Your CER passed internal review. The auditor disagreed.
I have seen this pattern more times than I care to count. A clinical evaluation report clears every internal checkpoint, receives approval from your consultant, passes the technical review, and then the Notified Body auditor opens the file. Within the first hour, questions emerge that no one anticipated. The audit timeline stretches. Deficiencies pile up. Everyone wonders how this happened.
In This Article
The problem is not that your team missed something obvious. The problem is that internal review and Notified Body audit operate with different eyes, different priorities, and different tolerances for ambiguity.
When you prepare clinical documentation for your own review, you know the device. You know the development history. You know why certain decisions were made. The auditor knows none of this. They see only what is written, and they read it through the lens of MDR Article 61 and Annex XIV compliance, not through the lens of your internal logic.
Most manufacturers prepare for the audit by checking boxes. They verify that all required sections exist. They confirm that the CER is signed. They ensure the references are listed. But a Notified Body audit is not a completeness check. It is a coherence assessment. The auditor wants to see whether your clinical evaluation stands on its own as a defensible argument, independent of any prior knowledge about your device.
This is where most clinical documentation fails.
What the Auditor Reads First
The auditor does not read your CER from page one to the last page in order. They scan strategically. They look for structural signals that reveal whether the document was built with regulatory logic or assembled from templates.
The first place they go is the scope of the clinical evaluation and the device description. If these two sections are vague, inconsistent, or copied from the IFU without adaptation, the auditor already knows the rest of the document will require scrutiny. The scope sets the boundaries of what you are claiming. The device description defines what you are evaluating. If either is unclear, the entire evaluation becomes unreliable.
Then they check the clinical claims. Not the marketing claims. Not the performance claims. The clinical safety and performance claims that the CER is supposed to support. Many CERs list claims that are either too broad, too narrow, or misaligned with the intended purpose. If your clinical claim says the device improves outcomes but your literature search focused only on safety, the auditor will flag the mismatch.
Next, they review the equivalence demonstration if you are relying on equivalence under MDR Article 61(5) and MDCG 2020-5. This is where most audits stall. Equivalence is not similarity. It is a strict technical, biological, and clinical demonstration that another device can serve as a valid basis for your clinical evaluation. If your equivalence table lists minor differences as acceptable without justification, the auditor will reject the pathway. If the equivalent device is not clearly CE-marked under MDR, the pathway collapses.
Equivalence claims that rely on “similar materials” or “similar design” without demonstrating equivalent clinical performance data. The auditor does not accept assumptions. They require evidence that the equivalent device produces the same clinical outcomes in the same population under the same conditions.
After equivalence, they examine the literature review methodology. They do not read every study you included. They check whether your search strategy was systematic, whether your inclusion and exclusion criteria were justified, and whether your appraisal process was transparent. If your literature search returned two thousand articles and you included twelve without explaining why the others were excluded, the auditor will question the validity of your entire dataset.
The Questions That Stop the Audit
Certain questions appear in nearly every Notified Body audit. These are not random. They reflect the gaps that auditors see repeatedly across manufacturers.
One of the most common questions is: “How do you know the clinical data you presented is applicable to your device?” This question targets the bridge between the literature and your specific design. If your device is used in outpatient settings and all your supporting studies were conducted in hospital environments, the auditor will challenge the relevance. If your device has a different size, coating, or delivery mechanism than the devices in the studies, you must explain why the clinical conclusions still apply.
Another frequent question is: “Where is the evidence that your benefit-risk profile is acceptable for the intended population?” Many CERs describe benefits and risks separately but never integrate them into a comparative analysis. The auditor expects to see a structured benefit-risk determination that weighs the magnitude of benefit against the severity and probability of harm, specific to your intended users.
A third question that surfaces often is: “How does your PMCF plan address the gaps identified in the clinical evaluation?” If your CER acknowledges limited long-term data but your PMCF plan only tracks complaints, the auditor will see a disconnect. The PMCF plan must actively generate the data you currently lack, not passively monitor what you already measure.
The auditor views the CER, PMCF plan, and risk management file as a single system. If the CER identifies uncertainty, the PMCF must resolve it. If the PMCF generates data, the risk management file must integrate it. A gap in one document creates deficiencies in all three.
What Preparation Actually Means
Preparing for a Notified Body audit is not about making your CER longer. It is about making it defendable.
Start by reading your own clinical evaluation as if you have never seen the device before. Can you follow the reasoning without needing additional context? Does each conclusion follow logically from the evidence presented in the section before it? If you find yourself mentally filling gaps with knowledge that is not written down, the auditor will find those gaps too.
Then review your equivalence demonstration if applicable. Check every claim of equivalence against MDCG 2020-5 Rev.1. Confirm that the equivalent device is clearly identified, that its clinical data is accessible, and that the technical and biological comparison is exhaustive. If you cannot prove equivalence in every dimension listed in the guidance, you cannot claim equivalence.
