---
title: "EU MDR QMS requirements under Article 10"
canonical_url: "https://www.sorena.io/artifacts/eu/medical-device-regulation/qms"
source_url: "https://www.sorena.io/artifacts/eu/medical-device-regulation/qms"
author: "Sorena AI"
description: "EU MDR QMS guide for Article 10 manufacturer controls covering regulatory strategy, design, risk, clinical evaluation, PMS, vigilance, UDI, suppliers, CAPA, and conformity records."
published_at: "2026-05-09"
updated_at: "2026-05-09"
keywords:
  - "EU MDR QMS"
  - "MDR Article 10"
  - "medical device quality management system"
  - "PMS"
  - "vigilance"
  - "UDI"
  - "EUDAMED"
  - "EU Medical Device Regulation"
  - "EU MDR"
  - "Regulation (EU) 2017/745"
  - "Article 10"
  - "QMS"
  - "medical device quality system"
---
**[SORENA](https://www.sorena.io/)** - AI-Powered GRC Platform

[Home](https://www.sorena.io/) | [Solutions](https://www.sorena.io/solutions) | [Artifacts](https://www.sorena.io/artifacts) | [About Us](https://www.sorena.io/about-us) | [Contact](https://www.sorena.io/contact) | [Portal](https://app.sorena.io)

---

# EU MDR QMS requirements under Article 10

EU MDR QMS guide for Article 10 manufacturer controls covering regulatory strategy, design, risk, clinical evaluation, PMS, vigilance, UDI, suppliers, CAPA, and conformity records.

*Artifact Guide* *EU*

## EU MDR QMS

Article 10(9) requires manufacturers to establish, document, implement, maintain, update, and continually improve a quality management system proportionate to the device type and risk class.

Use this page to map MDR QMS procedures to regulatory strategy, design and production controls, risk management, clinical evaluation, PMS, vigilance, UDI and EUDAMED data, supplier controls, CAPA, management responsibility, and conformity-assessment records.

An MDR QMS is not only a quality manual. For manufacturers, Article 10 makes it the operating system that connects regulatory compliance, device design and manufacture, risk management, clinical evidence, post-market data, vigilance, UDI registration, supplier control, corrective action, management accountability, and the records a notified body or competent authority can inspect.

## Article 10 QMS scope

For devices other than investigational devices, Article 10(9) requires the manufacturer to run a documented QMS that covers the parts of the organisation dealing with quality of processes, procedures, and devices. The system must be proportionate to the risk class and type of device, so a low-risk Class I device and a high-risk implantable device should not have identical review depth, evidence gates, or management escalation.

The Article 10 list is the minimum map for the QMS. It includes regulatory compliance strategy, conformity-assessment and change-management procedures, general safety and performance requirements, management responsibility, resources, supplier and subcontractor controls, risk management, clinical evaluation and PMCF, product realisation, UDI verification and registration consistency, PMS, stakeholder communication, vigilance reporting, CAPA effectiveness, output monitoring, data analysis, and product improvement.

- Start the QMS scope from the device family, risk class, intended purpose, manufacturer role, production model, and conformity-assessment route.
- Maintain a regulatory strategy procedure that links classification, applicable general safety and performance requirements, harmonised standards or common specifications, notified-body interactions, and change assessment.
- Make management responsibility visible through named process owners, approval gates, resource decisions, quality objectives, review minutes, and escalation criteria for risk, clinical, PMS, vigilance, and CAPA signals.
- Keep supplier and subcontractor control inside the QMS, including qualification, purchasing requirements, design or manufacturing handoffs, change notification, performance review, and corrective-action follow-up.

Sources for this answer:

- [Regulation (EU) 2017/745 on medical devices](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32017R0745&locale=en&ref=sorena.io) - Article 10(9) defines the required QMS scope, including regulatory strategy, GSPR coverage, management responsibility, supplier control, risk, clinical evaluation, UDI, PMS, vigilance, CAPA, and improvement.

*Recommended next step*

*Placement: after implementation section*

## Turn MDR Article 10 into an auditable QMS map

Map your device families, risk classes, clinical evidence, PMS signals, vigilance workflow, UDI data, supplier controls, CAPA records, and management reviews to the Article 10 QMS scope.

