Who actually signs
At a device startup between five and eighty people, the signer is the CEO or the head of R&D, and there is no regulatory function to speak of. That is the bullseye. A company with a VP of Regulatory Affairs is a company that buys overflow and second opinions, which is a real market but a different message.
The founder you are writing to has usually built the device and is now discovering that the submission is a project with its own schedule. They do not know what a pre submission meeting is, they think 510(k) means approval, and they have a board that was told clearance was nine months away. Every word you write should assume that person.
The one sentence version
Your buyer is a technical founder with a working prototype, a testing plan they built from a predicate they may have chosen wrong, and a clearance date on a board slide.
The triggers, and where each one is visible
This is the best public signal of any niche on this site. Seven sources, and five of them are FDA databases.
- The 510(k) database. Every clearance is public with the applicant, the device, the product code and the decision date. A first time clearance holder is about to hit registration and listing, complaint handling, and the quality system the first inspection will test. A competitor's clearance in your product code means the predicate landscape just moved for everyone else in it.
- Warning letters. Public, searchable, and dated. A device company that receives one needs a remediation plan inside fifteen business days and a consultant yesterday. Form 483 observations reach the FOIA reading room with a lag and are the earlier version of the same signal.
- Establishment registration and device listing. A company that just registered has just decided it is a manufacturer. Many register before they understand what the registration obligates them to.
- De Novo grants and Breakthrough Device designations. Both public, both announced by the company in a press release. A company on a novel pathway needs more regulatory help, not less, and usually knows it.
- Funding. Seed and Series A rounds at device companies fund the submission. The round is visible in Form D filings and the usual databases, and the company's own site will say where the device is in the process.
- Regulatory and quality job posts. A Regulatory Affairs Manager req open for ninety days at a funded startup is a submission that is not waiting for the hire. The interim work is the engagement.
- The quality system regulation change. FDA aligned its device quality regulation with ISO 13485 effective February 2026. Companies registered before that date who have not rewritten their procedures are meeting inspectors this year with the old ones.
Build the practice on the first two. Clearances tell you who just arrived and warning letters tell you who is in trouble, and between them they describe most of the paid work in this field.
Qualify in sixty seconds
- Is there a regulatory owner in house? Check the team page. No VP or director of regulatory or quality means the whole function is available. One present means overflow, a second opinion, or nothing.
- Where are they in the lifecycle? Pre submission, just cleared, or post warning letter. The three are different engagements with different urgency, and the message has to name the right one.
- What class and pathway? Class II and a traditional 510(k) is the core of the market. Class I exempt is usually too small to need you. Class III and PMA is a larger firm's work or a CRO's. Software as a medical device and combination products carry extra layers and extra fees.
- Is the trigger inside ninety days? A clearance from two years ago is a company that has figured it out or found someone else.
The angle that gets replies
Lead with the specific thing that is about to go wrong for them, and use the vocabulary correctly. A founder who has spent six months on this can tell in one sentence whether the writer has.
Three openers you can adapt
- On a first 510(k) clearance"Congratulations on the clearance. The two things that catch first time holders in the following six months are the registration and listing timing and the complaint handling procedure the first inspection asks to see. The checklist is one page, happy to send it."
- On an RA req open ninety days at a funded startup"Your Regulatory Affairs Manager posting has been up since June. The submission does not wait for the hire, and the predicate choice plus the testing plan is the part that sets the timeline. Here is the order I would run those in while the search continues."
- On a Series A with a clearance date on the site"You raised in March and the site targets submission next year. The largest schedule risk at this stage is finding out during testing that the predicate's intended use does not match yours. A pre submission meeting is free and settles it. Here is what to put in the request."
Notice the vocabulary. Clearance, not approval. Pre submission, by name. Predicate and intended use, used correctly. Each one is a credential in a single word.
What not to send
- "We can get you FDA approved." A 510(k) is cleared, not approved, and the word tells the reader you have never filed one.
- "Fast track" or "guaranteed clearance." Fast track is a drug program. Breakthrough is the device one, and it is a designation, not a promise. Guarantees do not exist and everyone in the field knows it.
- "We help medical device companies navigate the FDA." So does every firm they have ever heard of. It says nothing about them.
