AI/ML Regulatory Support for Medical Devices & IVD
The Dual Compliance Challenge for AI/ML Medical Devices
The Dual Compliance Challenge for AI/ML Medical Devices
AI and machine learning are redefining what medical devices can do, but the regulatory burden that comes with them is uniquely complex. Manufacturers entering the EU market face a dual compliance challenge: meeting existing obligations under EU MDR and IVDR, while simultaneously preparing for the requirements the EU AI Act introduces for high-risk AI systems.
That means robust processes for design and development, data governance, risk management, human oversight, and transparency, running across the entire device life cycle from pre-market development to post-market monitoring. Getting this right from the start accelerates market entry rather than slowing it down.
We've supported more than 20 AI/ML-enabled device manufacturers through this complexity, from GMLP implementation and QMS adaptation to EU AI Act readiness and technical documentation for Notified Body submissions. We treat these as one compliance architecture, not separate workstreams, so regulatory readiness evolves in step with your product instead of trailing behind it.
How Qserve can help
Training on MDR/IVDR/AI Act expectations on AI/ML-enabled devices
Gain knowledge, from our practical experience, on MDR/IVDR/AIA expectations on manufacturers intending to put AI/ML-enabled devices on the European market.
AI-focused GAP assessment: MDR/IVDR, Good Machine Learning Practices and EU AI Act
We perform gap assessments to assist you in identifying compliance GAPs and developing mitigation strategies and actions.
Clinical Evaluation support for MDR/IVDR
We can support designing and executing clinical/performance evaluation tailored for AI/ML-enabled medical devices for MDR/IVDR compliance.
AI Technical Documentation support for MDR/IVDR and EU AI Act compliance
Expert support in preparing and structuring AI/ML-specific technical documentation in compliance with the requirements from EU MDR/IVDR and AI Act, incorporating GMLP considerations.
Regulatory Strategy Support on EU AI Act for manufacturers with existing AI/ML-enabled devices on the market
Strategic regulatory guidance helps manufacturers of AI/ML-enabled medical devices already on the EU market assess their obligations under the EU AI Act and define a structured, risk-based compliance roadmap ahead of applicable transition deadlines.
Training on AI/ML impact on QMS processes
Targeted training for quality and regulatory teams on the practical implications of AI/ML-enabled devices for QMS processes, covering required adaptations under ISO 13485, EU MDR/IVDR, AI Act, and GMLP across design controls, risk management, data governance, clinical/performance evaluation, and post-market surveillance.
Why Manufacturers Choose Qserve for AI/ML Compliance
1. Dual-framework expertise: one of a small number of consultancies with hands-on expertise spanning EU MDR/IVDR and the EU AI Act, so you don't need separate partners to cover the full compliance picture.
2. Proven track record: practical experience supporting more than 20 AI/ML-enabled device manufacturers across the EU and US, across device types and risk classifications.
3. Integrated compliance architecture: one framework across MDR/IVDR and the AI Act, rather than AI Act requirements bolted onto an existing process.
4. Navigating regulatory uncertainty: close familiarity with evolving guidance supports defensible compliance decisions today, even where the frameworks themselves are still moving.
5. time-to-market as a strategic outcome: regulatory readiness that evolves alongside your product, so compliance becomes a competitive advantage rather than a bottleneck.
Why Manufacturers Choose Qserve for AI/ML Compliance
1. Dual-framework expertise: one of a small number of consultancies with hands-on expertise spanning EU MDR/IVDR and the EU AI Act, so you don't need separate partners to cover the full compliance picture.
2. Proven track record: practical experience supporting more than 20 AI/ML-enabled device manufacturers across the EU and US, across device types and risk classifications.
3. Integrated compliance architecture: one framework across MDR/IVDR and the AI Act, rather than AI Act requirements bolted onto an existing process.
4. Navigating regulatory uncertainty: close familiarity with evolving guidance supports defensible compliance decisions today, even where the frameworks themselves are still moving.
5. time-to-market as a strategic outcome: regulatory readiness that evolves alongside your product, so compliance becomes a competitive advantage rather than a bottleneck.
What Happens Without a Proactive AI Compliance Strategy
What Happens Without a Proactive AI Compliance Strategy
Rework, audit findings, or delayed market entry follow when MDR, IVDR, and AI Act requirements converge unexpectedly. A quality system and AI processes that were never integrated compound that risk rather than containing it.
Our approach builds AI/ML requirements into your QMS from the start, aligning design documentation, performance evidence, and lifecycle management with both medical device and AI-specific rules, so your device stays inspection-ready as it scales.
Couldn't find your question?
Are AI-enabled medical devices automatically classified as high-risk under the EU AI Act?
An AI system counts as high-risk under the EU AI Act when it is a safety component of, or is itself, a medical device or IVD that requires notified body review under MDR or IVDR. Devices that are self-certified without a notified body generally fall outside this route and aren't automatically high-risk.
Do AI/ML-enabled devices need two separate conformity assessments, one for the AI Act, one for MDR/IVDR?
No. For medical devices, the AI Act allows its high-risk conformity assessment to be folded into the existing MDR or IVDR notified body procedure rather than run as a standalone AI Act assessment, provided the AI-specific requirements sit inside the same QMS and technical file the notified body already reviews.
What is GMLP (Good Machine Learning Practice), and why does our documentation need to reference it?
Good Machine Learning Practice (GMLP) is a set of guiding principles covering data quality, model design, performance monitoring and human factors across the AI/ML device lifecycle. Notified bodies increasingly expect GMLP referenced explicitly in your QMS and technical file, not just implied by good practice.
We already have a CE-marked device on the market that uses AI or ML. What do we need to do under the EU AI Act?
Existing on-market AI/ML devices aren't exempt because they predate the Act. They need a gap assessment against AI Act obligations, updates to the QMS and technical documentation to close what's missing, and a compliance roadmap sequenced against the applicable transition deadline for product-embedded high-risk AI.
Do you support US FDA AI/ML requirements as well as the EU AI Act?
Yes. Manufacturers taking an AI/ML-enabled device to both markets get one coordinated strategy covering EU MDR/IVDR and AI Act obligations alongside FDA's AI/ML framework rather than two disconnected compliance efforts running in parallel.
How long does an AI/ML regulatory gap assessment take?
Timeline depends on device complexity and how mature your QMS already is. A focused gap assessment against MDR/IVDR, GMLP and the EU AI Act for a single device is typically a matter of weeks; a multi-device portfolio, or a technical file that needs rebuilding rather than amending, takes longer. Exact scope and timeline are confirmed on an initial call.
Relevant Blogs
.png)
ISO 13485 doesn't cover AI-specific risks. See why medical device and IVD manufacturers need a dedicated AI audit to meet EU AI Act and Notified Body expectations.
Artificial intelligence is becoming an increasingly visible part of healthcare. Should you start with go-to market in the EU or the US?
.png)
Since ChatGPT’s debut in November 2022, large language models (LLMs) have demonstrated enormous transformative power in various industries, including healthcare and medical devices.