- [Open Research Copilot](/solutions/research-copilot.md): Answer MDR QMS, evidence, and conformity-assessment questions with cited outputs.
- [Talk through implementation](/contact.md): Review your Article 10 QMS scope, records, owners, and next actions.

## Design, risk, and clinical evidence controls

The QMS should make design and manufacture traceable from intended purpose through requirements, hazards, risk controls, verification, validation, labelling, release, and service provision. Article 10 requires devices to be designed and manufactured in accordance with MDR requirements, while Annex I treats risk management as a continuous lifecycle process.

Clinical evaluation cannot sit outside the quality system. Article 10 points to Article 61 and Annex XIV, which require a documented clinical evaluation and PMCF. The QMS should therefore define when clinical evaluation plans, clinical evaluation reports, PMCF plans, PMCF evaluation reports, risk files, claims, instructions for use, and technical documentation are updated together.

- Link design inputs to intended purpose, user needs, GSPRs, risk controls, standards or common specifications, verification evidence, validation evidence, and production release criteria.
- Require risk-management updates when production data, complaints, PMS findings, clinical data, usability findings, supplier changes, or field safety information changes the benefit-risk determination.
- Keep clinical evaluation records objective and current, including favourable and unfavourable data, evidence gaps, equivalence rationale where used, PMCF outputs, and the connection to technical documentation.
- Use change-control gates that decide whether a design, material, software, manufacturing, supplier, labelling, or claims change affects conformity assessment, clinical evaluation, UDI data, PMS, or vigilance obligations.

Sources for this answer:

- [Regulation (EU) 2017/745 on medical devices](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32017R0745&locale=en&ref=sorena.io) - Article 10 and Annex I support QMS controls for design, manufacture, risk management, clinical evaluation, PMCF, and technical documentation.

## PMS, vigilance, UDI, and EUDAMED controls

Article 83 makes post-market surveillance an integral part of the Article 10 QMS. The QMS should specify how complaints, service data, trend signals, user feedback, literature, registry data, clinical follow-up, distributor information, and field data are gathered, analysed, escalated, and used to update risk management, clinical evaluation, labelling, technical documentation, and product improvement.

Vigilance needs a separate reporting workflow with intake triage, causal-assessment records, serious-incident decisions, field safety corrective action decisions, field safety notices, authority communication, notified-body communication where applicable, and CAPA linkage. UDI and EUDAMED controls should verify Basic UDI-DI and UDI-DI assignments, device-registration data consistency, and the data used in certificates, declarations of conformity, labels, technical files, and EUDAMED submissions.

- Define PMS data sources, review frequency, trend thresholds, report ownership, and update rules for PMS reports or PSURs according to the device class and conformity route.
- Route serious incident and field safety corrective action decisions through trained vigilance owners, with evidence for reportability, timing, follow-up, and authority submissions.
- Treat UDI as master data controlled by the QMS: assign, verify, approve, and reconcile identifiers across labels, declarations, certificates, technical documentation, and EUDAMED records.
- Keep EUDAMED actor and device-registration responsibilities assigned, with access continuity, submission evidence, correction logs, and release checks before new or changed devices are placed on the EU market.

Sources for this answer:

- [Regulation (EU) 2017/745 on medical devices](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32017R0745&locale=en&ref=sorena.io) - Articles 83 and 87 ground PMS as part of the QMS and vigilance reporting for serious incidents and field safety corrective actions.
- [European Commission EUDAMED portal](https://webgate.ec.europa.eu/eudamed?ref=sorena.io) - Commission EUDAMED source for the system modules covering actor registration, UDI/device registration, notified bodies and certificates, clinical investigations, vigilance/PMS, and market surveillance.
- [European Commission UDI/device registration](https://health.ec.europa.eu/medical-devices-eudamed/udidevice-registration_en?ref=sorena.io) - Commission source for UDI traceability and manufacturer submission of UDI/device information in EUDAMED.
- [MDCG 2022-7 - Questions and answers on the UDI system](https://health.ec.europa.eu/system/files/2022-05/mdcg_2022-7_en.pdf?ref=sorena.io) - MDCG guidance supporting QMS controls for Basic UDI-DI, UDI-DI, UDI changes, and UDI data consistency.

