IMSQ.
  • How it works
  • Plans & pricing
  • Free fit check
Sign inBook a reviewBook a programme review
IMSQ.

Institute of MedTech Software Quality. Expert support. Practical learning. Work your team can own.

Product
  • How it works
  • Plans & pricing
  • Free fit check
Company
  • Trust
  • Support
  • Book a programme review
Legal
  • Terms
  • Privacy
  • Advisory Boundary
For experts
  • Become an Expert
  • Sign in
© 2026 Institute of MedTech Software QualityRev 2026.09 · issued for medtech software teams
Readiness Diagnostic · Tier 1 · free · no login

Regulatory and quality readiness for SaMD and SiMD.

This diagnostic screens your regulatory and quality readiness for SaMD and SiMD, estimates where the gaps are likely to be, and shows where an engagement should focus. It asks you to name the evidence behind each claim. Answer as you are today. “Unsure” is a valid answer and is never held against you.

  • No login
  • Saves automatically
  • 35 items on Tier 1
  • About 15 to 20 minutes

You start on Tier 1, the fast first pass.

Deeper tiers open only where they are needed.
T1You start here
Foundational Assessment

The fast first pass. It establishes device nature, target markets, whether the classification holds up, top-level maturity and the biggest gaps. You get a provisional overall maturity level, an early overstatement index and first Expert flags.

Who answers
Founder, or head of regulatory or quality. One respondent.
Time
15 to 20 min
Items
35
T2If qualified
Detailed Assessment

The full diagnostic, once your assessment is qualified. It adds every standard dimension with full claim, evidence and confidence capture, mandatory record naming, and the full knowledge-check bank.

Who answers
RA/QA lead, software lead and, where it applies, clinical lead. Several people can answer.
Time
60 to 120 min
Items
125
T3Conditional
Deep-Dive Assessment

Targeted deep dives, opened only for dimensions flagged weak, overstated or high ambition. They refine the effort estimate to 160 or 320 or more hours and settle the Expert engagement profile and the discovery-phase recommendation.

Who answers
Domain owners, such as the data science lead for AI or the security owner for postmarket cybersecurity.
Time
45 to 90 min per domain
Items
43

Your company and product profile.

Tailors the questions. Nothing here is a score.

Product

Current lifecycle stage * (required)

Device and deployment

Device nature * (required)

Sets which lifecycle expectations apply. SiMD brings in the hardware and IEC 60601 context; SaMD brings in IEC 82304-1.

Deployment model * (required)

Decides which cloud, IEC 82304-1 and operating-system questions you see.

Technology

Technology flags * (required)

Unlocks the AI/ML section and the clinical decision support classification questions. Select all that apply.

Markets and ambition

Target markets * (required)

Unlocks the questions for each jurisdiction: eSTAR for the US; Rule 11, PMCF and PSUR for the EU.

Highest regulatory ambition * (required)

Sets the ambition multiplier in the effort estimate.

Privacy and safety class

Does your product process personal or health data? * (required)

Decides whether the GDPR and HIPAA privacy questions apply.

Software safety classification (IEC 62304) * (required)

Sets how deep the design questions go. Class C requires detailed design.

Organisation

Dedicated staff by function (optional; leave a row blank where you have none)

Count only dedicated staff, not people who wear two hats. For each function give the full-time-equivalent count and whether the capability is internal, contracted or absent.

Dedicated FTE count and sourcing per function
FunctionFTE countSourcing
Software engineering
QA
RA (Regulatory Affairs)
Clinical
Cybersecurity
Data science / ML
Human factors
Tier 1 has 8 sections. Your answers save automatically.
Your profile tailors the questions

As you answer below, we show which sections your profile unlocks. Nothing here is a score; it only tailors the questions.

What you will need
Your controlled documents

Have your QMS, risk file, software lifecycle and submission documents to hand. You will be asked to name the specific record and revision behind each claim.

It is fine not to have one

Where a document does not exist yet, say so. The diagnostic sizes the work ahead rather than grading you, and candour produces a more useful result.

Save and resume any time

Every answer is saved as you go on this device. Leave and come back; your progress is kept locally so you can pick up where you left off.

Respondents

Tier 1 is designed for a single respondent, typically the founder or the head of regulatory or quality. The deeper tiers add RA/QA, software and clinical leads, and multi-respondent collaboration opens once your assessment is qualified.