Usability Engineering File (UEF)
Complete usability engineering file (UEF) for newly developed products, existing products, and legacy devices in accordance with IEC 62366-1.
Technical documentation is only ready for submission once all supporting evidence fits together consistently. We work with you to establish precisely this logical structure of evidence with a clear, consistent thread, in accordance with the MDR and IVDR.
25+ years of TechDoc experience · 200+ technical documentation projects · 100+ GSPR checklistsThe technical documentation contains the key evidence demonstrating that a medical device or in-vitro diagnostic medical device meets the applicable safety, performance, and conformity requirements. It forms the basis for the conformity assessment procedure and the evaluation by Notified Bodies and must be structured in a complete, consistent, and up-to-date manner in accordance with MDR or IVDR Annexes II and III.
The focus is not on individual technical documentations, but on the traceable linkage of all regulatory evidence: intended purpose, classification, GSPR, clinical evaluation or performance evaluation, verification and validation, labeling, PMS, and SSCP or SSP. Metecon structures this content so that the technical documentation is auditable and ready for submission.
Metecon supports you in the creation, structuring, and updating of MDR- and IVDR-compliant technical documentation with consistent documentation for Notified Bodies and conformity assessment procedures—from gap analysis through development to ongoing maintenance throughout the product life cycle.
Our USP: Technical documentation with consistent traceability logic—featuring a clear, logical thread and the ability to be updated. What this means for you in concrete terms—and how Metecon supports you in this process:
Your technical documentation appears complete, but contradictory information triggers follow-up inquiries and back-and-forth exchanges with the Notified Body. Metecon creates a consistent documentation framework for you with a clear, coherent thread running through it.
Over the years, updates and changes create a patchwork—no one knows for sure which version is valid. Metecon establishes consistent versioning and clear validity for you.
Numerous or conflicting feedbacks from development, risk management, post-market surveillance, and the QMS can lead to an immense amount of work to implement changes. Metecon optimizes your processes and enables traceable documentation for robust technical documentation.
7 Key Regulatory Aspects – Medical Devices vs. In-Vitro Diagnostic Medical Devices at a Glance
| Aspect | Medical Devices (MDR) | In-Vitro Diagnostic Medical Devices (IVDR) |
| Legal Basis | MDR (EU) 2017/745 Annexes I–V & VIII |
IVDR (EU) 2017/746 Annexes I–V & VIII |
| Risk Classes | I, IIa, IIb, III in accordance with MDR Article 51 and Annex VIII | A, B, C, D in accordance with IVDR Article 47 and Annex VIII |
| Clinical Evidence | clinical Evaluation (CER) in accordance with MDR Article 61 and Annex XIV | performance evaluation (PER) in accordance with IVDR Article 56 and Annex XIII |
| Post-market Reports | PMS report for class I, PSUR for class IIa and above, SSCP for class III and implants | PMS report for class A/B, PSUR and SSP for class C/D |
| Regulatory Framework | ISO 13485:2026, ISO 14971:2019, IEC 62366-1:2015 + COR1:2016 + A1:2020, ISO 10993-1:2025-11, IEC 62304:2006 + A1:2015 | ISO 13485:2026, ISO 14971:2019, IEC 62366-1:2015 + COR1:2016 + A1:2020, IEC 62304:2006 + A1:2015 |
| Special Features | biocompatibility assessment ISO 10993-1, systems, Procedure Packs | analytical performance, near-patient testing, companion diagnostics, in-house tests |
| Transition Periods | class III and IIb implants: through December 31, 2027; class I, IIa, IIb (non-implantable): through December 31, 2028 | class D through December 31, 2027; class C through December 31, 2028; class B through December 31, 2029 |
Structured, transparent, and aligned with regulatory processes
Complete technical documentation in accordance with MDR/IVDR—from gap analysis and GSPR mapping to digital documentation with an integrated PMS.
Integration of regulatory risk assessments into the technical documentation—including traceability between the risk management file, V&V, CER/PER, and PMS.
Usability engineering file (UEF) for new and existing products, including formative and summative evaluation with a network of experienced partners.
Support for IEC 60601-1 and IEC 60601-1-2—from test planning and laboratory selection to integration into the technical documentation.
