IVDR (In Vitro Diagnostic Regulation) is European Union legislation fundamentally reshaping the digital pathology market. Unlike laboratory chemistry equipment that processes chemical reactions, digital pathology image management systems are considered "in vitro diagnostic devices"—they process diagnostic information and directly influence clinical decision-making. IVDR mandates that these systems meet specific quality, safety, and performance standards before they can legally be used in clinical diagnostic environments.
IVDR compliance is not optional for organizations performing clinical diagnostics in Europe. It is a legal requirement. Organizations using non-compliant digital pathology systems for clinical diagnostics face potential regulatory action, liability exposure, and reputational risk. Understanding IVDR is therefore critical for procurement teams, compliance officers, and healthcare IT leaders. Many organizations evaluate leading digital pathology solution providers in Europe to ensure compliance, interoperability, and long-term platform support.
This guide explains IVDR regulation, CE-marking requirements, and organizational compliance responsibilities.
IVDR is European Union regulation (EU 2017/746) governing in vitro diagnostic devices. It replaced the earlier IVD Directive and became progressively effective from 2022-2025. IVDR applies to any device that processes diagnostic information—detecting disease, evaluating test results, or supporting clinical decision-making.
Digital pathology systems are in-scope under IVDR because they process pathology images and provide diagnostic support. The image management component (storage and retrieval) may be lower-risk; the diagnostic decision support component (AI algorithms, annotation tools) are explicitly in-scope.
Key Principles of IVDR:
CE-Marking is mandatory for clinical use. In vitro diagnostic devices intended for clinical use must be CE-marked (Conformité Européenne—European Conformity). CE-marking certifies that the device meets EU safety and performance standards. Only CE-marked systems can legally be marketed and used for clinical diagnostics in the EU.
Classification Determines Compliance Pathway. IVDR classifies in vitro diagnostics into three risk classes:
Classification determines compliance pathway—Class A has simplified requirements; Class C requires extensive clinical validation.
Notified Body Review is required. Compliance with IVDR is verified by independent third parties called "Notified Bodies"—organizations designated by EU member states to conduct conformity assessments. For higher-risk devices, Notified Body review is mandatory. Vendors cannot self-declare compliance for high-risk devices.
Post-Market Surveillance is continuous. IVDR requires ongoing monitoring of device performance after market release. Vendors must maintain complaint systems, track adverse events, and report serious incidents to competent authorities. Organizations using devices must report serious adverse events
Technical Documentation Must Be Comprehensive. Vendors must document the scientific evidence supporting device claims—clinical validation studies, algorithm development methodology, risk management processes, and quality assurance procedures. This documentation is reviewed by Notified Bodies and made available to organizations using the devices.
IVDR applies differently depending on the digital pathology solution's intended use and claimed functionality. Understanding this distinction is critical because it determines whether a solution requires CE-marking.
Digital pathology systems used in clinical diagnostic pathways (providing diagnostic information that directly influences patient care decisions) are in IVDR scope and require CE-marking. Examples:
Compliance Requirement: CE-marking is mandatory. Organizations cannot legally use non-CE-marked systems for clinical diagnostics.
Digital pathology systems used exclusively in research and development environments are exempt from IVDR. Examples:
Compliance Requirement: IVDR exemptions apply. CE-marking is not required if the system is genuinely research-only. However, if research systems are later used clinically, CE-marking must be obtained before clinical deployment.
Some digital pathology solutions operate in gray areas between clinical and research:
These borderline cases are evaluated individually by regulatory authorities and notified bodies based on intended use. Organizations considering solutions claimed to be "research-only" but used in clinical contexts should verify with vendors and regulatory counsel.
CE-marking is the process by which vendors demonstrate compliance with IVDR and obtain permission to market devices in the EU. The process involves several steps:
Vendors must classify their devices into one of three classes based on risk to patient safety and clinical decision-making:
Class A (Lowest Risk):
Class B (Moderate Risk):
Class C (Highest Risk):
Vendors develop comprehensive technical documentation including:
For moderate-risk and high-risk devices, vendors submit technical dossiers to independent Notified Bodies for conformity assessment. Notified Bodies review documentation, request clarifications, and conduct audits of vendor quality systems.
Upon successful conformity assessment, vendors are permitted to apply CE marks to devices and market them in the EU. Organizations can then purchase and deploy CE-marked devices.
The distinction between clinical diagnostic and research-use environments is critical for understanding IVDR scope. Organizations often operate both clinical diagnostic pathology and research pathology, requiring different regulatory approaches.
Definition: Pathology workflows where diagnostic findings directly influence patient care decisions—diagnosis, treatment selection, prognosis assessment, or disease monitoring.
IVDR Requirements:
Example: A pathologist using a digital pathology system to diagnose skin cancer. The system is clinical-use, requiring full IVDR compliance.
Regulatory Timelines:
Definition: Pathology research where findings are not directly used for patient care decisions—algorithm development, biomarker discovery, comparative effectiveness research, or clinical trial pathology.
IVDR Exemptions:
Example: A biotech company analyzing pathology images to develop a cancer biomarker. The system is research-use, exempt from IVDR.
Regulatory Timelines:
Critical Boundary: Once research-use data is employed to support clinical diagnosis (even if only as advisory), the system may transition to clinical-use scope, requiring IVDR compliance.
While vendors are responsible for CE-marking and technical compliance, organizations have specific compliance responsibilities:
Organizations must verify that digital pathology systems purchased for clinical use are CE-marked and compliant with IVDR. Verification steps:
Organizations must ensure that their specific use of devices aligns with vendors' declared intended use. If an organization uses a device in ways not included in vendor's clinical validation studies, the organization may be liable for compliance gaps.
Example: A vendor provides CE-marking for general cancer diagnostics. An organization uses the system for rare cancer subspecialty diagnostics not included in vendor's clinical validation studies. The organization may need to conduct additional validation or risk compliance exposure.
Organizations must establish processes to identify and report serious adverse events to vendors and regulatory authorities. Serious adverse events include:
Organizations must maintain complaint files and periodically review them with vendors.
Organizations must participate in vendors' post-market surveillance programs by:
Organizations must ensure that pathologists and lab personnel using digital systems are trained on:
IVDR implicitly requires that clinical users have appropriate training and competency.
Achieving IVDR compliance for digital pathology deployment models is a multi-phase process spanning 12-24 months. Organizations should budget accordingly.
Activities:
Outcomes:
Activities:
Outcomes:
Activities:
Outcomes:
Activities:
Outcomes:
IVDR is evolving in response to emerging technologies and regulatory experience. Organizations should monitor:
The EU is developing AI Regulation (AI Act) that will have implications for AI-based diagnostic systems. Vendors may face increasingly stringent requirements for:
Organizations should evaluate vendors' AI governance practices and roadmaps.
The FDA (United States) and PMDA (Japan) are developing compatible regulations with IVDR. Vendors with multi-country compliance may have more mature compliance infrastructure than vendors targeting EU-only. Organizations should consider vendors' international regulatory presence as an indicator of compliance maturity.
Regulatory authorities are increasingly requiring post-market real-world performance data—how devices perform in actual clinical use, not just in clinical studies. Organizations should expect vendors to request performance data and participate in registries. The impact of IVDR regulations and future compliance-driven investments is explored in the Europe Digital Pathology Image Management Market Forecast. Digital pathology solutions in Europe increasingly require compliance with CE-IVDR frameworks and standardized interoperability practices.