How to build your QMS without a €15,000 consultant (and when you genuinely need one)

There is a standard story about compliance consultants, and it goes like this: the standards are impenetrable, the stakes are terrifying, and the only safe move is to hire someone for €1,000 to €2,000 a day until the fear goes away. The engagement is quoted in weeks. The total lands north of €15,000, often well north, and for a pre-revenue team that number is the difference between attempting compliance and giving up.

Here is our view, from watching small teams do this well: most of the work is learnable, and some of it genuinely is not. The trick is knowing the split in advance, because the expensive failure modes sit at the two extremes, paying day rates for work you could have done, and DIY-ing the handful of judgements that really do need a professional.

What you can do yourself

The QMS itself. Document control, SOPs, training records, supplier evaluations, CAPA, internal audits. This is process design for your own company, and nobody knows your company better. Each core SOP is an afternoon of honest writing about how you actually work. What a consultant adds here is mostly templates and confidence, and templates are the most commoditised artefact in this industry.

The software lifecycle evidence. If your team writes tests and uses version control, the IEC 62304 layer, requirements, system test records, a dependency register, release discipline, is structuring what you already do, not learning a new profession.

The first draft of everything. Risk register, intended use statement, technical documentation structure, classification rationale. Founders consistently produce good first drafts of these, because the raw knowledge, what the product does, how it could fail, who uses it, is theirs, not the consultant's. The consultant's real value on these documents is review, and review is priced in days, not weeks.

The learning. The standards are rules, written down. Dense, occasionally tedious, but readable, and once you understand them the knowledge compounds for the life of your company. Knowledge that arrives only in a consultant's head leaves in it too.

Where a specialist genuinely earns the rate

We build software that reduces consultant dependency, so take it seriously when we say: pay for these.

Borderline classification. If your product sits near a boundary, wellness versus medical, Class I versus IIa, a regulatory opinion is cheap insurance against building the wrong compliance stack entirely. Our classifier tells you when you are in this territory.

Intended use review. One sentence drives your classification, your risk file, your claims, and your technical documentation. Having a specialist pressure-test it before it locks in downstream decisions is a half-day that can save a rebuild.

Clinical evaluation. At Class IIa and above, the clinical evaluation report needs qualified authorship. This is not a corner to cut; it is a defined, bounded engagement.

Pre-submission review. Before a notified body sees your file, or before your first certification audit, one adversarial read-through by someone who has sat on the other side of the table. Findings found by a friend cost days; findings found by an auditor cost months.

Notice the shape: these are days of review on work you did, not weeks of someone doing the work for you. That is the whole cost model inverted. A targeted specialist budget for a Class I software startup is €2,000 to €5,000, not €15,000 to €40,000, and the specialist you hire will do better work, because reviewing a real system beats conjuring one from interviews.

The honest catch

The DIY route has one real requirement: structure. The teams that struggle are not the ones lacking intelligence, they are the ones staring at a blank page wondering what "documented procedure" means, or discovering at month six that their records do not trace to anything. The standards assume a scaffolding that enterprises have and startups do not.

That scaffolding is the product we build, and we build it lean. QualiHQ gives you the structure, the documents in the right shape, the traceability maintained as you work, the registers that auditors expect. There is a free trial, and what it costs after that is answered in one place, the pricing page. Where a specialist is the right call, it tells you so at exactly that step, because pretending software replaces clinical evaluators would be the kind of overclaim we just spent a whole post warning you about.

Build it yourself. Get it reviewed by someone sharp. Spend money where judgement lives and nowhere else. That is how small teams get through this on a small budget, and they do, regularly. You will too.