Introduction
A deficient Design History File or Risk Management File can stall a 510(k), trigger an FDA Warning Letter, or unravel an EU MDR Technical File review — often at the worst possible moment in your product timeline. DHF and RMF gaps are consistently cited among the top reasons for regulatory audit failures and submission rejections in 2026.
With the FDA's QMSR formally aligning 21 CFR Part 820 with ISO 13485 and EU MDR enforcement tightening across notified bodies, demand for specialized DHF/RMF remediation consulting has surged. Choosing the wrong partner means months of rework and delayed market access.
This post covers the top 10 DHF and RMF remediation consultants for medical devices in 2026 — each profiled by background, core strengths, and what they actually deliver — so you can match the right firm to your remediation scope and timeline.
TL;DR
- DHF remediation closes documentation gaps to meet FDA Quality Management System Regulation (QMSR) or ISO 13485 requirements; RMF remediation addresses ISO 14971 file gaps
- Triggers include audit findings, failed submissions, corporate restructuring, or post-acquisition due diligence
- Top consultants combine regulatory, quality, and clinical expertise with hands-on project delivery
- Key selection criteria: ISO 14971/13485 depth, FDA design control experience, audit clearance record, and flexible engagement models
- Elexes leads this list with 50+ years of collective experience, a 90% audit clearance rate, and 250+ completed projects across FDA and global markets
What is DHF/RMF Remediation for Medical Devices?
The Design History File (DHF) is the compiled record of design and development evidence required under FDA 21 CFR Part 820.30 and ISO 13485 Section 7.3. The Risk Management File (RMF) is the lifecycle documentation required under ISO 14971.
"Remediation" means closing gaps in these files retroactively to meet regulatory standards.
The concept of "DHF debt" occurs where documentation lags actual development activity, creating a delta that auditors and reviewers will flag. Depending on the severity of the gap, remediation can mean re-engineering evidence, re-performing risk analyses, or reconstructing traceability matrices from scratch.
2026 regulatory drivers making remediation urgent:
- FDA's QMSR — The Quality Management System Regulation became effective February 2, 2026, aligning 21 CFR Part 820 with ISO 13485:2016
- Increased EU MDR enforcement — Notified bodies scrutinize Technical Documentation structure and RMF completeness more rigorously
- Common triggers — Warning Letters, third-party audit non-conformances, pre-submission regulatory reviews, and post-acquisition due diligence
Top 10 DHF/RMF Remediation Consultants for Medical Devices (2026)
Each firm below was evaluated on DHF/RMF remediation track record, certifications held, client outcomes, and regulatory breadth across FDA, ISO, and EU MDR frameworks.
Elexes
Elexes is a medical device regulatory and quality consulting firm with 50+ years of collective experience, 250+ successful projects, and clients across the USA, UK, Europe, and Asia. Certifications include ISO 13485, ISO 14971, IEC 62304, and MDSAP—all core to DHF/RMF remediation work.
Differentiators:
- End-to-end project management from design controls through post-market surveillance
- Specialized regulatory due diligence team that proactively identifies DHF/RMF red flags before submission
- 90% audit clearance rate
- Flexible engagement models (full-time, part-time, or project-based)
- Complete data confidentiality
| Attribute | Details |
|---|---|
| Core Remediation Services | DHF gap assessment and reconstruction, RMF (ISO 14971) remediation, design control documentation, IEC 62304 software file remediation, CAPA-linked corrective documentation |
| Regulatory Coverage | FDA (21 CFR Part 820/QMSR), ISO 13485, EU MDR/Technical File, MDSAP, Health Canada, TGA, MHRA |
| Engagement Model | Project-based, part-time outsourcing, or full-time embedded support; global delivery with local-language auditors |
Regulatory Compliance Associates (RCA)
Regulatory Compliance Associates is a life sciences consulting firm, part of the Sotera Health/Nelson Labs group. RCA offers explicit DHF/Technical File remediation services focused on FDA design control remediation and ISO 13485 compliance.
Differentiators:
- Explicit DHF remediation service offerings
- Broader regulatory response capabilities for Warning Letters and 483s
- Strong FDA design control and inspection response expertise
| Core Remediation Services | DHF and Technical File gap closure, design control documentation reconstruction, regulatory response services for FDA 483/Warning Letters |
|---|---|
| Regulatory Coverage | FDA 21 CFR Part 820/QMSR, ISO 13485, EU MDR |
| Engagement Model | Time-and-materials estimates with tailored proposals based on project scope |
NAMSA
NAMSA is a medical research organization offering integrated consulting and CRO services. Their design controls and quality assurance consulting are well suited for DHF remediation.
