Scarlet

Updated June 16, 2025
Scarlet is an interesting notified body. It's the only notified body you might call a "startup", in the sense that 1) it's been founded recently, 2) it's actually trying to use fancy new technology (vs. using Excel spreadsheets) and 3) the average age of its employees is lower than a hundred years old. Just kidding for the last one. The others might be true. Chuckle.

Still, that makes it quite interesting. The knee-jerk reaction I had to Scarlet was that we, as OpenRegulatory, should instantly send all our current and future customers there. Because.. what a breath of fresh air! After 5+ years in this industry, I sometimes feel like I have some sort of PTSD from sitting in all those borderline useless audits, with auditors who last wrote code 50+ years ago, when programming mainframes in caves. So it would be really, really cool if some startup came along, went through the (probably very painful) process of becoming a notified body, and would actually service all those startups which want to bring cool medical devices to market.

That was my hope for Scarlet.

The reality is a bit more nuanced, and that's why I can't completely recommend Scarlet, at least for now. This mainly boils down to pricing.

Scarlet Pricing

Scarlet's pricing model is subscription-based and, last I checked, it starts at 5k€ / month. Personally, I don't like this (read on), but, objectively, it's complicated.

First off: 5k€ / month is actually very expensive for startups. Why? Because startups typically budget in a way in which they allocate a budget of X€ for their initial certification, after which.. the future is unclear, as they'll probably go and look for more investment after they've achieved that.

So startups typically plan in this way:
  • Initial certification takes ~2 years (including creating documents, developing product, etc.).
  • Typical cost of typical EU MDR notified bodies might be 50-80k€.

Okay, so you've got 2 years, and 50-80k€ for a typical notified body.

How does Scarlet compare?

If you take their subscription model of a minimum of 5k€ / month, you end up with a whopping 120k€ for those two years, which makes it ~2-3x more expensive than most other notified bodies out there.

But, look.. as always, it's even more nuanced than that. I regularly talk to one of the founders (Hi, Jamie!), and the points he makes are these:
  • Startups usually don't pay for 2 years to get their initial certification - Scarlet tends to be "fast" (no hard numbers, but I'd guess 1-3 months), so you only pay for 1-3 months for your initial certification; but then, of course, the subscription continues. Still, the first certification is "cheap", and, in theory, you could abuse this system and move to another notified body immediately after your first certification at Scarlet (not recommended - moving NBs is a huge pain, by the way).
  • The subscription fee includes unlimited updates and any sort of other work from Scarlet. So, you can literally submit an unlimited number of product (e.g. software) updates to Scarlet, and you don't pay extra. Contrast this with other notified bodies who charge you by the hour for this.

So yeah, those are valid points.

Still, personally, I do wonder why Scarlet doesn't offer some sort of hybrid pricing model, something like:
  • 50k€ for the initial certification (fixed price)
  • And then, once you start handing in the second version of your medical device for certification, "start" the subscription (at, say, 5k€ / month).

That would be an awesome pricing model, because you get 1) a fixed price for the initial certification (useful and easy to budget for startups, easier to compare, just undercut the expensive German competition, etc.) and 2) it aligns well with startups getting additional funding for their "v2" of their device which usually comes with a more relaxed budget which would allow spending on a "notified body subscription".

That would be cool. But not sure if they'll ship this. In the meantime, you're left with the "normal" subscription model.

Again, pros and cons. Your opinion might differ, and the value you get out of this subscription might be vastly bigger if your company ships a ton of product updates. But, in my experience with 100+ startups, most startups just tend to ship one version (at least for a long time). Anyway.

Scarlet Submission & Data Model

In the past, Scarlet had a custom submission "software". Roughly speaking, the procedure was that you manage your data (technical documentation etc.) within this Scarlet software, which would streamline the entire submission process, because the data model was rather, um, restrictive, so it was (probably) really easy for Scarlet to check the completeness of your submission.

I talked to a few startups who were considering this, and I thought it looked pretty terrible.

The good news is that Scarlet has since moved away from this! So, nowadays, you can submit in whatever file format you want, and Scarlet will sort it out on their end. This is a really cool change!

Final Thoughts

Sometimes I feel like Scarlet is the notified body of the future, but it's forcing the future on us while we're not ready yet.. chuckle. Like, I do think that medical device updates will become more frequent in the future, and the use of software / AI magic to audit and process these updates will become more commonplace. Also, a subscription model naturally aligns well with that. Scarlet is doing all of that.

