Annex D

We took the stricter reading of all three

MDR, the AI Act and GDPR are treated at their most demanding interpretation. Nothing is submitted while a submission-gate item is open.

Compliance checklist

D02 · EU MDR

PENDING

MDR Rule 11 classification confirmed with notified body

Owner: AeroGlyphics

D03 · EU MDR

AGREED

Class IIa+ technical file structure adopted from day one

Owner: AeroGlyphics

D05 · EU MDR

AGREED

Clinical evaluation plan referencing paired CPET validation

Owner: SOAP Health

D06 · AI Act

CONFIRMED

System treated as high-risk; no wellness exemption claimed

Owner: AeroGlyphics

D08 · AI Act

AGREED

Model cards and data-governance records for every released model

Owner: GoApercu

D10 · AI Act

AGREED

Human oversight design documented on the clinician surface

Owner: SOAP Health

D12 · GDPR

PENDING

Lawful basis established with each imaging site

Owner: Medome

D14 · GDPR

PENDING

EU–US transfer mechanism for model training data

Owner: GoApercu

D16 · GDPR

AGREED

DPIA completed and reviewed before prospective recruitment

Owner: Medome

Submission gate — open questions

  • MDR Rule 11 class (D02) — determines the entire conformity route and the WP6 timeline.
  • Imaging-site lawful basis (D12) — blocks the retrospective n=800 derivation cohort.
  • EU–US transfer mechanism (D14) — blocks SleepFM adaptation on EEA-origin data.