What Is a Notified Body? (And Do You Need One?)

Slap the wrong number under your CE mark and you can find out the hard way that it mattered. A distributor's compliance team, a customs officer, or a market surveillance inspector only needs a few minutes to check it, and if your product needed independent sign-off but only carries your own signature, that gap can hold a whole shipment at the border. The good news is that working out whether you need a notified body, and confirming a real one, takes about ten minutes once you know where to look. The European Commission's own NANDO database lists every legitimate notified body in the EU, and the most recent Team-NB survey counted 51 bodies designated just to certify medical devices.

What is a notified body, exactly?

A notified body is an organisation that an EU member state's government has formally designated to test and certify certain products before they reach the market. You don't get to pick just any lab. The body has to be independently accredited, assessed by its national authority, and then "notified" to the European Commission, which is why the name has stuck.

Each one gets a four-digit identification number under Decision 768/2008/EC, the EU rulebook that standardises how conformity assessment works across different product laws. That number is what ends up printed next to the CE mark on a certified product, and it's the single easiest thing to check if you want to know whether a certificate is real. We cover the underlying concept in more depth in our notified body glossary entry.

Crucially, a notified body isn't a general testing lab you hire for convenience. Its scope is fixed by its designation: a body might be notified for machinery and PPE but not for medical devices, or for one specific PPE category but not another. Using a body outside its designated scope produces a certificate that's worthless, even if the testing itself was done properly.

What does a notified body actually do?

The job splits into a handful of concrete tasks, and which ones apply depends on the "module" your product's legislation assigns to it:

• Reviewing your technical file and design documentation against the relevant harmonised standards.
• Running EU-type examination testing on a representative sample, then issuing a certificate if it passes.
• Auditing your factory's quality management system, where the law requires ongoing production surveillance rather than a one-off test.
• Carrying out periodic follow-up audits or batch testing for as long as you keep selling the product.
• Maintaining the paperwork trail that a market surveillance authority can request years later.

That last point catches manufacturers out. A notified body relationship isn't a single transaction you complete and forget. For higher-risk product categories, it's an ongoing arrangement with yearly or random-interval checks built in, which is one reason certification costs more for regulated categories than founders often expect.

Self-certification vs third-party assessment: which applies to you?

Most CE-marked products never touch a notified body. The default route under EU product law is Module A: you test your own product against the harmonised standards, compile a technical file, sign a Declaration of Conformity, and affix the CE mark yourself. No external number appears anywhere. We've written a full walkthrough of this route in our guide to CE marking self-certification.

But a shortlist of higher-risk categories doesn't get that option. The legislation itself names a mandatory third-party route, and no amount of internal testing substitutes for it. The three biggest examples are:

Personal protective equipment rated Category III under the PPE Regulation, formally Regulation (EU) 2016/425 — anything meant to protect against risks that could kill or cause irreversible harm, from fall-arrest harnesses to breathing apparatus.

Machinery falling into the highest-risk list under the Machinery Regulation, formally Regulation (EU) 2023/1230 — things like certain chainsaws, portable cartridge-operated fixing tools, and machinery for lifting people.

Most medical devices above the lowest risk class, which need notified body involvement under the Medical Devices Regulation — something we go through step by step in our guide to CE marking for medical devices.

Picture a small UK workwear brand developing a fall-arrest harness for scaffolders, rated to hold a worker's fall from height without the strap failing. Because that's a Category III PPE risk, the company can't just write its own declaration and start shipping. It has to send technical drawings and physical samples to a notified body, sit through type-examination testing, and then commit to either yearly batch checks or a full factory audit under an ongoing surveillance module. Skip that step and the harness has no valid CE mark at all, whatever paperwork sits in the file.

Finding a notified body isn't instant, either, and capacity has been a genuine bottleneck at times. Gary Slack, BSI Group's senior vice president of medical devices, told MedTech Dive that "it's quite difficult to find a notified body at the moment because everyone's kind of overwhelmed" during the run-up to the EU's Medical Device Regulation deadline. Budget months, not days, if your product falls into one of these categories, and start the conversation with a notified body as early as you start your design.

Which products legally need a notified body?

The table below shows the general pattern across the product categories manufacturers ask about most. Always check the specific legislation for your exact product, since risk classes and annex lists get updated.

How do you check a notified body's number is genuine?

Every legitimate notified body is listed on NANDO, the Commission's own database, and checking one is free and quick. Search by the four-digit number printed on your certificate, or by the body's name, and the record will show you exactly which legislation and which product categories that body is designated for.

That last detail matters more than people expect. A body can be entirely genuine and still be the wrong one for your product, because its designation only covers certain legislation or certain categories within it. NANDO also flags whether a designation has been suspended, withdrawn, or restricted, which happens occasionally when a body falls short of an audit. If you're ever unsure whether your own product needs this step at all, our product compliance checker is a faster starting point than working through the legislation cold.

What happens if a notified body number turns out to be fake?

A CE mark that quotes an invalid, expired, or out-of-scope notified body number is treated by market surveillance authorities as if no certification happened at all. That's true even if your product genuinely passed every test somewhere along the way. The consequences follow the same pattern as any other CE marking failure: authorities can order a recall, block further sales, and in more serious enforcement cases, refer the matter for prosecution. If you're importing finished goods rather than manufacturing them yourself, this is exactly the kind of gap that catches people out, where a supplier's paperwork might reference a notified body number that no longer checks out.

The fix is always the same regardless of how the error crept in: verify the number on NANDO before you rely on it, keep a copy of the search result in your technical file, and re-check periodically if you're using the same notified body across multiple product lines. A five-minute lookup now is considerably cheaper than a recall later.

If you're still working out whether your product needs a notified body at all, the fastest next step is a quick check against your specific category, then a search on NANDO once you have a number to verify.