YarifyStart a conversation

EUDAMED automation and integration for device manufacturers

Yarify builds the mapping, validation, XML, bulk-upload, and M2M integration layers that connect approved data in Excel, ERP, PIM, PLM, or internal databases to EUDAMED. The result is a repeatable workflow with visible exceptions and record-level reconciliation—not another one-off export.

One accountable implementation path from source data to accepted state

Start with the failure or bottleneck you have now. Yarify can deliver one bounded layer or connect the complete workflow; every engagement keeps source ownership, validation evidence, and EUDAMED outcomes visible.

Workbook and portfolio conversion

Problem
Device data is held in Excel, CSV, or inconsistent legacy exports that do not preserve EUDAMED relationships.
Delivered outcome
A governed source model, approved field mapping, exception report, and traceable XML-ready dataset.
See Excel-to-XML implementation →

Bulk XML preparation and validation

Problem
Teams can assemble records, but uploads fail late or cannot be reconciled to individual source rows.
Delivered outcome
Versioned XML packages, layered preflight results, correction workflows, and record-level processing evidence.
See bulk XML delivery →

ERP, PIM, and PLM integration

Problem
Approved device facts are split across business systems with unclear ownership and incompatible structures.
Delivered outcome
Source adapters, a canonical device model, governed synchronization, approval controls, and reconciliation.
See source-system integration →

M2M exchange and production operations

Problem
High-volume or frequently changing portfolios have outgrown manual transmission and exception handling.
Delivered outcome
A production-ready DTX workflow covering the data layer, Access Point integration, responses, retries, and monitoring.
See M2M implementation →

Not sure which route fits? Send the current data location, approximate volume, change frequency, and known submission problem. The first assessment is about choosing the smallest useful implementation—not selling the most complex option.

Discuss your EUDAMED workflow

Begin with evidence, then build the smallest complete path

You do not need a perfect master-data programme before the first conversation. A difficult but representative sample gives both teams something concrete to test.

  1. Assess a representative sample

    Review the actual source structure, device population, data ownership, update frequency, known failures, and intended submission route.

  2. Define a testable implementation boundary

    Agree the records, mappings, validation layers, exceptions, environments, deliverables, and acceptance evidence before development begins.

  3. Build and prove the workflow

    Implement the smallest complete path, test difficult records, show source-to-result traceability, and extend only after the pilot is accepted.

EUDAMED is one system with six connected modules

EUDAMED is the European Commission IT system established under the MDR and IVDR to collect and process information about medical devices. The Commission lists six connected modules plus a public website. See the official EUDAMED overview.

Commission Decision (EU) 2025/2371 confirmed the functionality of four electronic systems. Actor Registration, UDI/Device Registration, Notified Bodies and Certificates, and Market Surveillance became mandatory on 28 May 2026. The decision and its scope are available in EUR-Lex.

Market Surveillance is mandatory for competent authorities and the Commission. The manufacturer-facing automation problem addressed here is primarily the preparation and maintenance of UDI/device data, together with the actor and certificate references on which that data depends. The clinical investigations/performance studies and vigilance/post-market surveillance modules are not treated as already available production automation targets.

ModuleStatus on 9 September 2026Why it matters to device-data work
Actor RegistrationMandatory since 28 May 2026Provides the actor context and identifiers used by downstream workflows
UDI/Device RegistrationMandatory since 28 May 2026Holds UDI and device information submitted by manufacturers
Notified Bodies and CertificatesMandatory since 28 May 2026Supplies certificate relationships relevant to applicable device records
Market SurveillanceMandatory since 28 May 2026Used by competent authorities and the European Commission
Vigilance and post-market surveillanceIn developmentDo not design a production submission claim around unreleased functionality
Clinical investigations and performance studiesUnder analysisTreat future integration details as version-dependent until officially released

The difficult part is the data lifecycle, not the final click

Registration becomes a software problem when approved facts are distributed across files and systems, expressed in local terminology, or maintained without a reliable link to the EUDAMED record.

Inventory the source data

Identify which fields live in regulatory files, Excel, ERP, PIM, PLM, certificate records or local databases—and who owns each value.

Model device relationships

Keep actor, Basic UDI-DI, UDI-DI, packaging, certificate and market information connected without flattening one-to-many records into ambiguous cells.

Map controlled values

Translate internal codes into the current EUDAMED enumerations while retaining the source value and mapping decision for review.

Validate before submission

Check completeness, data types, XSD structure, controlled lists, cross-field dependencies and applicable business rules before a user or integration sends data.

Generate the submission

Create the correct XML service and entity structure for bulk upload or M2M instead of treating XML as a formatted spreadsheet export.

Reconcile the outcome

Capture acknowledgements and record-level results, route exceptions to an owner and keep the internal state aligned with the accepted EUDAMED state.

The Commission publishes XSDs, XML samples, service definitions, business rules, enumerations and data dictionaries as separate technical artefacts. A durable implementation versions its mappings and tests against the applicable release instead of treating one sample XML file as the complete specification. See the official technical-documentation catalogue.

Manual UI, bulk XML and M2M solve different operating problems

The Commission defines three input methods. UI entry is manual. XML upload is semi-automated because software may generate the file but a user still transmits it. M2M sends XML automatically between an external backend and EUDAMED. The official data-exchange guidance also warns that M2M may be too costly where volume or transmission frequency is low.

