What Should Manufacturers Do When Quality System Evidence Is Inconsistent in Overseas Medical Device Registration?

Answer: When quality system evidence is inconsistent with the target country's registration requirements, the manufacturer should first confirm the target authority's specific QMS requirements, assess whether existing certificates or declarations are recognized, identify gaps in standard version, scope and site audit requirements, and prepare equivalence evidence, gap analysis reports, or MDSAP certification. A quality system difference matrix and early consultation with a local agent or professional consultancy are recommended to reduce delay and duplication across multiple markets.

Published: 2026-07-10 21:46; Updated: 2026-07-10 21:46

This FAQ addresses priority issues in international medical device registration, documentation preparation, compliance pathways and post-market maintenance.

Content Structure

• Executive Summary
• Applicable Scenarios and Core Issues
• Registration Decision Logic
• Documentation and Evidence
• Common Errors
• Manufacturer Preparation Checklist
• Aimeili's View
• Frequently Asked Follow-up Questions
• Implementation Recommendations
• Content Review and Scope of Application

Executive Summary

During overseas medical device registration, inconsistent quality system evidence is a common problem. It mainly arises from differences between the manufacturer's ISO 13485 certificate, CE MDR/IVDR QMS documentation, FDA QSR 820 compliance declaration, MDSAP audit report or NMPA system inspection result, and the target country's registration requirements.

Manufacturers should first clarify the target country's specific quality system requirements. For example, the EU requires ISO 13485 or a QMS compliant with MDR/IVDR; the United States requires QSR 820 compliance; Japan requires a QMS compliant with MHLW standards; and Brazil requires an ANVISA system review. Second, they should determine the recognition level of existing certificates or documents. ISO 13485 is accepted by most countries as a baseline certificate, but some countries, such as the United States, Japan and Brazil, require additional supplements or localized audits.

Third, manufacturers should assess differences, including standard version, such as ISO 13485:2016 versus 2012; system coverage, such as whether design and development is covered; and manufacturing site audit requirements. Manufacturers need to prepare equivalence evidence, gap analysis reports, or apply for MDSAP certification, which can cover multiple countries. Common risks include failure to identify target-country site audit requirements, submitting expired certificates, overlooking certificate confirmation dates, and improper use of self-declarations. Manufacturers are advised to consult local agents or professional organizations at an early stage, establish a quality system difference matrix, and prioritize MDSAP audits to reduce repeated costs in multi-country registration.

Applicable Scenarios and Core Issues

In overseas medical device registration, inconsistent quality system evidence means that the manufacturer's existing system certification, manufacturing license or compliance declaration cannot directly satisfy the review requirements of the target country's registration authority. Typical scenarios include: the manufacturer holds an ISO 13485 certificate, but the target country, such as the United States, requires QSR 820 compliance; or the manufacturer holds a CE certificate, but the target country, such as Japan, requires a PMDA system review; or the manufacturer has passed an MDSAP audit, but the certificate scope does not cover the newly filed product. The core questions are: Does the target country recognize the existing evidence? If not, what additional evidence is required?

To avoid registration delays or deficiency letters caused by system differences, companies must recognize that the quality system is a prerequisite for registration, not an optional attachment. Poor compliance may lead to registration refusal, failed post-market inspections or even market exclusion.

This guide applies to the following export scenarios: CE-certified manufacturers in the EU seeking to expand into Japan, China, Southeast Asia, the Middle East or Latin America; companies with only an NMPA registration certificate planning to apply for FDA 510(k) or PMA; companies that have passed an FDA on-site audit but have not updated ISO 13485; and companies preparing multi-country registration in GHWP member states. QMS requirements differ significantly across markets. For example, several Latin American countries require the local agent to hold a GMP compliance certificate; some Middle Eastern countries require ISO 13485 plus hospital acceptance evidence; and Southeast Asian countries such as Indonesia require the manufacturing enterprise to hold an AKL certificate. Companies must analyze each market individually and cannot assume that a broad certificate covers everything.

Registration Decision Logic

Step 1: Determine whether the product falls within the target country's medical device regulatory scope. If the product is exempt or not subject to medical device regulations, the quality system evidence requirement may be reduced or waived. For example, FDA does not require QSR 820 for some Class I products, but ISO 13485 is recommended to simplify market access.

Step 2: Determine the registration pathway and applicant based on product risk classification. For example, under EU MDD/MDR, Class IIa requires a notified body to audit the quality system; US Class II 510(k) requires establishment registration and device listing, with the system accepted through an FDA on-site inspection or MDSAP report; and Japan Class II requires a QMS certification body audit.

