EU MDR 2017/745 Content on Your Website Is a Trust Signal, Not Fluff — What Galway Medtech Suppliers Must Publish to Survive Category-Manager Due Diligence

This article is a working reference for the marketing director, RA/QA lead or founder-operator of a Galway medtech company — indigenous device maker, contract manufacturer, regulatory consultancy, cleanroom services provider — trying to decide what regulatory content to publish on the company website, and how to publish it accurately.

Nothing here is invented. The regulations, notified bodies and public registers referenced are the real 2026 European and US medtech regulatory landscape.

**Why generic 'we're MDR-compliant' claims fail category-manager due diligence**

A category manager at Boston Scientific corporate procurement, or a regulatory-affairs director at Medtronic evaluating your firm, does not want to read a paragraph on your website that says 'ISO 13485 certified and MDR-compliant.' That paragraph tells them nothing they can verify. What they want — because their own regulatory team requires it before a supplier makes the shortlist — is specific, verifiable evidence that answers the following questions:

- Under which Notified Body is your MDR certification issued? - What is the exact scope of that Notified Body's certificate on your firm? - What device classes does that scope cover (Class I, IIa, IIb, or III)? - When was the certification issued and when does it expire? - What is the specific ISO 13485 certificate reference number, and can it be verified on the issuing body's public register? - If you sell into the US, what is your FDA Establishment Registration number, your Owner/Operator Number, and — if applicable — your 510(k) submission history? - If you serve the US, Canada, Australia, Brazil and Japan markets simultaneously, are you MDSAP-audited? - What is your PMS (Post-Market Surveillance) approach under EU MDR Article 83-86? - What is your PMCF (Post-Market Clinical Follow-up) approach under Article 61 and Annex XIV?

Publishing this information — accurately, with issuing body / scope / date / expiry per credential — is what turns due diligence into a phone call. Not publishing it is what keeps your firm invisible to shortlist decisions.

**EU MDR 2017/745 — what accurately-published content looks like**

The EU Medical Device Regulation (Regulation 2017/745, in force since May 26, 2021, fully applicable from May 26, 2021 with staggered transition periods for legacy MDD 93/42/EEC certificates expiring progressively through 2024-2028) is the current EU regulatory framework.

Content on your site should accurately reference the regulation's key articles that matter to your firm's specific role:

- **Article 5** (placing on the market and putting into service) — governs the fundamental requirements that a device must meet before it can be sold in the EU. - **Article 10** (general obligations of manufacturers) — the extensive list of manufacturer obligations covering technical documentation, quality management, post-market surveillance, and reporting. - **Article 15** (person responsible for regulatory compliance, PRRC) — mandatory role for manufacturers of all classes. - **Article 27** (unique device identification, UDI) — the UDI system requirements. - **Article 52** (conformity assessment procedures) — governs which conformity assessment route applies to your device class. - **Article 61** (clinical evaluation) — every device requires clinical evaluation; the article specifies the documentation. - **Articles 83-86** (post-market surveillance) — the ongoing surveillance obligations. - **Annexes** — Annex I (general safety and performance requirements), Annex II (technical documentation), Annex III (technical documentation on post-market surveillance), Annex XIV (clinical evaluation and PMCF), Annex XV (clinical investigations).

Real content on your site references these accurately by number ('EU MDR Article 15 designates a Person Responsible for Regulatory Compliance as a mandatory role for every manufacturer'), demonstrates practical implementation ('Our PRRC holds a Class I designation and has 12 years of medical device experience...'), and cites the correct guidance documents (MDCG guidance documents published by the Medical Device Coordination Group are the primary interpretive source and should be referenced by document number where relevant).

**ISO 13485 — how to publish your certification credibly**

Every serious medtech supplier holds ISO 13485:2016 certification. The version matters — ISO 13485:2003 is fully obsolete, ISO 13485:2016 is the current version. Publish:

- The certifying body (BSI Group, NSAI in Ireland, TÜV SÜD, TÜV Rheinland, DEKRA, SGS, BVQI, or another accredited body) - The certificate number - The certification scope — which activities and product categories are covered - The issue date and expiry date (certificates run 3 years typically with annual surveillance audits) - A link to the certifying body's public register where the certificate can be verified

This information is not confidential — the certifying body publishes it publicly. Publishing it on your own site simply makes the verification easier for your buyer.

**Notified body accuracy matters**

If your firm places CE-marked devices on the EU market, you work with a Notified Body for conformity assessment (except Class I devices which are self-declared). Publishing your specific Notified Body relationship accurately is one of the highest-trust-signal single pieces of content on your site:

- **BSI Group (UK)** — Notified Body 0086, largest UK-headquartered notified body, active across Europe and beyond. - **NSAI (National Standards Authority of Ireland)** — Notified Body 0050, Ireland's own notified body, materially active in medtech. - **TÜV SÜD** — Germany-headquartered, multiple NB numbers under different entities. - **TÜV Rheinland** — Germany-headquartered. - **DEKRA Certification** — Germany-headquartered. - **SGS** — Swiss-headquartered, global.

