DQS uses numeric 170783435). Software cannot validate a certificate by regex alone; validation requires checking the issuing body in NANDO and querying live status in EUDAMED.

My supplier's MDD certificate shows an expiry date that has already passed — can it still be valid?

Yes, provided the manufacturer satisfies the statutory conditions of Regulation (EU) 2023/607. Under amended MDR Article 120, legacy MDD certificates are extended to 31 December 2027 (Class III and IIb implantables) or 31 December 2028 (other Class IIb, IIa, and sterile/measuring Class I), provided the manufacturer lodged an MDR application by 26 May 2024, signed a written agreement with a notified body by 26 September 2024, and made no significant design changes.

The certificate is not found in EUDAMED — is it fake?

Not necessarily. While the EUDAMED Notified Bodies & Certificates module became mandatory on 28 May 2026, notified bodies have an 18-month transitional grace period (until 28 May 2027) to upload historical certificates issued prior to the mandatory date. Furthermore, legacy MDD certificates never appear in EUDAMED. However, if an MDR certificate does appear in EUDAMED with an adverse status (Suspended or Withdrawn), that status is legally conclusive.

The device is Class I self-certified with no notified-body certificate — what should I check instead?

For non-sterile, non-measuring, non-reusable Class I medical devices, no notified body is involved and no certificate exists under MDR Article 52(7). Distributors must instead verify: (1) the manufacturer's EU Declaration of Conformity (DoC) drawn up under Article 19; (2) CE marking affixed to packaging; (3) EUDAMED Actor (SRN) and Device (Basic UDI-DI) registration; and (4) the summary of technical documentation.

Who is legally responsible for verifying CE documentation: the manufacturer, the importer or the distributor?

All economic operators share statutory legal responsibilities under MDR. The manufacturer is responsible for device conformity (Article 10); the importer is mandated to verify CE marking, DoC, and device registration, and must retain copies of certificates and amendments for at least 10 years (Article 13); and the distributor must verify CE marking and DoC before making devices available on the market (Article 14). If a distributor suspects a device is falsified, it has a statutory obligation to inform the competent authority.

Will the EU's December 2025 proposal change certificate validity rules?

Proposal COM(2025) 1023, published on 16 December 2025, recommends eliminating the fixed 5-year maximum certificate validity in favor of indefinite validity subject to ongoing surveillance audits. However, as of August 2026, this proposal is still under examination by the European Parliament and Council and is NOT yet law. Current MDR rules (5-year maximum validity and 2023/607 transition deadlines) remain strictly in force.