Many medtech companies think of regulatory affairs as a document-driven process: files, checklists, risk reports, and traceability. But in the companies that truly succeed, regulatory affairs is not a process. It is a culture.
“Culture beats compliance, but the best culture grows out of respect for compliance.” – Paulina Jonasson, CEO and regulatory director, Medtech Maze.
A strong regulatory culture is not about bureaucracy, but about clarity, accountability and pace. When the team understands why The structure exists, and how it helps them make better decisions, regulation becomes a support for innovation, not an obstacle.
If regulations become part of the culture, not just a requirement to be met, something crucial happens: the company moves faster, decisions become better, and the need for late rework is drastically reduced.
When culture elevates compliance from requirement to capability
Compliance is about meeting rules and requirements. Culture is about how people make decisions when they have to weigh risk, quality and patient safety, even when no formal requirement specifies exactly what to do.
In organizations with a strong regulatory culture, compliance is not something driven by checklists, but by a shared responsibility to build safe and reliable products.
It is noticeable in everyday life:
- Documentation is used to create learning and memory, not to fill in requirements
- Testing is done to understand risks and usage, not to pass a step
- Patient safety is a shared responsibility, not a bullet point at the bottom of a presentation
When these behaviors are embedded in the organization, regulation becomes a common language for quality, decisions, and accountability. Startups don't need the same scope or formality as large companies, but they do need the same basic principles: clarity, accountability, and respect for risk at every step.
Early regulatory structure creates momentum
Many teams find that regulatory requirements slow down development. In practice, it's almost always a matter of timing, not the requirements themselves.
Teams that prioritize structure, QMS, and traceability are often forced to work retroactively. Decisions must be recreated, tests re-done, and documentation rebuilt after the fact, when the product, code, or design is already locked in. That's where the friction arises.
Teams that instead establish basic structure in parallel with development experience a completely different flow. When decisions, changes, and tests are documented continuously, regulatory compliance becomes a support for progress, not an interruption.
It's not about doing more work early. It's about making the right decisions in the right order. Structure in early phases makes later phases faster, easier, and significantly more scalable.
How do you build a regulatory culture in practice?
Here are four concrete principles for building a regulatory culture that works for medtech companies of all sizes:
Principle 1. Explain the “why,” not just the “what” When the team understands that regulations are ultimately about patient safety, healthcare trust, and the company's long-term responsibility, both commitment and quality of work increase. Rules that are rooted in purpose lead to better decisions than rules that are only followed out of duty.
Principle 2. Make processes easy to follow A quality system should support the work, not sit alongside it. When QMS and regulatory procedures are integrated into the team's existing tools and workflows, compliance becomes a natural part of everyday life, rather than an extra step.
Principle 3. Integrate regulatory issues into sprints and decision-making meetings Regulatory considerations should be part of how product decisions are made, not something that is handled after the fact. When documentation, risk assessment and change logic are done on an ongoing basis, the need for rework and uncertainty are reduced later on.
Principle 4. Live for improvement A regulatory culture is never “finished,” but evolves with the product, the team, and the market. Every simplification, clarification, or automation strengthens both the quality and the organization’s ability to scale.
Summary
Regulatory affairs only become a real strength when they are part of how the team thinks and works – not something that is handled on the side. When structure, responsibility and patient safety are embedded in the culture, better decisions are made, the pace increases and the need for late rework is reduced. This not only creates higher quality, but also organizations that are ready to scale. In medtech, it is often the regulatory culture that determines whether a company reaches the market on time and can continue to grow with confidence.
This article is part of our series on how regulation interacts with business strategy, investments, teams and growth in medtech companies. If you want a solid foundation in what CE marking is, we also recommend our introductory article: “CE marking: what it is, why it exists and how the process actually works.”