Cybersecurity documentation for networked medical devices, including risk assessment, software bill of materials (SBOM), and regulatory compliance with MDR/IVDR.
MDR-compliant documentation for medical devices—from GSPR and clinical evaluation to V&V, PMS, SSCP, and submission-ready documentation for Notified Bodies.
The MDR (EU) 2017/745 has replaced Directives 93/42/EEC (MDD) and 90/385/EEC (AIMDD). The first step in any revision of the technical documentation is a gap analysis of the general safety and performance requirements in Annex I to identify any supplementary or new evidence required.
Systematic mapping of the general safety and performance requirements, including references to standards, verification references, and verifiable traceability within the technical documentation.
Preparation and updating of clinical evaluations in accordance with MDR Article 61 and Annex XIV—including literature reviews, clinical data, equivalence assessments, and consistency with PMS/PMCF.
Incorporation of evidence of usabillity in accordance with IEC 62366-1 into the technical documentation—as documented evidence of the safe use of the medical device.
Structured, searchable, and consistent technical documentation—for more efficient reviews by Notified Bodies and fewer inquiries during the assessment process.
Incorporation of biological evaluation data in accordance with EN ISO 10993-1 into the technical documentation—aligned with the intended purpose, verification and validation (V&V), and clinical evaluation.
Structured preparation of test plans, test results, acceptance criteria, and laboratory reports for technical documentation in accordance with MDR Annex II.
Incorporation of post-market surveillance (PMS plan, PMS report, PSUR, etc.) into the technical documentation, including update cycles and consistency with the clinical evaluation.
Preparation and maintenance of the summary of safety and clinical performance—consistent with the clinical evaluation, PMS/PMCF, and technical documentation.
Verification of consistency between intended purpose, classification, GSPR, clinical evaluation, labeling, V&V, and PMS prior to review by the Notified Body.
The MDR requires a consistent link between risk management, verification and validation (V&V), clinical evaluation, usability engineering, and post-market surveillance (PMS/PMCF).
Metecon integrates this evidence in a structured manner into the technical documentation in accordance with MDR Annexes II and III.
Traceability: Seamless traceability between risk management, verification and validation (V&V), usability engineering, clinical evaluation, and PMS/PMCF data.
Risk Analysis: Systematic identification of hazards and hazardous situations, including structured hazard analyses even for complex medical devices.
Risk Assessment and Control: Assessment of probability of occurrence and severity, as well as the definition and verification of appropriate risk control measures.
Risk Management Plan: Definition of methodology, acceptance criteria, responsibilities, and the product life-cycle as the basis for all further risk management activities.
Risk Management Report: Assessment of residual risks and the overall benefit-risk ratio, prepared for review by the Notified Body
Workshops & Training: Support for interdisciplinary teams in implementing regulatory requirements for risk management in accordance with the MDR and ISO 14971—remotely or on-site.
Support for Audits / Nonconformities: Assistance with nonconformities, CAPAs, and inquiries from Notified Bodies—provided promptly and with a practical focus.
Inadequate usability engineering is one of the most common causes of incidents involving medical devices. IEC 62366-1 defines a structured process for the safe and traceable implementation of usability engineering.
Complete usability engineering file (UEF) for newly developed products, existing products, and legacy devices in accordance with IEC 62366-1.
Analysis of user profiles, use scenarios, and risks associated with user errors—as the foundation for all further usability activities.
Usability evaluations conducted throughout the development process to identify design strengths and weaknesses, as well as usability and interface issues, at an early stage—carried out iteratively to ensure efficient product development.
Validation of usability under realistic conditions of use—to demonstrate safe use and manageable risks associated with use.
Integration of the results from formative and summative evaluation with risk analysis and risk control in accordance with EN ISO 14971, including complete traceability.
Planning and coordination of laboratory, simulation, and application studies with validated partners, including project management by Metecon.
For electrical medical devices, compliance with the IEC 60601 series is a key requirement for the technical documentation under the MDR.
Electrical safety and electromagnetic compatibility (EMC) are part of the general safety and performance requirements (GSPR) as specified in MDR Annex I and form the basis for every assessment conducted by the Notified Body.
Demonstration of compliance with essential safety requirements—including protection against electric shock, mechanical hazards, and overheating.