## Records for conformity assessment and authority review

A QMS record set should let a notified body or competent authority reconstruct the manufacturer's decisions without relying on staff memory. Article 10 requires current technical documentation, an EU declaration of conformity after the applicable conformity assessment, UDI and registration compliance, and long-term availability of the technical documentation, declaration, and relevant certificates.

For conformity assessment, keep the QMS evidence tied to the device or device group under review: scope and classification rationale, regulatory strategy, design history, manufacturing controls, supplier files, risk-management file, clinical evaluation file, PMS plan and outputs, vigilance file, UDI records, EUDAMED records, CAPA logs, management-review records, internal audits, change-control records, notified-body submissions, and certificate conditions.

- Retain technical documentation, declarations, and relevant certificates for at least 10 years after the last covered device is placed on the market, and at least 15 years for implantable devices.
- Make CAPA files show the problem statement, risk assessment, containment, root cause, correction or corrective action, effectiveness check, owner, due date, and resulting updates to risk, clinical, PMS, labelling, suppliers, or production controls.
- Keep management-review outputs specific: quality metrics, PMS and vigilance signals, audit findings, supplier performance, CAPA effectiveness, resource decisions, regulatory changes, notified-body feedback, and product-improvement decisions.
- Do not rely on standalone ISO certificates, supplier declarations, or historic test reports unless the QMS record shows how they apply to the current device version, intended purpose, risk class, production process, and MDR obligation.

Sources for this answer:

- [Regulation (EU) 2017/745 on medical devices](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32017R0745&locale=en&ref=sorena.io) - Article 10 and conformity-assessment annexes support technical documentation, declaration, certificate, QMS, CAPA, and retention record requirements.

## Primary sources

- [Regulation (EU) 2017/745 on medical devices](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32017R0745&locale=en&ref=sorena.io) - Primary MDR source for Article 10 manufacturer obligations, QMS scope, risk management, clinical evaluation, PMS, vigilance, UDI, conformity assessment, CAPA, and record retention.
  - Quote: "establish, document, implement, maintain, keep up to date and continually improve"
- [European Commission EUDAMED portal](https://webgate.ec.europa.eu/eudamed?ref=sorena.io) - Commission source for EUDAMED module structure and operational context for actor, UDI/device, certificates, clinical investigations, vigilance/PMS, and market-surveillance data.
  - Quote: "living picture of the lifecycle of medical devices"
- [European Commission UDI/device registration](https://health.ec.europa.eu/medical-devices-eudamed/udidevice-registration_en?ref=sorena.io) - Commission source for UDI traceability and manufacturer submission of UDI/device information in EUDAMED.
  - Quote: "device identification system based on a unique device identifier"
- [MDCG 2022-7 - Questions and answers on the UDI system](https://health.ec.europa.eu/system/files/2022-05/mdcg_2022-7_en.pdf?ref=sorena.io) - MDCG guidance used for Basic UDI-DI, UDI-DI, and UDI data controls within the QMS.
  - Quote: "Questions and Answers on the Unique Device Identification system"