Step 3: Assess the reusability of existing quality system evidence. For example, the quality management system description in a CE technical file, such as ISO 13485:2016 with design and development covered, is generally accepted by most GHWP member states, but it is necessary to confirm whether the certification body is on the target country's recognized list. If existing evidence covers only the manufacturing site and not design control, then system evidence for the design and development stage, such as design history files and risk management files, must be supplemented.

Step 4: Confirm whether requirements for technical documentation, performance verification, risk management, clinical evaluation, labels and instructions for use, local agent, authorized representative and post-market maintenance align with the quality system. For example, the risk management report should be consistent with ISO 14971 and reflect internal audit results. Labels and instructions for use must comply with local language and regulations and should be consistent with the labeling control procedure in the system documentation. The local agent or authorized representative should have its responsibilities, such as complaint handling and adverse event reporting, clearly defined in the quality system. The post-market maintenance plan should be integrated into the quality system change control procedure.

For multi-country registration, it is advisable to prioritize an MDSAP audit report because it is recognized by major markets including the United States, Canada, Japan, Brazil and Australia, reducing repeated audits. If MDSAP is not available, manufacturers should establish a core system plus country-specific supplements model: use ISO 13485 as the framework, prepare a QMS gap analysis document for each target country, and retain site photographs, internal audit records and management review records as evidence.

Documentation and Evidence

When quality system evidence is inconsistent, manufacturers need to prepare the following materials to demonstrate compliance:

• Valid copies of existing system certificates or compliance declarations, including certification scope, standard version, validity dates and issuing body information.
• A comparison table of system standards recognized by the target country, such as a clause-by-clause mapping of ISO 13485 to QSR 820.
• A gap analysis report that assesses current system coverage item by item against the target country's checklist and notes remedial measures.
• Supplementary documents, such as design control procedures, risk management files under ISO 14971, purchasing control records, production process validation reports and inspection equipment calibration certificates.
• On-site audit records, such as mock audit or pre-audit reports, demonstrating that the system operates in accordance with requirements.
• A quality system responsibility statement from the authorized representative or local agent, such as adverse event reporting processes and complaint handling SOPs.
• A post-market surveillance plan and a description of system change control.

The evidence chain should form a closed loop from system documents to actual records. For example, it is not enough to provide procedure documents only; corresponding internal audit records, training records and nonconforming product handling records should also be provided. If the target country requires an on-site audit, the manufacturer should prepare factory layout drawings, production flow charts, key process lists and cleaning control records. For high-risk implantable devices, sterilization validation and sterility assurance records should also be available.

Common Errors

• Assuming that ISO 13485 can fully replace QSR 820 and ignoring differences in design control, complaint handling, device tracking and other clauses.
• Submitting expired or out-of-date certificates, such as old certificates that became invalid after the transition period for a new standard version.
• Ignoring whether the certification body is on the target country's recognized list, for example Japan accepts only PMDA-recognized certification bodies.
• Improperly using self-declaration instead of notified body review, for example registering a Class IIa product as Class I self-declaration in the EU when the actual system audit is insufficient.
• Failing to incorporate the quality responsibilities of the local agent or authorized representative into system documents, resulting in incomplete documentation.
• Repeatedly submitting the same evidence in multi-country registration without localizing system documents, such as language, format and references to local regulations.
• Unauthorized modification of certified system certificate copies, such as changing validity dates or scope, which constitutes fraud.
• Neglecting on-site audit requirements by assuming that an MDSAP certificate exempts all countries from on-site audits, while some countries, such as China and Brazil, may still require separate audits.

Manufacturer Preparation Checklist

• Clarify the target country's quality system regulatory requirements by collecting official guidance or consulting a local agent.
• Inventory existing certificates and evidence, and verify validity and certification scope.
• Conduct a gap analysis and record each difference and the corresponding supplementary documentation needs.
• Supplement missing procedure documents and records, such as design and development plans, design reviews, design changes, and design verification and validation.
• Confirm the qualifications of the authorized representative or local agent and sign a quality responsibility agreement.
• Update the label and instructions for use management procedure to ensure compliance with target-country language and regulations.
• Prepare an on-site audit response package, including factory layout drawings, equipment lists, personnel training records and environmental monitoring reports.
• Assess whether an MDSAP audit or third-party system pre-audit is needed.
• Develop a post-market maintenance plan covering complaint handling, adverse event reporting and periodic risk management review.
• Compile a multi-country registration system document package containing core system documents and supplementary difference documents, and retain bilingual Chinese and English versions.

Aimeili's View

The most common misjudgment is to believe that a single ISO 13485 certificate can be used everywhere. In actual overseas registration, each country has its own practical expectations. For example, although FDA does not mandatorily require ISO 13485, its review places strong emphasis on FDA QSR 820 compliance; Japan's PMDA pays attention to whether the manufacturer's system includes the special requirements for a foreign manufacturer; and Brazil's ANVISA requires system documents to be in Portuguese and signed by the local representative.