Verification of electromagnetic compatibility (EMC), including immunity test levels for medical electrical devices and systems.
Requirements for medical devices used in home healthcare settings. Relevant for digital health devices, wearables, and home-use products.
Development of the testing strategy, selection of accredited testing laboratories, and integration of the test results into the technical documentation.
Linking the Usability Engineering File (UEF) to the requirements for electrical safety and risk control.
Preparation of product-specific electrical safety reports as part of the technical documentation for active medical devices.
With the increasing connectivity of medical devices, cybersecurity is no longer an optional additional requirement but a regulatory component of the technical documentation. The MDR explicitly requires cybersecurity measures in Annex I, Section 17. MDCG 2019-16 specifies the expectations of Notified Bodies regarding connected medical devices and software as a medical device (SaMD).
Cybersecurity requirements throughout the software life cycle, including threat analysis and risk assessment (TARA), cybersecurity requirements, verification, and documentation of the results.
Systematic analysis of threat scenarios, vulnerabilities, and attack vectors—a regulatory requirement for the technical documentation of networked medical devices and SaMD.
A complete list of software components, dependencies, and SOUP libraries for software of unknown origin—increasingly required by Notified Bodies, the FDA, and international cybersecurity guidelines.
Integration of safety evidence into the technical documentation required under MDR Annex II, including interface documentation, labeling, and a patch management strategy.
Implementation of the European cybersecurity guidelines as the basis for assessment by Notified Bodies, including a regulatory gap analysis and a documentation strategy.
Integration of safety risks into risk management in accordance with ISO 14971, as well as alignment of MDR, AI Act, and cybersecurity requirements within the technical documentation.
The AI Act imposes additional requirements on cybersecurity, risk management, and technical documentation for AI-based medical devices. Metecon provides support for the integrated implementation of MDR, AI Act, and cybersecurity requirements within a consistent technical documentation.
The summary of safety and clinical performance (SSCP) is a publicly available mandatory document under the MDR. It is validated by the Notified Body and published via EUDAMED. Metecon creates and maintains SSCPs as an integrated part of existing post-market surveillance processes.
We understand the expectations of the Notified Bodies.
Transparent cost estimate following a free initial consultation. Billing based on actual time spent and with maximum budget transparency.
Short-term support for nonconformities, CAPAs, and inquiries from Notified Bodies.
Consistency checks for intended purpose, risk management, labeling, and PMS within the TechDoc.
Direct collaboration with your team—from risk analysis and usability testing to a technical documentation ready for submission.
Expertise in usability, biocompatibility, electrical safety, PMS, and cybersecurity—all integrated into a consistent TechDoc.
Support with international regulatory requirements (such as FDA, TGA, etc.) based on existing documentation.
The technical documentation under the IVDR imposes significantly higher requirements on performance evidence, PMS/PMPF documentation, and regulatory consistency than the previous directive. Manufacturers of existing IVDD products (legacy devices) must systematically update their technical documentation in accordance with IVDR Annexes II and III and prepare it in a format that can be reviewed by Notified Bodies.
Under the IVDR, Annex I now covers significantly more and more detailed essential safety and performance requirements. The proportion of IVDs whose technical documentation must be assessed by a Notified Body is estimated to rise from around 20% to over 80% (classes B–D). There is no grandfathering provision—from a regulatory perspective, the transition from the IVDD to the IVDR is equivalent to a first-time authorization.
| Risk Class | NB Application Deadline | End of Transition Period | SSP Required |
| Class D ( highest risk) | May 26, 2025 (expired) | December 31, 2027 | ✓ Yes |
| Class C | May 26, 2026 (expired) | December 31, 2028 | ✓ Yes |
| Class B | May 26, 2027 | December 31, 2029 | No (PMS Report) |
| Class A (sterile) | May 26, 2027 | December 31, 2029 | No (PMS Report) |
Systematic assessment of existing IVDD documentation with regard to IVDR requirements—including gap identification, evidence structure, and transition periods.
Preparation and structuring of technical documentation in accordance with IVDR Annexes II and III—from intended purpose and classification to a complete documentation trail.
Ongoing evaluation of relevant MDCG guidelines and common specifications—including consideration of regulatory changes for existing IVDR documentation.