## Related Topic Guides

- [Custom-made medical devices under the EU MDR | EU MDR FAQ](/artifacts/eu/medical-device-regulation/faq/custom-made-devices.md): Concise EU MDR FAQ on custom-made device definition, mass-produced exclusions, Annex XIII statements, documentation, conformity assessment, PMS, vigilance, and records to retain.
- [EU MDR Annex II and III Technical Documentation](/artifacts/eu/medical-device-regulation/annex-ii-and-iii-technical-documents.md): Build an MDR technical documentation index for Annex II device files and Annex III post-market surveillance evidence, including GSPR, risk, clinical, PMS, UDI, and EUDAMED records.
- [EU MDR Annex VIII Classification Guide](/artifacts/eu/medical-device-regulation/annex-viii-classification.md): Classify EU MDR medical devices under Annex VIII using intended purpose, duration, invasiveness, active device and software rules, and conformity assessment impact.
- [EU MDR Annex XVI products without a medical purpose](/artifacts/eu/medical-device-regulation/annex-xvi-products.md): source-linked EU MDR guide for Annex XVI products: listed product groups, common specifications, clinical evidence, notified-body route, UDI, EUDAMED, PMS, and vigilance evidence before launch.
- [EU MDR Applicability Test](/artifacts/eu/medical-device-regulation/applicability-test.md): Test whether a product, accessory, software function, or Annex XVI product falls under the EU Medical Device Regulation, and record the evidence for the next classification step.
- [EU MDR change assessment workflow](/artifacts/eu/medical-device-regulation/change-assessment-workflow.md): Assess EU MDR device, design, software, intended purpose, QMS, clinical, PMS, UDI, classification, and notified-body impacts before releasing a medical device change.
- [EU MDR Checklist for Medical Device Compliance](/artifacts/eu/medical-device-regulation/checklist.md): Practical EU MDR checklist covering qualification, classification, conformity assessment, technical documentation, GSPR, clinical evidence, UDI, EUDAMED, PMS, vigilance, QMS, and legacy transition evidence.
- [EU MDR classification workflow](/artifacts/eu/medical-device-regulation/classification-workflow.md): A concrete EU MDR classification workflow for intended purpose, device or accessory qualification, Annex VIII rule selection, Rule 11 software review, class outcome, and notified body impact.
- [EU MDR Clinical Evaluation Overview](/artifacts/eu/medical-device-regulation/clinical-evaluation-overview.md): EU MDR clinical evaluation overview covering Article 61, Annex XIV, clinical data sources, equivalence, PMCF, CER evidence, notified body review, GSPR, and benefit-risk support.
- [EU MDR Clinical Evaluation Report Template](/artifacts/eu/medical-device-regulation/clinical-evaluation-report-template.md): A source-linked EU MDR clinical evaluation report template covering intended purpose, GSPR linkage, clinical data appraisal, equivalence limits, PMCF, conclusions, and reviewer signoff.
- [EU MDR clinical evidence guide](/artifacts/eu/medical-device-regulation/clinical-evidence.md): source-linked EU MDR guide to clinical evaluation, clinical investigations, equivalence, PMCF, GSPR support, technical documentation, and notified-body review.
- [EU MDR compliance obligations](/artifacts/eu/medical-device-regulation/compliance.md): EU MDR compliance guide for device qualification, classification, conformity assessment, QMS, technical documentation, UDI, EUDAMED, PMS, vigilance, and legacy transition controls.
- [EU MDR conformity route workflow](/artifacts/eu/medical-device-regulation/conformity-route-workflow.md): source-linked EU MDR workflow for classifying a device, choosing the conformity assessment route, preparing technical and QMS evidence, and reaching certificate, DoC, UDI, EUDAMED, and CE outputs.
- [EU MDR deadlines and compliance calendar](/artifacts/eu/medical-device-regulation/deadlines-and-compliance-calendar.md): Grounded EU MDR calendar for application, legacy-device transition, UDI, EUDAMED, and recurring QMS, technical documentation, clinical, PMS, vigilance, certificate, and change reviews.
- [EU MDR Device Classification Guide](/artifacts/eu/medical-device-regulation/device-classification-guide.md): Classify an EU MDR medical device by intended purpose, Annex VIII duration, invasiveness, active-device and software rules, then document the conformity route impact.
- [EU MDR EUDAMED and UDI registration](/artifacts/eu/medical-device-regulation/eudamed-and-udi.md): source-linked MDR guide to Basic UDI-DI, UDI-DI, EUDAMED device registration, actor roles, labels, technical documentation, and UDI data governance.