But the problem is that human perception changes rather slowly: Right now, people still expect a mostly-fixed-price-offer from their notified body. This makes Scarlet a hard sell, because psychologically it hurts to see that your company is paying x,xxx€ / month while (potentially) not making any use of it (no product updates).

Sometimes, I wonder: If Scarlet would simply had set out to build not "the notified body of the future" but instead "the notified body of the present which doesn't suck", that would have been an awesome proposition. With things like:
  • Lower initial certification costs (say, 30k€ instead of 50k€).
  • More competent technical staff which actually have technical experience.
  • Fast turnaround times.

That would have been awesome. But somehow, I feel, Scarlet is 1) a little too far in "the future" and 2) the pricing model just doesn't work particularly well for now.

Anyway, those are my thoughts, but do share your experiences in your notified body review form below!

4 Reviews

4.3 Good · 4 reviews
Read all reviews
Overall experience
4.3
Well-organized / responsive
4.0
Regulatory pragmatism
4.8
Technical competence
5.0
Log in or sign up to contribute your own notified body review. It’s free.

January 22, 2026

Review by company with 10-49 people

QMS audit done
Techdoc audit done
Overall experience
Well-organized / responsive
Regulatory pragmatism
Technical competence
Wait time before QMS audit
0 Months
Wait time before Techdoc audit
0 Months
Wait time before QMS certificate
0 Months
Wait time before Techdoc certificate
0 Months
Approx. cost (EUR)
Not specified
Summary:
Scarlet brings a modern, pragmatic approach to SaMD regulation that meaningfully reduces friction for fast-moving software and AI teams.

What works well:
  • Deep SaMD and software expertise: Strong understanding of modern software and AI development practices makes structured dialogue clear, efficient, and far easier than with more traditional notified bodies.
  • Predictable pricing model: Clear, upfront pricing simplifies cash-flow management, with regulatory costs that include new software versions rather than penalising iteration.
  • Fast turnaround on new versions: Review of a new release was completed in ~2 weeks. It was a welcome change for our own internal processes to be the rate-limiting factor rather than notified body availability or process - even for a full AI retraining and intended use evolution.
  • Focus on execution over negotiation: The pricing structure favours actually executing audits rather than spending time negotiating how many audit days might be required.
  • Remote-friendly audits: The team is well set up for remote assessments, making it easy to work with distributed engineering and regulatory teams.

Things to be aware of:
  • Evolving organisation: As a growing notified body, Scarlet’s processes and systems continue to evolve, which may require manufacturers to be flexible in evolving their own processes to align effectively.
  • Requires strong internal ownership: The structured dialogue is focused on assessment and clarification rather than consultancy, and works best when manufacturers come prepared with clear technical and regulatory positions.
  • Less prescriptive approach: Teams used to highly templated or legacy regulatory processes may need to adjust to a more principles-based assessment style.

Overall impression:
It’s refreshing to work with a notified body whose mission is to enable the next generation of medical technology, rather than forcing modern AI and software into last-generation regulatory frameworks. Scarlet’s approach maintains clear regulatory boundaries while actively modernising how assessments are conducted.

Scarlet ask me to leave a review, but I took the time because I think they are great, I want them to succeed and I think they will shape the future of the industry, directly or indirectly. I have not been paid or in anyway incentivised to leave a review; I'm just a big fan.
Yes, I would choose this notified body again.

December 03, 2025

Review by company with 10-49 people

QMS audit done
Techdoc audit done
Overall experience
Well-organized / responsive
Regulatory pragmatism
Technical competence
Wait time before QMS audit
?
Wait time before Techdoc audit
?
Wait time before QMS certificate
?
Wait time before Techdoc certificate
?
Approx. cost (EUR)
Not specified
Scarlet are our notified body and did our ISO 13485 certification, and our certification for a complex class IIa AI device under EU MDR. I'd strongly recommend any SaMD device to use them as their notified body. I've previously worked with a handful of the older NBs - BSI, UL, TUV etc and working with Scarlet has been a radically better experience. 

They move much much faster than a standard notified body, and their submission platform and processes are evolving all the time to further add efficiency (e.g. older reviews below re GitHub structure and skills requirements no longer apply to the latest submission platform). Their responsiveness is also on a totally different level to the other NBs I've worked with - with Scarlet it's common to get responses to queries within minutes, where incumbents would often take days. 

The benefits of specific software focus and expertise in a NB also became very apparent to us during the process. Being specifically dedicated to software devices mean that their team and processes are designed around software clearances, and their assessors have far greater (and modern) technical backgrounds in software than you'll get with anyone else on the market. 

