If pharma companies are your target market, it occurs to me that you might want to look at your DoC and certificate as potential marketing materials. Pharma companies typically know little to nothing about device regulation, but they usually do know that software is a hot regulatory topic. From that perspective, their question isn't unreasonable, and this company might not be the last one to ask.
Different companies format their DoCs differently and different NBs do the same with their certificates, I think. Ideally, you would want your DoC to state exactly what it is that you are declaring conforms (i.e., "blue tooth biometric sensor and smart device app.") If you can get your NB to do the same on your certificate, even better.
Of course, given the state of things in the EU right now, it might not be easy (to put it mildly) to engage with your NB on this...