Differentiators:
- Integrated regulatory + clinical offering
- Breadth across device classes
- Ability to handle DHF remediation alongside clinical validation evidence gaps
| Core Remediation Services | Design History File (DHF) creation, Design Controls improvements, risk management procedure updates, gap assessments, corrective actions |
|---|---|
| Regulatory Coverage | FDA QMSR/21 CFR 820, ISO 13485, EU MDR/IVDR, and other markets |
| Engagement Model | Request-a-consultation with phased/assessment-based approaches |
Emergo by UL
Emergo by UL is a global regulatory and quality consulting firm under UL. Their strengths include market access strategy, QMS implementation, and EU MDR Technical File support applicable to both RMF and DHF remediation engagements.
Differentiators:
- Global presence with 20+ offices on six continents
- Multi-market regulatory strategy
- Experience helping device companies remediate Technical Files for EU MDR conformity assessment
| Core Remediation Services | QMS strategy and design, Technical File support for EU MDR, regulatory documentation management (RAMS platform) |
|---|---|
| Regulatory Coverage | FDA, EU MDR/IVDR, ISO 13485, and other global markets |
| Engagement Model | Consulting plus digital solutions (RAMS, OPUS), in-country representation, and training/webinars |
QES Medical
QES Medical is a Boston-based quality and regulatory consulting firm founded in 2009. Their design and development, risk management, and FDA compliance remediation services are well-suited to DHF/RMF projects.
Differentiators:
- SaMD expertise with IEC 62304 software lifecycle compliance
- Direct FDA design control experience
- Risk management consulting capability under ISO 14971
| Core Remediation Services | Design control documentation support, risk management process updates, RMF maintenance, IEC 62304 medical device software compliance, QMS development |
|---|---|
| Regulatory Coverage | FDA 21 CFR 820.30, ISO 13485, ISO 14971, IEC 62304 |
| Engagement Model | Project-based and contract-based; free 30-minute introductory consultation; training offerings |
Greenlight Guru
Greenlight Guru is a medical device QMS platform and consulting partner. Their design controls expertise and platform support DHF creation and remediation projects.
Differentiators:
- Purpose-built medical device QMS software integrated with consulting
- Traceability matrix support with AI-enabled automation
- Design control best practices content
| Core Remediation Services | Digital DHF management, traceability automation between inputs/outputs/verifications, risk control integration, consulting services and support |
|---|---|
| Regulatory Coverage | FDA 21 CFR Part 820/QMSR, ISO 13485, EU MDR |
| Engagement Model | Platform subscription + professional services; Expert Guru guidance available |
BSI Group
BSI Group is a global standards body and certification partner. Their ISO 13485 and EU MDR consulting services focus on QMS and Technical File/DHF audit readiness.
Differentiators:
- Deep ISO standards expertise as UK National Standards Body
- Notified body experience
- Training/audit services that help companies identify and close DHF/RMF gaps before certification audits
| Core Remediation Services | Gap analysis, QMS documentation support, internal audits, ISO 13485/MDR training, audit readiness preparation |
|---|---|
| Regulatory Coverage | ISO 13485, EU MDR, MDSAP, FDA (through MDSAP alignment) |
| Engagement Model | Accredited assessment/certification services (kept separate from advisory); training and software subscriptions |
NorMed Consulting
NorMed Consulting is a Copenhagen-based firm specializing in SaMD, combination products, and EU/UK/USA regulatory compliance. Their design controls and risk management consulting support DHF/RMF projects.
Differentiators:
- Rapid right-first-time market access focus
- SaMD and AI device expertise
- Flexible remote/hybrid engagement model
| Core Remediation Services | Design Assurance covering all Design Control aspects, risk management, review of technical documentation, gap analysis, V&V, requirements engineering, technical writing |
|---|---|
| Regulatory Coverage | FDA 21 CFR 820 (QSR/QMSR), EU MDR/IVDR, UK MDR/UKCA; AI Act support |
| Engagement Model | Scoped per engagement; contact firm for project assessment |
wega Informatik
wega Informatik is a Swiss-based Life Science and MedTech IT consulting firm with 110+ consultants and 1,000+ projects. Their DHF remediation practice focuses on software-based medical devices and SaMD, including IEC 62304 and ISO 14971 file reconstruction.