Consistent links between performance evaluation, PMPF, risk management file, V&V, and product labeling within the technical documentation.
Preparation and maintenance of the summary of safety and performance (SSP) for class C and class D IVDs—in accordance with performance evaluation, PMS/PMPF, and MDR requirements.
Incorporation of the PMS Plan, PMS Report, PMPF Plan, and PMPF Findings into the technical documentation in accordance with the IVDR.
Preparation of the periodic safety update report (PSUR) for class C and class D IVDs—including a benefit-risk assessment, PMS data, and PMPF findings in accordance with the IVDR.
Preparation of regulatory submissions and structured support in responding to inquiries during the IVDR conformity assessment procedure.
Demonstration of the clinical performance of an IVD in accordance with IVDR Annex XIII is based on three pillars. As outlined in the performance evaluation plan (PEP), these culminate in three reports—scientific validity report (SVR), analytical performance report (APR), and clinical performance report (CPR)—which are consolidated in the performance evaluation report (PER).
All results must be fully documented in the technical documentation:
Evidence that the measured analyte is associated with a specific clinical or physiological condition. May be based on peer-reviewed literature, expert consensus, and scientific data.
A product’s ability to correctly detect or measure a specific analyte (accuracy, precision, analytical sensitivity, and specificity). Demonstrated through the company’s own studies or published data.
The ability of a product to produce results that correlate with a specific clinical condition or physiological or pathological process or condition in a specific target population and among specific intended users. Demonstrated through a clinical performance study in accordance with IVDR Annex XIII, scientific literature, peer review, or experience gained from routine diagnostic testing.
For in-vitro diagnostic medical devices, risk management focuses on risks associated with erroneous results, interferences, and use errors. Performance evaluation, PMPF, and PMS must be consistently linked to risk analysis and usability.
Based on the intended purpose, devices are classified into risk categories A through D, with class D designated for high-risk devices.
Linking performance evaluation (PER) and risk assessment—particularly with regard to potentially erroneous test results and risks of diagnostic misinterpretation.
PMPF results and PMS data are continuously incorporated into the risk management file and the clinical performance evaluation.
Specific risks arising from insufficient limits of detection (LOD), cross-reactivity, and matrix interference are systematically identified and assessed.
Assessment of analytical and diagnostic error risks using a structured FMEA methodology for complex IVD systems.
High usability requirements apply to IVDs, particularly those intended for self-testing (e.g., home tests) and for laboratory diagnostics. IEC 62366-1 applies equally to medical devices and IVDs.
Complete usability engineering file for new IVD developments and legacy devices—either during development or retrospectively.
Laboratory use vs. near-patient testing (point of care) vs. self-testing—different performance and safety requirements depending on the context of use.
Coordination of IVD performance studies with validated laboratories and study partners—planning, implementation, and documentation.
Usability findings derived from post-market surveillance (PMPF) are incorporated into the ongoing development of the usability engineering file (UEF)—a continuous process.
The summary of safety and performance (SSP) is the IVD equivalent of the summary of safety and clinical performance (SSCP) under the MDR. As a publicly accessible mandatory document for class C and class D IVDs, it is validated by the Notified Body and published in EUDAMED. Metecon prepares the SSP as part of your PER update cycle.
IVDD → IVDR: Systematic review and update of existing technical documentation for all risk classes.
Ongoing evaluation of new MDCG guidelines and integration of relevant requirements into your documentation.
Brief report on safety and performance, integrated into existing performance evaluation and PMS processes.
Consistent traceability from the product concept, specifications, performance evaluation, and technical documentation through to post-market surveillance.
Coordination of the IVDR conformity assessment—including communication with Notified Bodies and testing laboratories.
Scientific validity, analytical performance, and clinical performance are fully documented.
PMPF findings are continuously integrated into performance evaluation, risk management, and the usability engineering file.

Stefan Kemmann leads the Regulatory Affairs & Technical Documentation team at Metecon. The team supports manufacturers in the area of technical documentation by carrying out gap analyses and providing structured documentation development, from clear evidence management in accordance with MDR/IVDR Annexes II and III to technical documentation ready for submission. The team considers maintenance, traceability, future changes and expansion into new markets from the outset.