All of this means that your initial device clearance will be a faster, better experience with Scarlet, but then the big advantage is actually post-clearance. Their whole approach is built around making device updates (including substantial changes) as efficient as possible. Historically this has always been the biggest frustration with SaMD and older notified bodies - manufacturers end up only being able to ship meaningful updates to their device a couple of times a year because of the regulatory process and cost burden. By streamlining these processes and wrapping it all into a subscription model, Scarlet have now made it possible to release far more frequent updates, which ultimately means our product gets better faster, and patients can always benefit from the best possible version of the device. 

Because of this point, I would actually disagree with the openregulatory summary above relating to the subscription model. For us the subscription model has actually been a better pricing approach than the old-fashioned fee per hour/submission approach. This is partly because it gives us much greater predictability over our regulatory spend, but also because it means we're able to ship updates frequently without cost being a factor or barrier in that decision. As a result its not uncommon for us to make updates to our SaMD on a monthly or even fortnightly basis, and I don't believe there is currently any other NB who could facilitate anything close to that sort of release cadence!
Yes, I would choose this notified body again.

June 13, 2025

Review by company with 50-249 people

QMS audit done
Techdoc audit done
Overall experience
Well-organized / responsive
Regulatory pragmatism
Technical competence
Wait time before QMS audit
?
Wait time before Techdoc audit
?
Wait time before QMS certificate
?
Wait time before Techdoc certificate
?
Approx. cost (EUR)
Not specified
Scarlet is a start-up Notified Body that, despite some early teething issues, has impressed us with its responsiveness and the expertise of its QMS and technical reviewers.

Having previously worked with several larger Notified Bodies, it's been refreshing to engage with a team that demonstrates genuine interest in our technology and maintains excellent communication throughout the review process. 

Their submission platform is relatively complex and best suited to teams with strong software capabilities. However, we’ve already seen encouraging signs that significant usability improvements are on the horizon to make it easier to submit documentation.

Scarlet are not the lowest cost provider out there, but we've been happy to see that device change and PSUR reviews are included in the monthly price, making regulatory budgeting more predictable. 

Overall, highly recommended. 
Yes, I would choose this notified body again.

September 27, 2024

Review by company with 10-49 people

QMS audit done
Techdoc audit done
Overall experience
Well-organized / responsive
Regulatory pragmatism
Technical competence
Wait time before QMS audit
?
Wait time before Techdoc audit
?
Wait time before QMS certificate
?
Wait time before Techdoc certificate
?
Approx. cost (EUR)
120,001 €
Scarlet Pros

1. Modern Communication: Young, tech-savvy team uses tools like shared Slack channel for communication.
2. Innovative Submission Process: Uses GitHub and markdown files instead of traditional PDF/Excel documents.
3. Structured Guidance: Atomic forms provide clear expectations and reduce ambiguity.
4. Remote Audits: Less time-consuming than traditional on-site audits.
5. Responsive to Feedback: Implements improvements in a reasonable timeframe.
6. Customer-Centric Approach: More focused on customer needs compared to traditional notified bodies.

Scarlet Cons

1. High Learning Curve: Requires proficiency in GitHub and markdown, challenging for non-technical staff.
2. Lack of Overview: Splitting documents into multiple files makes it difficult to maintain a holistic view.
3. Unclear Process Structure: Unexpected additional checks and steps not communicated in advance.
4. Expensive Subscription Model: Potentially high long-term costs, especially for startups.
5. Rigid Software: Limited flexibility for customization or adding rationale for decisions.
6. QMS Limitations: Not a complete QMS solution, requiring additional tools and manual work.
7. Data Export Challenges: Difficulty in converting data back to traditional document formats.

Performance
  • Initially slower than expected, but likely to improve over time.
  • Strong and capable team overall.

Best Suited For
  • Startups with small, tech-savvy teams (including regulatory/clinical affairs).
  • Companies planning multiple medical software devices with frequent significant changes.

Not Recommended For
  • Teams lacking technical expertise (especially in Git/GitHub).
  • Single medical device projects with infrequent significant changes.

Additional Notes
  • Venture capital-driven, which may influence priorities.
  • Subscription model can be expensive long-term (rumored up to €12k/month for some startups).
  • Remote audits are a significant advantage.
  • Requires maintaining separate QMS with SOPs and evidence collection.

(Editorial note: Scarlet charges a monthly fee, in this case 5k€ / month. As our price field only displays numbers, we entered an exemplary cost over 2 years which is 5k€ * 24 months = 120k€.)
No, I would not choose this notified body again.

Related