If your device is Class III (highest-risk), your Notified Body must specifically have Class III scope on its designation. Not all Notified Bodies do. Publishing this fact accurately — 'Our Class III devices are assessed under NB 0050 (NSAI) which holds active designation for Class III surgical mesh and orthopaedic implants' — is content that RA/QA directors at multinational buyers read carefully.

**FDA 510(k) content for the US-market angle**

If your firm sells into the US market (directly or through your customers), FDA-specific content is essential:

- **FDA Establishment Registration** — required for every facility that manufactures medical devices for the US market. Your establishment registration number is public and verifiable at fda.gov/medicaldevices/deviceregulationandguidance/howtomarketyourdevice/establishmentregistrationandmedicaldevicelisting. - **Owner/Operator Number** — issued by FDA at registration. - **510(k) submission history** — every cleared 510(k) is public on FDA's 510(k) Premarket Notification database (accessdata.fda.gov/scripts/cdrh/cfdocs/cfpmn/pmn.cfm). Reference your 510(k) numbers and predicate devices where applicable. - **De Novo Classification** — the FDA pathway for novel devices without existing predicates. - **PMA (Premarket Approval)** — required for Class III devices. - **21 CFR Part 820** compliance — the US Quality System Regulation. Reference your compliance approach. - **21 CFR Part 803** compliance — medical device reporting. - **FDA Q-Sub programme** — Pre-Submission meeting participation is worth publishing if you have engaged, because it demonstrates active FDA engagement.

**MDSAP for multi-market compliance**

**MDSAP (Medical Device Single Audit Program)** is a coordinated audit program that allows a single audit to satisfy the regulatory requirements of the US FDA, Health Canada, Australia's TGA, Brazil's ANVISA, and Japan's PMDA. Multinational buyers with global distribution increasingly require MDSAP-audited suppliers because it materially reduces their own supplier-oversight burden. If your firm holds MDSAP audit certification, publish it prominently — with the certifying body (BSI, NSAI, TÜV SÜD, TÜV Rheinland, DEKRA, and others hold MDSAP audit designation), the audit date, and the audit scope.

**Post-Market Surveillance and PMCF — the increasingly-scrutinized element**

Post-Market Surveillance under EU MDR Articles 83-86 and Post-Market Clinical Follow-up under Article 61 and Annex XIV Part B are the two most-scrutinized areas in current supplier audits. Buyers want to see:

- Your PMS Plan document (referenced, not published in full) - Your PMS Report (or Periodic Safety Update Report, PSUR) frequency and completeness - Your PMCF Plan and PMCF Evaluation Report cadence - Your vigilance reporting turnaround times against MDR requirements (2, 10, or 15 days depending on severity) - Your CAPA (Corrective and Preventive Action) turnaround times - Your complaint-handling process alignment to ISO 13485 Section 8.2.2

Content on your site that describes these processes accurately — without publishing confidential internal documents — is trust-signal content.

**Software as a Medical Device (SaMD) — Rule 11 in particular**

If your firm develops medical device software, EU MDR Rule 11 (Annex VIII, Chapter III) classifies software based on its intended purpose. Rule 11 significantly re-classified software up (many previously Class I devices became Class IIa or IIb under MDR, requiring Notified Body assessment). Content on your site that demonstrates accurate Rule 11 literacy — for example, discussing how a decision-support software is Class IIa vs Class IIb based on the potential harm classification — earns citation weight from AI assistants answering software-specific queries.

Reference **IEC 62304:2006 with Amendment 1:2015** — the medical device software lifecycle standard — as part of your software content.

**Real photography and the site itself**

None of the regulatory content on your site converts if the site itself looks like a 2018 WordPress template. Investment in a real Next.js site build with proper photography of your facility, physicians and QA leadership, real product photography, and sub-second load times on European mobile networks is the foundational investment; the regulatory content sits on top of that foundation.

**Getting help**

If you're a Galway medtech supplier who wants this executed properly, we run the exact playbook for indigenous device makers, contract manufacturers and regulatory consultancies in the Irish medtech cluster. Ask us for a Galway medtech SEO audit and we spend 2-3 days on-property mapping your certifications, competencies, customer mix and current digital evidence against the specific medtech-buyer due-diligence path.

SEO for Galway Medtech Companies — Ireland's Medical Device Cluster, Reg-Aware Content, and B2B Trade-Buyer Visibility

Export SEO and B2B content strategy for Galway's medtech ecosystem — Irish indigenous device makers, contract manufacturers, regulatory consultants, sterile processing and specialty supply chain serving the multinationals, and the wider Boston Scientific / Medtronic / Merit Medical / Abbott supply chain.