- [EU MDR FAQ: qualification, evidence, UDI, and transition](/artifacts/eu/medical-device-regulation/faq.md): Concise EU MDR FAQ covering device qualification, software classification, accessories, custom-made devices, clinical evidence, UDI, EUDAMED, notified bodies, significant changes, and legacy transition.
- [EU MDR Legacy Device Transition](/artifacts/eu/medical-device-regulation/legacy-device-transition.md): source-linked EU MDR legacy device transition guide covering Regulation (EU) 2023/607 conditions, certificate validity, significant-change limits, surveillance, PMS, vigilance, QMS, and evidence records.
- [EU MDR notified body route selection](/artifacts/eu/medical-device-regulation/notified-body-route-selection.md): Choose an EU MDR conformity assessment route by device class, Article 52 option, notified body designation scope, QMS readiness, technical documentation, clinical evidence, and certificate evidence.
- [EU MDR penalties and enforcement risk](/artifacts/eu/medical-device-regulation/penalties-and-fines.md): source-linked EU MDR penalties and enforcement-risk guide covering Article 113, Member State penalty rules, market restrictions, recalls, certificate consequences, and evidence.
- [EU MDR PMS and Vigilance Guide](/artifacts/eu/medical-device-regulation/pms-and-vigilance.md): EU MDR guide to post-market surveillance, PMCF updates, PMS reports, PSURs, serious incident reporting, FSCA/FSN handling, trend reporting, and evidence records.
- [EU MDR PMS and vigilance records](/artifacts/eu/medical-device-regulation/post-market-surveillance-and-vigilance.md): source-linked EU MDR guide to PMS plans, PMS reports, PSURs, PMCF updates, serious incident and FSCA reporting, trend reporting, and EUDAMED evidence handling.
- [EU MDR PMS Plan Template for Medical Devices](/artifacts/eu/medical-device-regulation/post-market-surveillance-plan-template.md): A source-linked EU MDR post-market surveillance plan template covering device scope, PMS data sources, PMCF linkage, vigilance, trend reporting, PMSR or PSUR outputs, roles, cadence, and evidence records.
- [EU MDR QMS and technical file evidence map](/artifacts/eu/medical-device-regulation/qms-and-technical-file.md): Map EU MDR Article 10 QMS duties to Annex II and Annex III technical documentation, PMS, vigilance, UDI records, and notified-body review evidence.
- [EU MDR qualification and borderline products](/artifacts/eu/medical-device-regulation/qualification-and-borderline-products.md): EU MDR qualification guide for medical purpose claims, accessories, software, Annex XVI products, and borderline routes to classification and conformity assessment.
- [EU MDR qualification workflow](/artifacts/eu/medical-device-regulation/qualification-workflow.md): A concrete EU MDR workflow for deciding whether a product is a medical device, accessory, Annex XVI product, IVD interface, medicinal-product interface, or non-MDR product before classification and conformity assessment.
- [EU MDR requirements checklist](/artifacts/eu/medical-device-regulation/requirements.md): Concrete EU MDR requirements for medical-device scope, classification, GSPR, conformity assessment, technical documentation, QMS, clinical evidence, UDI, EUDAMED, PMS, vigilance, and economic-operator records.
- [EU MDR Rule 11 software classification](/artifacts/eu/medical-device-regulation/rule-11-software.md): Classify MDR medical device software under Rule 11 using intended purpose, diagnosis or therapy decision impact, physiological monitoring, conformity route, clinical evidence, and software-change records.
- [EU MDR significant changes FAQ: legacy-device transition and notified-body review](/artifacts/eu/medical-device-regulation/faq/significant-changes.md): FAQ on MDR significant changes for legacy devices, including intended-purpose, design, software, material, sterilisation, clinical, QMS, notified-body, and evidence impacts.
- [EU MDR Transition Timelines: practical guide](/artifacts/eu/medical-device-regulation/transition-timelines.md): EU Medical Device Regulation guide to Transition Timelines with scope decisions, owner actions, evidence records, source-linked citations, and practical next steps.
- [EU MDR UDI and EUDAMED registration guide](/artifacts/eu/medical-device-regulation/udi-and-eudamed.md): EU MDR guide to Basic UDI-DI, UDI-DI, UDI carriers, EUDAMED actor and device registration, change impacts, and evidence governance.