MethodAutomationHuman stepSetupBest fitMain limitation
EUDAMED user interfaceManual entry and confirmationA user enters and submits each recordLowest technical setupSmall, stable portfolios and infrequent changesRepetitive work and manual consistency checks grow with volume
Bulk XML uploadAutomated preparation; manual transmissionA permitted user uploads the generated XML through EUDAMEDMapping, XML generation and validationPeriodic batches from structured spreadsheets or business systemsThe upload and response-handling workflow still needs an operator
M2M data exchangeBackend-to-backend exchangePeople govern data and exceptions rather than each transmissionHighest: connector, Access Point, security, testing and operationsHigh volume, frequent updates or an established product-data backendCan be disproportionate when volume and submission frequency are low

Use device count as a prompt, not a rule

The Commission offers an indicative tip: use the UI for up to 100 devices, bulk upload for 100–1,000 and M2M for more than 1,000. These are not regulatory thresholds. A 300-device portfolio with weekly updates may justify more automation than a stable portfolio of 1,200 records. Data quality, change frequency, internal-system readiness and support capacity belong in the decision. See the official modes-of-input guidance.

Start from the manufacturer situation, not a software label

The matrix below is an implementation starting point. It does not determine regulatory applicability or replace a review of the current EUDAMED documentation.

SituationOperational signalTechnical starting pointGo deeper
A small portfolio changes rarelyUp to roughly 100 devices; data already approved and easy to findManual UI with a governed preparation checklistCompare all three methods →
Hundreds of devices are maintained in ExcelRepeated fields, inconsistent labels and periodic registration batchesNormalize the workbook, validate it and generate bulk XMLExcel to XML →
A prepared XML file is rejectedSchema, enumeration, dependency or service-level errors are unclearRun a layered validation and preserve a field-level error reportXML validator →
Product data is split across ERP, PIM and PLMNo single export contains all approved regulatory and product attributesDefine ownership and a canonical device-data model before choosing transportERP integration →
Thousands of devices change frequentlyContinuous updates, a capable backend and recurring reconciliation workAssess whether full M2M is proportionate and operationally supportableM2M integration →
A legacy portfolio must be registeredMultiple source formats, duplicate values and incomplete ownershipRun a controlled migration with exceptions, acceptance criteria and reconciliationData migration →

One reusable data pipeline, three possible submission paths

Transport should be replaceable. The source mapping, canonical data, validation evidence and reconciliation log remain useful whether the organisation begins with bulk XML and later moves to M2M.

  1. Source systems

    Excel · CSV · ERP · PIM · PLM · databases

  2. Canonical device model

    Stable internal entities, identifiers, ownership and relationships

  3. Validation and approval

    Completeness · transformations · XSD · enumerations · business rules

  4. Submission adapter

    UI worklist · bulk XML package · M2M connector

  5. EUDAMED processing

    Authenticated submission and platform-side validation

  6. Reconciliation

    Responses · accepted state · exceptions · audit evidence

For M2M

The Commission lists an eDelivery-compatible product or service, Actor registration, an LAA user, Party ID, module-specific security keys and completed Playground onboarding among the prerequisites. These are added to the data pipeline; they do not replace it. See the official M2M prerequisites.

For UDI/device data

Use the current MDR, IVDR and legacy-device datasets and module documentation as the factual baseline. The Commission links these resources from its UDI/Device registration page. Regulatory classification and applicability decisions must be supplied by the manufacturer or its qualified adviser.

What Yarify can—and cannot—take responsibility for

Technical implementation

  • Data discovery and field mapping
  • Canonical device-data models
  • Completeness, XSD and rule validation
  • XML generation and upload preparation
  • ERP/PIM/PLM and M2M integration
  • Migration, response handling and reconciliation

Regulatory accountability

Yarify is not a regulatory consultancy. We do not determine device classification, decide whether an obligation applies, approve product claims or guarantee MDR/IVDR compliance. The manufacturer and its qualified advisers own those decisions and the truth of submitted data; our role is to make the approved data controlled, testable and exchangeable.

EUDAMED automation questions

What can be automated in a EUDAMED device-data workflow?

Software can extract data from Excel, ERP, PIM, PLM or databases; map fields and controlled values; detect missing dependencies; generate XML; run XSD and business-rule checks; prepare bulk uploads; support M2M exchange; and reconcile processing results. Regulatory decisions such as device classification and the approval of submitted facts still require accountable human ownership.

Is bulk XML upload fully automated?

No. The European Commission describes XML upload as semi-automated: XML generation can be automated, but a user still uploads or downloads the file through the EUDAMED interface. M2M is the option designed for automatic exchange between an external backend and EUDAMED.

When should a manufacturer consider EUDAMED M2M?

The Commission gives an indicative tip of UI entry up to 100 devices, bulk upload for 100–1,000 and M2M above 1,000. Those are not legal thresholds. Change frequency, internal-system readiness, exception volume, security, infrastructure and support cost also determine whether M2M is proportionate.

Can an Excel file be converted directly into EUDAMED XML?

It can be a source, but reliable conversion usually needs an explicit mapping layer. A flat row may need to become several related entities, local labels may need controlled-value mappings, repeated data may need child structures, and conditional fields must be checked before XML generation.

Does XSD-valid XML guarantee acceptance by EUDAMED?

No. XSD validation checks the permitted XML structure and data types. EUDAMED publishes business rules, enumerations, service definitions and data dictionaries separately, so a structurally valid file can still conflict with a controlled value, dependency, reference, version or service rule.

Does Yarify provide regulatory advice or guarantee MDR/IVDR compliance?

No. Yarify implements software for data mapping, validation, XML generation, integration, migration and reconciliation. The manufacturer and its qualified regulatory advisers remain responsible for classification, applicability, regulatory interpretation and approval of the data submitted.

Start with your device data and current systems

Tell us how many device records you manage, where the data is stored, how often it changes and whether you expect manual, bulk XML or M2M submission. We can map a practical technical route for validation and automation.