- Warning letter fear to a company that has not received one. It reads as a threat from a stranger and it is the fastest way to a spam report.
The objection you will hit
We are hiring someone in house. Good, and the hire will take four to six months to land, and the submission timeline does not move while it does. The interim engagement is the answer, and it is also true that most first time device companies do not need a full time regulatory lead until after clearance, when the post market obligations start. Say both.
The second one is our contract manufacturer or our CRO handles the regulatory side.Sometimes. Ask one question: has anyone requested a pre submission meeting. If the answer is no, the testing plan is a guess and the timeline is a hope, and whoever is handling the regulatory side is not handling that part.
The third is the founder's own: FDA is unpredictable, why pay for strategy. The pre submission process exists precisely so that it is not. FDA's feedback comes in writing, and a testing plan built on it is one the reviewer has already seen. That is the whole value of the strategy engagement, said in two sentences.
Deal shape
- Regulatory strategy and pathway assessment: commonly $5K to $15K. Small, fast, and the engagement that leads to the next three.
- Pre submission package and meeting: $10K to $25K, and the single best investment the client will make.
- 510(k) authoring and submission support: $25K to $75K depending on device complexity and how much testing coordination is included. The FDA user fee sits on top, about $26,000 for fiscal 2026 or roughly $6,500 with small business status, and helping the client qualify for the small business rate is worth mentioning in the first call.
- Quality system build to ISO 13485 and the current FDA regulation: $30K to $80K.
- Warning letter remediation: $50K to $200K and up, closing in days rather than weeks.
- Post clearance retainer: $3K to $10K a month for complaint handling, reporting, change assessments and inspection readiness.
- Review timeline to set expectations with: the 90 FDA day clock, which in calendar terms is usually five to six months once an additional information request stops it.
Expansion is the point. The strategy engagement becomes the submission, the submission becomes the post clearance retainer, and the retainer becomes the second device, EU MDR for the first European market, and the annual internal audit. A client acquired pre submission is a client for years.
A cadence you can actually run
- Weekly, pull new 510(k) clearances in your product codes, new warning letters to device firms, and new establishment registrations in your geography. Under an hour with saved searches.
- Weekly, pull device company funding announcements and check each site for where the device sits in the process.
- Monthly, pull regulatory and quality job posts and note their age.
- Qualify against the four checks. The universe is smaller than in software niches, so expect to keep most of what the databases surface.
- One message per account, written from the specific trigger and using the right vocabulary. Fifteen to twenty accounts a week is a full program.
- Three touches over two weeks, then stop. A founder mid submission who does not reply is busy, not uninterested, and the next clearance or funding event is a fresh reason to write.
The regulatory consultants who grow are the ones who write to a company the week its clearance posts. The ones who plateau are waiting for the referral from the last client, who is busy shipping the device.
The sending mechanics most people get wrong
Everything above is about who and what. This is about how, and it is where most outbound in this niche quietly dies. Seven rules. None of them are optional.
1.Three to five sentences. That is the whole email.
Your reader is on a phone between meetings. One observable fact about their company, one consequence they have not thought about, one specific thing you would do. Anything past five sentences is a memo, and memos get archived unread.
2.Lead with a technical differentiator that turns into a number.
The messages that work best name something concrete you do differently and translate it into time or money saved. In this niche the differentiator is the pre submission. A consultant who runs one before the testing plan is locked, and can say how many additional information requests that typically avoids or how many weeks of review clock it saves, has a number. A firm that has authored submissions in the client's own product code has a second one: the count of clearances in that code.
Most services firms do not have a technical differentiator, and pretending to have one reads as exactly that. The substitute is a verticalized case study: a company like theirs, what you did, what happened, in one sentence. For this niche the line is: a 22 person cardiac monitoring startup, first 510(k), pre submission meeting in month one, cleared seven months after submission with a single additional information request, no in house regulatory hire until after clearance. Product code, timeline and hire count are all things the reader can ask a peer about.
3.Ten to twenty emails a day per mailbox. Not a hundred.
Sender reputation is scored per mailbox and per sending domain. One inbox pushing a hundred cold emails a day looks like exactly what it is, and the penalty lands on the domain, which means it lands on your client correspondence too.
