How to Use ISO 13485 Certificate for Overseas Registration of Sterilization and Disinfection Equipment

The ISO 13485 certificate serves as the core quality management system evidence for overseas registration of sterilization and disinfection equipment, but it does not replace the target country’s marketing authorization. Companies should first use the certificate to demonstrate conformity with international quality management standards, then determine the registration pathway based on the regulatory classification in the destination market. For sterilization and disinfection equipment, most markets classify these products as Class II or higher (e.g., Class IIa in the EU), requiring submission of technical documentation, performance verification, biocompatibility, sterilization validation, risk management, and labeling. The ISO 13485 certificate supports quality system review but does not cover country-specific requirements such as FDA 510(k) clearance or establishment registration in the United States, CE marking under the EU MDR, or local registration and local agents in Southeast Asian countries. In practice, companies should first confirm whether the product falls within the scope of medical device regulation, then assess whether existing NMPA registration, CE certificates, FDA clearance, or MDSAP certification can be leveraged, and finally verify whether the target country recognizes ISO 13485 as the basis for quality system audit. Common risks include mismatch between certificate scope and actual product, quality system not covering sterilization special processes, lack of post-market surveillance data, failure to appoint an authorized representative or local agent, and incomplete localization of technical documents. Companies must establish a traceable chain of evidence by combining the ISO 13485 certificate with sterilization validation reports, product testing reports, clinical evaluation or literature data. For multi-country registration, prioritize reuse of core technical files and localize labels, language, and regulatory differences for each market.

Key Summary

The ISO 13485 certificate is the core quality system evidence for overseas registration of sterilization and disinfection equipment, but the certificate itself cannot replace the target country’s registration approval. Companies should first use the certificate to demonstrate that the quality management system conforms to international standards, then determine the registration pathway based on the target country’s regulatory classification. For sterilization and disinfection equipment, most markets classify these products as Class II or above (e.g., Class IIa in the EU), requiring submission of technical files, performance verification, biocompatibility, sterilization validation, risk management, and labeling information.

The ISO 13485 certificate can support quality system review, but it cannot cover country-specific requirements, such as the US FDA’s 510(k) clearance or establishment registration, CE marking under the EU MDR, and local registration and local agents in Southeast Asian countries. In practice, companies should first confirm whether the product falls under the scope of medical device regulation, then assess whether existing NMPA registration, CE certificates, FDA clearance, or MDSAP certification can be leveraged, and finally verify whether the target country recognizes ISO 13485 as the basis for quality system audit.

Common risks include a mismatch between the certificate scope and the actual product, the quality management system not covering sterilization special processes, lack of post-market surveillance data, failure to appoint an authorized representative or local agent, and incomplete localization of technical documents. Companies need to establish a traceable evidence chain and use the ISO 13485 certificate together with sterilization validation reports, product testing reports, clinical evaluation or literature data. For multi-country registration, prioritize reuse of core technical files and localize labels, language, and regulatory differences for each market.

Applicable Scenarios and Core Issues

Sterilization and disinfection equipment are typical Class II or above (e.g., Class IIa) medical devices, including steam sterilizers, ethylene oxide sterilizers, hydrogen peroxide low-temperature plasma sterilizers, ultraviolet disinfection equipment, washer-disinfectors, and similar products. When pursuing overseas registration, companies often ask whether the ISO 13485 certificate can be used directly. The essence of this question is: what position does an international standard certificate hold in the target country’s regulatory system, and what does it solve versus not solve?

ISO 13485 is the international standard for medical device quality management systems. It proves that a company has the ability to produce consistently and maintain quality assurance. However, overseas registration is a product market access activity that requires proof that the product is safe and effective and meets the regulatory requirements of the target country or region. The ISO 13485 certificate is often used as a passport for quality system audits, reducing redundant on-site inspections, but product registration certificates, marketing authorization, or CE marking are a separate level of approval.

Companies need to distinguish three scenarios: first, the ISO 13485 certificate is used only for tenders or customer audits and does not involve regulatory approval; second, the target country’s regulations explicitly accept ISO 13485 as the quality system requirement, for example, some Southeast Asian, Middle East, and Latin American countries; third, the target country requires stricter system certification, such as the US FDA’s QSR 820 or MDSAP. The way the certificate is used is completely different in each scenario.

Registration Decision Logic

Step 1: Confirm Whether the Product Falls Under Medical Device Regulation

Sterilization and disinfection equipment usually fall under medical devices, but some ultraviolet disinfection lamps may be classified as disinfectant products. Confirm the regulatory boundary first.