“Technical documentation can be formally complete yet still inconsistent, unclear, and poorly organized—and thus waste a lot of unnecessary time during the assessment. We’ll build a verification framework for you with a clear, consistent thread that anticipates inquiries from the Notified Body and also enables long-term maintenance of the technical documentation.”
– Stefan Kemmann, Team Lead, Regulatory Affairs & Technical Documentation, Metecon
According to MDR/IVDR Annexes II and III, among other things, the product description, GSPR mapping, risk management, V&V, clinical evaluation or performance evaluation, labeling, and PMS must be included. However, consistency among these parts is crucial: Even if the technical documentation is formally complete, it can still contain contradictions—and that is precisely what leads to follow-up questions and iterative cycles during the evaluation process, ultimately resulting in delays in placing the device on the market.
The MDR and IVDR specify the exact content requirements. What matters most is a clear, searchable structure with a logical thread that is aligned with the expectations and requirements of your Notified Body. Metecon develops a documentation structure tailored to your product portfolio and QMS—robust evidence-based logic rather than a document landscape that has evolved haphazardly over time.
Key indicators include consistent versioning, clearly defined document validity periods, and traceability that links requirements, risks, verification and validation (V&V), and claims. When documents are not linked to one another, questions arise. In a gap analysis, Metecon examines whether the document control and change management processes of your QMS are aligned with your technical documentation—and closes any gaps.
Risk analysis, risk control, and residual risk assessment in accordance with ISO 14971 are linked to V&V, clinical evaluation or performance evaluation, usability, and PMS. This ensures that, for every change, it is clear which supporting documentation is affected. Metecon embeds these links in the QMS and in the technical documentation, ensuring that changes are evaluated and consistently tracked—without a patchwork approach.
Test plans, acceptance criteria, and test reports must be traceable to requirements, risks, and claims. Metecon structures the verification and validation documentation so that the Notified Body can trace the chain from the requirement through the test to the result.
Typical symptoms of patchwork documentation that has evolved over time include unclear responsibilities, conflicting content, and a lack of traceability. Metecon consolidates such records into a consistent documentation framework with a clear overarching theme. The starting point is a gap analysis that prioritizes what needs to be supplemented, corrected, or newly linked.
Findings from PMS and PMCF/PMPF, vigilance, and CAPA must be incorporated into risk assessment, clinical evaluation or performance evaluation, labeling, and, where applicable, SSCP/SSP. Metecon sets up the QMS and technical documentation to be updatable, ensuring that market-driven changes are incorporated in a structured and traceable manner—the file remains a living, valid document.
According to MDR/IVDR Annexes II and III, among other things, the product description, GSPR mapping, risk management, V&V, clinical evaluation or performance evaluation, labeling, and PMS are included. However, consistency among these parts is crucial: A formally complete technical documentation can still contain contradictions—and that is precisely what leads to inquiries and iterative cycles during the evaluation.
The key factors are risk class, product complexity, the quality and recency of the available data, and the extent of the gaps. Metecon begins with a gap analysis and then prepares a cost estimate—one that is predictable and budget-transparent. The process starts with a free initial assessment.
At Metecon, risk management is not a standalone document—it is a unifying logical element. These six interfaces demonstrate how consistency is achieved throughout the entire product life cycle.
Electrical Safety & EMC According to IEC 60601-1 and IEC 60601-1-2
Cybersecurity: IEC 81001-5-1, TARA, and SBOM
Biological Safety & Biocompatibility According to EN ISO 10993
Verification & Validation: Test Strategy and External Laboratories
Clinical Affairs: CER/PER, PMCF/PMPF, and Clinical Performance studies
Post-Market Surveillance: PMS Plan, PSUR, and SSCP/SSP
Regulatory Affairs: Marketing Authorization Strategy and International Markets
Digitalization of Regulatory Processes: Structured Data Management, Change Management, and Traceability
Quality Management According to ISO 13485: QMS Development, Audits, and Compliance Support
Start with a free initial assessment of your current documentation situation. We’ll provide you with a no-obligation estimate of the effort required and the next steps in no time.
Your contact:
Milan Weiß
Sales Manager
T: +49 621 123469-040
milan.weiss@metecon.de