At the early stage of a project, we recommend that companies first conduct a comprehensive quality system passport check: confirm the validity period, recognized scope and whether the issuing body is on the target country's whitelist. Then, issue a gap matrix against target-country regulations and prioritize core differences such as design control, CAPA and complaint handling. MDSAP certification is worth prioritizing because one audit can cover the United States, Canada, Japan, Brazil and Australia, saving substantial time and travel costs. However, attention must be paid to the validity period of the MDSAP certificate and the covered product scope.

In addition, control over certificates is critical. Many companies rely on foreign certification bodies and lack initiative when changing or renewing certificates. It is advisable to choose well-known institutions with branches in mainland China and retain communication records with auditors. For multi-country registration, we recommend a model of one core system plus multiple localized difference files to avoid repeated preparation. Deficiency risks mainly come from a disconnect between system evidence and product technical documentation. For example, risk control measures in the risk management report may not be reflected in procedure documents. Companies should establish a product-to-system mapping table in advance to ensure that each technical document can be linked to a corresponding system basis.

Frequently Asked Follow-up Questions

If a company only has an NMPA medical device registration certificate and no ISO 13485 certificate, how can it apply for EU CE certification?

EU CE certification requires the manufacturer to have a quality system; an NMPA registration certificate itself is not quality system evidence. The company should first apply for an ISO 13485 certificate covering design and development, issued by a certification body recognized by an EU notified body, and prepare technical documentation under MDR/IVDR. If the company has an NMPA system inspection, such as a GMP inspection, it may serve as supporting evidence of system operation, but it cannot replace ISO 13485. Companies should consult the notified body to confirm whether it accepts an NMPA inspection report combined with a self-assessment statement addressing missing clauses.

What are FDA requirements for quality system evidence? Can MDSAP fully replace an FDA on-site inspection?

FDA requires all medical device establishments to register and list devices, but not all establishments must undergo FDA on-site inspection. For Class II and Class III products, FDA generally arranges on-site inspections based on risk or delegates audits to other regulatory authorities. MDSAP audits can replace routine FDA inspections, but FDA retains the right to conduct unannounced inspections at any time. In addition, FDA does not accept ISO 13485 as equivalent evidence for QSR 820; it can only serve as supplementary evidence. Companies should confirm whether the MDSAP audit report covers all QSR 820 requirements, such as complaint handling, device tracking and 510(k) records.

How can repeated submission of system documents be avoided in multi-country registration? Is there a unified document format?

Companies should establish a core quality management system, or Core QMS, including quality manual, procedure documents, work instructions and record templates, using an internationally recognized structure such as ISO 13485 clauses. For each target country, prepare a country difference appendix explaining how the core documents meet local special requirements. For example, the Japan appendix can note that the labeling control procedure complies with the Japanese Pharmaceutical and Medical Device Act, and the Brazil appendix can note that the complaint handling procedure complies with ANVISA RDC 16. When submitting registration, it is often possible to upload only the core documents plus the country appendix. English versions are accepted by most countries, but Central and South American countries such as Brazil and Colombia may require Portuguese or Spanish translations. Professional translation and notarization are recommended.

Implementation Recommendations

In actual projects, companies should break this issue into five tasks: regulatory assessment, documentation preparation, evidence reuse, localization conversion and post-market maintenance. They should not leave document preparation to a single department at the last minute. This approach helps identify documentation gaps earlier and enables sales, R&D, quality and regulatory teams to form a consistent understanding of target-country requirements.

If a company plans to enter multiple markets at the same time, it should first develop a unified core technical file, then supplement authorization, labeling, language, forms and local agent materials for each country. The efficiency of multi-country registration often depends on whether the early documentation framework is unified, rather than how fast a single country submission is made.

• First confirm whether the product falls within the target country's medical device regulatory scope.
• Then confirm the risk class, registration pathway and applicant.
• Check whether the technical file, quality system and clinical evidence support each other.
• Clarify the local agent, authorized representative and certificate control rights.
• Establish a post-market change, certificate renewal and vigilance event maintenance mechanism.

Content Review and Scope of Application

Content author: Aimeili Regulatory Editorial Team

Professional review: Aimeili Medical Device International Registration Project Team

Source principles: Priority is given to official regulatory authorities, international organizations, standards organizations and public regulatory materials; industry media and project experience are used only as auxiliary judgment.

Scope of application: This article is intended for preliminary understanding, documentation preparation and project planning. It does not replace the formal requirements of target-country regulatory authorities, testing conclusions or legal opinions.

Compiled from Aimeili regulatory practice question bank, medical device international registration knowledge base and public regulatory information; specific projects should be based on the latest requirements of target-country regulators and the product documentation.