Medical device regulatory monitoring software: how to choose

Choosing regulatory monitoring software for medical devices comes down to three questions: which sources it reads, how it sorts what it finds for your devices, and what record it leaves for the audit. This guide sets out the five families of solutions, the eight criteria to check before signing and the choice that suits each profile.

What the regulation requires from monitoring

No text requires software. The texts require monitoring, and that is what the auditor checks.

• The MDR, Article 10(9): "Changes in device design or characteristics and changes in the harmonised standards or CS by reference to which the conformity of a device is declared shall be adequately taken into account in a timely manner." The same paragraph requires the quality management system to address "a strategy for regulatory compliance".
• The IVDR, Article 10(8), sets the same requirement for in vitro diagnostic devices.
• ISO 13485 requires the applicable regulatory requirements to be determined for each product and documented.

A tool is only worth something if it helps produce that evidence: what was monitored, when, what was concluded, and what action followed. The guide on monitoring evidence in an ISO 13485 audit details what the auditor expects.

The five families of solutions

1. Official sources followed by hand

Newsletters and feeds from authorities (EUR-Lex, European Commission, ANSM, FDA…), followed by one person who keeps a log in a spreadsheet. It is free and fully under your control. The limits are reading time, the risk of missing something when that person is away, and the evidence you have to build yourself. This approach suits one device sold on one market.

2. Monitoring services from consulting firms

A consultant reads the publications and delivers a periodic summary, often monthly or quarterly, with an impact analysis. Human analysis is the strength. The limits are the pace of the deliverable, which leaves weeks between a publication and its reading, and a cost that grows with the scope.

3. Automated SaaS monitoring platforms

The platform collects sources continuously, sorts publications by the declared scope, sends alerts and keeps an exportable log. They bring speed, coverage of many countries and traceability. The quality of the sorting has to be checked, and the final decision remains human. MedQara belongs to this family.

4. Monitoring modules of quality software

Some quality management software includes monitoring linked to documents and corrective actions. Integration is their strength. Check the coverage of medical-device-specific sources: MDCG guidance, decisions publishing harmonised standards, authorities of export markets.

5. International RIM suites

Designed for groups that register products in many countries, they manage files, submissions and certificates, with a regulatory intelligence module. They require a deployment project and are most often sold on quotation.

Family	Best suited to	Watch point
Official sources followed by hand	One device, one market	Reading time, evidence to build
Consulting firm monitoring service	Need for expert analysis	Delay between publication and deliverable
Automated SaaS platform	Several devices or markets	Sorting quality to check
Quality software module	Quality system already tooled	Coverage of medical device sources
International RIM suite	Multi-country group	Deployment project, price on quotation

The eight criteria to check

1. Filtering on your scope

The software must sort by your devices, their class, their family, the standards their conformity relies on and the markets where they are sold. One feed for every customer leaves all the sorting to you.

2. Official sources and the direct link

Every alert must link to the authority's text, not to a press article summarising it. Ask for the list of sources and the share of official authorities. Be wary of a supplier that does not publish it.

3. Collection frequency

How much time passes between the publication of a text and its arrival in the tool? The answer must be a number: daily collection is not worth the same as a monthly deliverable when a safety notice concerns your products.

4. Standards tracking

A revised standard, or a draft put to public enquiry, changes the state of the art even before publication. The tool must follow the ISO and IEC standards of your devices and the decisions publishing harmonised standards references in the Official Journal of the EU. The guide on MDR and IVDR harmonised standards explains why.

5. Coverage of markets and languages

If you sell outside the EU, the authorities of those markets (FDA, MHRA, Swissmedic, Health Canada…) must be followed, and their texts translated without losing the link to the original version.

6. Impact analysis and actions

The tool must let you conclude: concerned or not, which device, what action, who owns it. A list of alerts you cannot qualify is reading, not monitoring.

7. Exportable evidence for the audit

A time-stamped log, exportable as PDF or spreadsheet, linking each text to its analysis and its decision. This is the document you will show the ISO 13485 auditor or the notified body.

8. The use of artificial intelligence

AI summaries save time if they are checked against the source text and always link to the official text. A summary without a source, or a regulatory deadline that no text sets, should raise a flag.

Price, trial and commitment

Ask whether prices are public or on quotation, whether a trial on your own devices is possible, and how the subscription is cancelled. For a consultant or an outsourced PRRC following several clients, check that one account handles a separate scope per client.

Which solution for which profile

• SME with one or two devices, European market: official sources followed by hand, or an entry-level SaaS platform. The main issue is evidence.
• Manufacturer on several markets: a SaaS platform that covers export authorities, with impact analysis per device.
• Outsourced PRRC or consultant: a multi-client tool, with one scope and one log per client.
• Multi-site group: a RIM suite for registrations, complemented by a monitoring platform or the module of its quality software.
• Healthcare facility: monitoring focused on materiovigilance, safety notices and recalls for the devices in the fleet.

Where MedQara fits

MedQara is an automated SaaS monitoring platform dedicated to medical devices. It monitors 64 sources, including 49 official authorities and institutions, collects them every 6 hours, links to every official text, filters on your scope and produces time-stamped monitoring evidence in PDF and Excel. Its pricing is public, with a free account.

MedQara does not manage submissions, country-by-country registrations or certificates, and does not replace your quality management system. Our comparison page follows the criteria of this guide, and the about page says who publishes the platform and how the monitoring is produced.