Differentiators:
- Technical depth in SaMD/AI/ML DHF remediation
- Cross-functional team model (regulatory + software + quality)
- Structured DHF remediation methodology
| Core Remediation Services | MDR-compliant technical dossiers, design quality engineering, V&V planning, IEC 62304 software lifecycle documentation, risk management for AI-enabled devices, QMS implementation |
|---|---|
| Regulatory Coverage | EU MDR, FDA QMSR, ISO 13485, IEC 62304, ISO 14971 |
| Engagement Model | Vendor-neutral, end-to-end from strategy to system implementation and lifecycle support; workshops and 2nd/3rd level support |
Intertek
Intertek is a global testing, inspection, and certification company with a medical device consulting practice. Their quality assurance, regulatory compliance, and biocompatibility/software validation services address DHF/RMF evidence gaps.
Differentiators:
- Combination of testing lab capabilities with regulatory consulting
- Enables remediation of both documentation gaps and underlying test evidence gaps simultaneously
- Global Assuris network provides regulatory and quality consulting support
| Core Remediation Services | Biocompatibility testing, design change guidance, software and cybersecurity validation, chemical/material analysis, regulatory and quality consulting (Assuris) |
|---|---|
| Regulatory Coverage | FDA QMSR, ISO 13485, EU MDR/MDD, MDSAP, IEC standards |
| Engagement Model | Testing and advisory via distinct entities for impartiality; combined lab and consulting coordination |
How We Chose the Best DHF/RMF Remediation Consultants
Each firm was assessed on DHF/RMF-specific remediation experience — not just general QMS consulting. Evaluation criteria covered demonstrated knowledge of ISO 14971, ISO 13485, IEC 62304, FDA 21 CFR Part 820/QMSR, and EU MDR, as well as the ability to handle both legacy device files and modern SaMD/AI device documentation.
Key differentiating factors included:
- Audit clearance track records
- Cross-functional team capability (regulatory + quality + clinical + software)
- Engagement flexibility (project-based vs. embedded)
- Global regulatory coverage
- Transparency in project scoping
Beyond selection criteria, certain patterns consistently derail remediation engagements. Common mistakes to avoid:
- Choosing a firm that treats remediation as pure documentation without re-engineering the underlying evidence
- Hiring general regulatory consultants who lack specific design controls and ISO 14971 depth
- Engaging consultants unfamiliar with your device class or submission pathway (e.g., SaMD vs. traditional hardware)
- Overlooking engagement structure — firms without embedded-team options often struggle on compressed timelines
Conclusion
DHF and RMF remediation is a structured quality activity — one that directly determines whether a medical device reaches market, clears a notified body review, or holds up under FDA scrutiny. The consultant you choose must have direct, hands-on remediation experience, not just regulatory advisory skills.
Assess a firm's specific DHF/RMF project history, their understanding of your device class (hardware, SaMD, IVD, combination), and whether their engagement model fits your timeline and internal resources.
If those criteria matter to your selection process, Elexes is worth evaluating. The firm offers project-based DHF/RMF remediation support covering FDA, ISO 13485, ISO 14971, and EU MDR requirements, with a 90% audit clearance rate across 250+ completed projects. Get in touch to discuss your specific remediation needs.
Frequently Asked Questions
What is DHF remediation?
DHF remediation is the process of identifying and correcting gaps in a medical device's Design History File to bring it into conformance with FDA 21 CFR Part 820/QMSR or ISO 13485 requirements. It may involve reconstructing design inputs, outputs, verification/validation records, and traceability matrices, and is often triggered by audit non-conformances or pre-submission review findings.
How much do FDA consultants charge?
DHF/RMF remediation projects are typically scoped on a fixed-fee or time-and-materials basis, with costs driven by the extent of DHF gaps, need for verification/validation rework, software safety class under IEC 62304, and number of markets covered. Always request a written scope, defined deliverables, and a clear billing model before engaging.
What is the difference between DHF remediation and RMF remediation?
DHF remediation addresses gaps in design and development documentation (design inputs, outputs, verification, validation, design reviews) while RMF remediation specifically addresses the ISO 14971 Risk Management File. In practice, both are often remediated together since risk controls must be traceable through the DHF.
How long does a DHF remediation project typically take?
Timelines range from a few weeks for targeted gap closure to several months for full file reconstruction, depending on DHF debt, device complexity, and available internal resources. Lack of planning and cross-functional availability are the most common causes of delays.
When should a medical device company consider hiring a DHF/RMF remediation consultant?
Several situations call for outside remediation expertise:
- Receipt of a Form 483 or Warning Letter citing design control observations
- Major non-conformances from a third-party audit
- Preparation for a first EU MDR Technical File submission
- Post-acquisition DHF due diligence
- Design control gaps identified before a regulatory submission
Does DHF remediation require re-doing design verification or validation testing?
Not every remediation project ends at documentation. If objective evidence for verification or validation activities does not exist or is insufficient, new or supplementary testing may be needed. A consultant will assess existing evidence and determine whether documentation reconstruction is sufficient or new testing is required.