If the math says you need more volume, the answer is more mailboxes on more warmed sending domains, separate from the domain you invoice from. It is never more volume per mailbox. Fifteen to twenty accounts a week at three touches is nine to twelve emails a day, comfortably one warmed mailbox. The universe here is smaller than in software niches, so the constraint is qualified accounts, not sending capacity, and a second mailbox is a sign you have widened the product codes too far.
4.Write ten versions of every step and test them.
Versions A through J, not A and B. Rotate subject lines and bodies. You learn which angle is actually working instead of guessing, and there is a second reason that matters more: identical bodies going out over and over is one of the patterns postmaster tools flag. Variation is a deliverability tool as much as a testing one.
Subject line seeds for this niche, each of which should become several variants: "your clearance on the 14th", "the pre sub", "the RA req". Lower case, no punctuation tricks, and nothing that would look odd in a reply from a colleague.
5.Stop at three.
Most replies arrive on the first and second email. The third is already thin. Every touch past that raises the odds the whole thread gets classified as spam, and that classification follows the mailbox to the next person you write to. The long cadence is over. Three touches, each with something new in it, then leave them alone for ninety days.
6.Know what good looks like.
A one percent reply rate with a quarter of those replies positive is a healthy trigger based program. Anyone quoting you double digit reply rates is counting out of office messages or selling a course.
7.LinkedIn Sales Navigator is not optional.
Every other data source tells you who held a title at some point. Sales Navigator tells you who holds it today, because the person maintains it themselves. That is the difference between a three percent bounce rate and a fifteen percent one, and bounces are scored against the mailbox the same way spam complaints are. Verify the name there before anything goes out.
It is also the cheapest trigger detector you will own. The job change filter surfaces people who arrived in a role in the last ninety days, which is the moment they have budget and no incumbent. The posted recently filter surfaces companies talking about the exact problem you solve. Account lists with headcount growth alerts tell you who is scaling before the press release does. For this niche the saved search is headcount 5 to 100, industry medical device, titles CEO, founder, VP Engineering, VP R&D and Head of Quality, with the job change alert on for those titles and keyword alerts on 510(k), De Novo, Breakthrough and QMSR across posts and job listings. Navigator confirms the person. The FDA databases are the source.
Use it for the research and the verification, not for the message. InMail reply rates are a fraction of email, and the person who replies to a thoughtful email is the same person who ignores a connection request with a pitch attached. Pull the work email from a data provider once Navigator has confirmed the person is real and current.
None of this is specific to your niche. All of it is specific to whether anyone ever reads the angle you spent an hour getting right.
If you would rather not run it yourself
That is what we do. ExpertLayer runs this exact loop for expert led firms: the weekly database pulls, the qualification, the angle per account written in the right vocabulary, the sending across warmed mailboxes, and the reply reading. You take the conversations and do the regulatory work.
The first step is free and it is the same research described above. Send us your website and we will come back with 10 companies that hit these triggers right now, with the clearance or letter, the contact, and the opening line for each.
Questions from people running this
Everyone in this space uses the 510(k) database. Is it really a differentiator?+
Everyone uses it to find predicates. Almost nobody uses it to find clients. A firm that pulls every new clearance in its product codes each week and writes to the holder about what happens in the six months after clearance is doing something its competitors are not, with a source they all have open in another tab.
Pre clearance or post clearance companies?+
Both, and they are different engagements. Pre clearance is strategy, pre submission and authoring, sold to a founder on schedule risk. Post clearance is registration, complaint handling, the quality system and the first inspection, sold to the same founder on the realization that clearance was the start. The second is often the larger relationship.
Is a company with a warning letter a good client?+
The best and the worst. They are urgent, they have budget because fear created it, and the work is well defined. They are also stressed, the timeline is not negotiable, and the engagement will consume you for a quarter. Price it as the emergency it is, and do not take two at once.
Should I lead with EU MDR for companies also selling in Europe?+
Not to a US startup pre clearance. MDR is a second conversation that arrives after the first market. It is an excellent expansion sale to an existing client and a confusing opener to a founder who has not cleared anywhere yet.