Next, validate your literature search. Run the search again with the same terms and compare the results. If new studies appear that were not in your original review, you need to explain why. Check whether your appraisal criteria were applied consistently. If one study was excluded for lack of follow-up data and another with similar limitations was included, the auditor will notice the inconsistency.
Review your clinical claims line by line. For each claim, trace it back to the supporting evidence. If a claim says the device reduces infection risk, identify which studies demonstrate that outcome. If none do, the claim cannot stand.
Finally, cross-check your PMCF plan against the uncertainties in your CER. Every residual risk, every data gap, and every extrapolation should have a corresponding activity in the PMCF plan. The plan is not a wish list. It is a structured response to what you do not yet know.
The Audit Is Not a Test You Pass
Many teams treat the Notified Body audit as a final exam. They prepare intensively, submit the documentation, and hope for approval. But the audit is not a pass-fail event. It is a structured dialogue between your clinical evaluation and the regulatory framework.
The auditor is not looking for perfection. They are looking for coherence, traceability, and evidence of sound judgment. If your CER acknowledges limitations, explains them clearly, and proposes proportionate mitigation through PMCF or risk controls, the auditor will accept that approach. But if your CER avoids acknowledging gaps, overstates the strength of weak evidence, or makes clinical claims that are not supported by data, the auditor will issue deficiencies regardless of how polished the document appears.
Deficiencies are not failures. They are corrections. The auditor is telling you where your reasoning does not meet the standard. The faster you understand their perspective, the faster you can align your documentation with what MDR Article 61 and Annex XIV require.
The most efficient way to prepare for an audit is to audit yourself using the same criteria the Notified Body will apply. Read the guidance documents. Apply them strictly. If you find weaknesses in your own documentation, address them before submission. Most audit delays come from preventable gaps that internal review overlooks because it was too lenient.
What Happens After the First Round
If the auditor issues deficiencies, your response must be direct and complete. Do not restate what is already in the CER. Do not argue about the interpretation of the regulation. Address the deficiency with additional evidence, clarification, or revision.
If the auditor questions the applicability of a study, provide a detailed justification of why the study population, intervention, and outcomes are relevant to your device. If the auditor challenges your equivalence claim, either strengthen the demonstration with additional data or withdraw the equivalence pathway and pivot to another approach.
The second round of review is faster if your responses are precise. If your responses are vague, incomplete, or defensive, the audit cycle extends. I have seen audits that closed in one round and audits that required five rounds, and the difference was never the complexity of the device. It was the quality of the responses.
The goal is not to win an argument. The goal is to demonstrate that your clinical evaluation meets the requirements of MDR Annex XIV in a way that the auditor can verify independently.
Before You Submit
Before you submit your clinical documentation to the Notified Body, ask yourself one question: If the auditor asked me to defend any single sentence in this CER, could I do it without hesitation?
If the answer is no, the documentation is not ready.
The audit will reveal every assumption you treated as fact, every gap you papered over with vague language, and every claim you made without evidence. The only way to prepare is to find those weaknesses yourself first.
The Notified Body is not your adversary. They are the final check that ensures your clinical evaluation is solid enough to support the safety and performance of your device in the hands of real patients. If your documentation cannot withstand that check, it should not pass.
– Regulation (EU) 2017/745 (MDR), Article 61, Annex XIV
– MDCG 2020-5 Rev.1: Clinical Evaluation – Equivalence
– MDCG 2020-13: Clinical Evaluation Assessment Report Template
Peace,
Hatem
Clinical Evaluation Expert for Medical Devices
Follow me for more insights and practical advice.
Frequently Asked Questions
What is a Clinical Evaluation Report (CER)?
A CER is a mandatory document under MDR 2017/745 that demonstrates the safety and performance of a medical device through systematic analysis of clinical data. It must be updated throughout the device lifecycle based on PMCF findings.
How often should the CER be updated?
The CER should be updated whenever significant new clinical data becomes available, after PMCF activities, when there are changes to the device or intended purpose, and at minimum during annual reviews as part of post-market surveillance.
What causes CER rejection by Notified Bodies?
Common reasons include inadequate equivalence demonstration, insufficient clinical data for claims, poorly structured SOTA analysis, missing gap analysis, and lack of clear benefit-risk determination. Structure and logical flow are as important as the data itself.
Which MDCG guidance documents are most relevant for clinical evaluation?
Key documents include MDCG 2020-5 (Equivalence), MDCG 2020-6 (Sufficient Clinical Evidence), MDCG 2020-13 (CEAR Template), MDCG 2020-7 (PMCF Plan), and MDCG 2020-8 (PMCF Evaluation Report).
Need Expert Help with Your Clinical Evaluation?
Get personalized guidance on MDR compliance, CER writing, and Notified Body preparation.
✌
Peace, Hatem
Your Clinical Evaluation Partner
Follow me for more insights and practical advice.