- [EU MDR vigilance reporting workflow](/artifacts/eu/medical-device-regulation/vigilance-reporting-workflow.md): Concrete EU MDR vigilance workflow for incident intake, serious incident assessment, FSCA and FSN handling, trend reporting, EUDAMED caveats, CAPA, PMS, clinical evaluation updates, and records.
- [How should Basic UDI-DI and UDI-DI be assigned under the EU MDR? | EU MDR FAQ](/artifacts/eu/medical-device-regulation/faq/udi-di-and-basic-udi-di.md): EU MDR FAQ explaining what Basic UDI-DI and UDI-DI identify, how they connect to UDI carriers, EUDAMED records, change triggers, and retained evidence.
- [MDR vs AI Act for medical-device software](/artifacts/eu/medical-device-regulation/mdr-vs-ai-act.md): Compare MDR software qualification, classification, clinical evidence, QMS, PMS, UDI, EUDAMED, and notified-body evidence boundaries against cautiously scoped AI Act overlap.
- [MDR vs GPSR: medical-device boundary checks](/artifacts/eu/medical-device-regulation/mdr-vs-gpsr.md): Compare MDR medical-device scope with general product-safety fallback questions for borderline, non-medical, and Annex XVI products.
- [MDR vs IVDR: medical devices and IVDs compared](/artifacts/eu/medical-device-regulation/mdr-vs-ivdr.md): Compare EU MDR and IVDR scope, classification, conformity routes, technical documentation, clinical or performance evidence, UDI, EUDAMED, PMS, and vigilance.
- [MDR vs Product Liability Directive evidence comparison](/artifacts/eu/medical-device-regulation/mdr-vs-product-liability-directive.md): Compare EU MDR market-access evidence with Product Liability Directive exposure without treating compliance records as a liability outcome.
- [What should an EU MDR PMCF plan and report cover? | EU MDR FAQ](/artifacts/eu/medical-device-regulation/faq/pmcf.md): Under the EU MDR, PMCF is part of PMS and clinical evaluation. See what the plan, activities, report, updates, and retained evidence should cover.
- [What should manufacturers do when an EU MDR classification changes? | EU MDR FAQ](/artifacts/eu/medical-device-regulation/faq/class-changes.md): Concise EU MDR FAQ on classification changes, intended purpose, software, notified-body route impact, certificates, technical documentation, and retained evidence.
- [When can clinical equivalence be used under the EU MDR?](/artifacts/eu/medical-device-regulation/faq/equivalence.md): EU MDR FAQ on clinical equivalence, including technical, biological, and clinical characteristics, access to equivalent-device data, class III and implantable-device limits, clinical evaluation, PMCF, and retained evidence.
- [When do software or products make medical purpose claims under the EU MDR? | EU MDR FAQ](/artifacts/eu/medical-device-regulation/faq/medical-purpose-claims.md): EU MDR FAQ on medical purpose claims, intended purpose evidence, software qualification, Annex XVI contrasts, and records to keep.
- [When is a PSUR required under the EU MDR and what should it contain? | EU MDR FAQ](/artifacts/eu/medical-device-regulation/faq/psur.md): EU MDR FAQ on PSUR scope, content, update cadence, PMS and PMCF links, notified-body handling, EUDAMED submission, and evidence to retain.
- [When is an accessory regulated under the EU MDR? | EU MDR FAQ](/artifacts/eu/medical-device-regulation/faq/accessories.md): EU MDR FAQ on when an article is a medical device accessory, how intended purpose affects classification, and what evidence to keep.
- [When is software regulated as SaMD under the EU MDR? | EU MDR FAQ](/artifacts/eu/medical-device-regulation/faq/software-and-samd.md): Concise EU MDR FAQ on software qualification, intended medical purpose, Rule 11 classification, modules, clinical evidence, change assessment, UDI, and EUDAMED.
- [Which devices need an SSCP under the EU MDR and what should it include? | EU MDR FAQ](/artifacts/eu/medical-device-regulation/faq/sscp.md): EU MDR FAQ on when an SSCP is required, who prepares, validates, uploads, and updates it, and what evidence should support the summary.
- [Which EUDAMED modules matter under the EU MDR? | EU MDR FAQ](/artifacts/eu/medical-device-regulation/faq/eudamed-modules.md): EU MDR FAQ mapping EUDAMED modules to actor registration, UDI/device data, certificates, clinical investigations, vigilance/PMS, market surveillance, and practical records.


---

[Privacy Policy](https://www.sorena.io/privacy) | [Terms of Use](https://www.sorena.io/terms-of-use) | [DMCA](https://www.sorena.io/dmca) | [About Us](https://www.sorena.io/about-us)

(c) 2026 Sorena AB (559573-7338). All rights reserved.

Source: https://www.sorena.io/artifacts/eu/medical-device-regulation/qms