The market The value chain How buyers buy The incumbents Regulation and calendar

What regulation requires, and the calendar it sets

Cost is not the obstacle. Calendar is, and the lane chosen decides how many years pass before any revenue.

What each regulatory lane costs in elapsed time

Private-label Class I and II

Chain: Recertification 12 months, then customer qualification 9 months. No design-in, because MERIDIAN makes an existing product to an existing specification for a company that already holds the clearance
Elapsed: 1.8 years
First revenue: 2028

Single-use modules

Chain: Recertification, qualification, then design-in 15 months onto a customer program
Elapsed: 3.0 years
First revenue: 2030

Implantable and Class III

Chain: All of the above, then the customer's own clearance, 24 months
Elapsed: 5.0 years
First revenue: 2032

12 months

Regulatory recert

9 months

Qualification

15 months

Design in

24 months

Implant clearance

Cost is not the obstacle. Calendar is.

ISO 13485 recertification runs 12 to 18 months from scratch. MERIDIAN held the certificate to December 2021 and retains the quality system, so 12 months is reasonable. The cost, from published ranges of $12,000 to over $100,000 plus about $40,000 a year of audit days, is immaterial against $6B of revenue. The United States adopted ISO 13485 by reference into its quality system regulation in February 2026, which has increased the pressure on device makers to require certification from component suppliers.

The four completed ISO 10993 items are a gate-opener rather than an asset. They are the materials panel, and biological evaluation is redone per device and per contact duration, so they do not transfer to a customer's finished product. They qualify MERIDIAN for conversations about skin-contact and implant-contact products that it could not otherwise have.

The steps are sequential, not parallel, and that is the finding:

Nothing ships before the certificate exists. That single fact removes 2027 entirely and most of 2028, and it is why a three-year revenue bar and a three-year regulatory chain cannot both be satisfied.

Can certified lines be shared with non-medical work

The brief asks this directly, and the answer is yes with conditions that cost utilization rather than compliance.

ISO 13485 does not require dedicated lines. It requires a validated process, and validation is what makes sharing expensive rather than prohibited. A shared line carries: validated cleaning and changeover between medical and non-medical runs; segregated material control and full lot traceability through the whole web; change control, so that a process adjustment made for a smartphone customer cannot be applied without medical revalidation; and environmental monitoring where the product requires it.

The binding constraint is change control rather than cleanliness. MERIDIAN's current business tunes processes continuously for customers who demand annual cost reduction. A certified medical line cannot be tuned that way, because every change triggers revalidation and, for some changes, customer notification.

The practical answer is a hybrid: share the roll-to-roll web handling and the front-end patterning, which are stable processes, and dedicate the cleanroom finishing and assembly steps, which is where the validation burden concentrates and where the capital in this plan mostly goes.

The cost of this shows up as reduced effective utilization on shared assets. The model charges the initiative an allocated share of plant at 9% of revenue, and the capacity check later in this analysis is where the shared-asset constraint is tested. Measuring the actual utilization loss on a real line is a first-stage task, because it is estimated here rather than known.