Step 2: Determine the Risk Class and Registration Pathway

Most markets classify sterilizers as Class II or above based on intended use and contact time. The US FDA classifies most sterilizers as Class II and requires 510(k) clearance. Under the EU MDR, they are Class IIa or IIb. Southeast Asian countries such as Thailand, the Philippines, and Indonesia generally follow risk classification and require product registration or notification.

Step 3: Assess the Reusability of Existing Documentation

If the company already has an NMPA registration, the performance verification, biocompatibility, sterilization validation, and stability data in the technical file can be reused as source documentation. If a CE certificate is already held, the EU clinical evaluation and risk management reports can serve as a basis for other markets’ technical files. The ISO 13485 certificate proves continuous system compliance and can significantly reduce additional quality system audits in the target country.

Step 4: Confirm Local Agent and Authorized Representative Requirements

Most non-EU countries require a local registrant, agent, or license holder. The ISO 13485 certificate cannot replace the legal responsibilities of a local agent.

Step 5: Confirm Post-Market Maintenance Requirements

Certificate use is not limited to the registration application stage; it also includes product changes, adverse event reporting, annual updates, and certificate renewal. Corrective and preventive actions (CAPA) and complaint handling records under the ISO 13485 system are key areas reviewed by regulators in each country.

Documentation and Evidence

When using an ISO 13485 certificate for overseas registration, companies must provide the certificate as quality system evidence while submitting complete product technical documentation. Basic information includes product description, intended use, working principle, classification basis, and registration pathway explanation.

• Quality system documents: In addition to the ISO 13485 certificate, submit the system scope, factory address, production license or business license, and recent internal audit and management review reports. If required by the target country auditor, also provide non-conformity reports from the last certification audit and the closure records.
• Product performance verification reports: Must be specific to the model, including sterilization effectiveness validation, physical properties, chemical properties, electrical safety, and electromagnetic compatibility. The ISO 13485 certificate cannot cover these verification data because the certificate only addresses the system, not product performance.
• Sterilization validation documentation: This is a unique core file for sterilization and disinfection equipment, including sterilization cycle development, performance qualification, simulated transport validation, installation qualification (IQ), operational qualification (OQ), and performance qualification (PQ) reports. These reports must be based on the actual product and not copied from another model.
• Risk management report: Must comply with ISO 14971 and be linked to the design and development control documents under ISO 13485.
• Clinical evaluation: Most sterilization devices do not require clinical trials, but literature data on sterilization effectiveness or comparative device information must be provided.
• Labeling and instructions for use: Must be localized according to the target country requirements. The product name and model range on the ISO 13485 certificate must be consistent with the registration files. If the certificate scope states “manufacture of medical devices” but the product is a sterilizer, confirm that the quality system audit scope covers the product category.
• Other supporting evidence: Supplier audit records, sterilization process qualification records, product release records, post-market surveillance plans, and corresponding safety update reports. These materials support the credibility of the ISO 13485 certificate.

Common Errors

• Submitting only the ISO 13485 certificate without product technical files, leading to immediate rejection or request for correction.
• Mismatch between certificate scope and registered product. For example, a certificate covering only “packaging materials” is used for sterilization equipment registration.
• Ignoring differences in physical, chemical, and electrical safety standards in the target country. IEC standards are accepted in most countries, but the US FDA also requires UL or specific national differences.
• Failing to perform special sterilization process validation. The ISO 13485 system audit does not directly evaluate sterilization effectiveness; a separate sterilization validation report is required.
• Labels and instructions for use are not localized, missing local language or symbols, and are deemed non-compliant.
• No local agent appointed, or unclear agent responsibilities, causing poor regulatory communication.
• Insufficient post-market surveillance data. Many companies provide only system files but lack complaint records, adverse event reports, and annual updates.

Company Preparation Checklist

• Confirm the scope and validity of the ISO 13485 certificate and ensure it remains valid.
• Link the quality system files corresponding to the certificate with product files to form a traceable evidence chain.
• Prepare the product classification basis and determine the target country’s risk class and registration pathway.
• Collect performance validation, sterilization validation, biocompatibility, safety standards, and EMC reports.
• Organize risk management reports and usability evaluation files.
• Prepare clinical evaluation or literature support data.
• Prepare labels and instructions for use in the target country’s language and format.
• Appoint or contact a local agent/authorized representative, sign an agreement, and clarify responsibilities.
• Establish a post-market surveillance system and adverse event reporting process.
• Verify that the product name and model/specification covered by the ISO 13485 certificate fully match the registered product.

AIMEILI Perspectives

The most common misjudgment is assuming that an ISO 13485 certificate can automatically replace the target country’s registration certificate. In fact, the certificate is only evidence of system compliance; it does not prove product-specific performance. We advise companies to position ISO 13485 as the foundation, not a pass.

At the early stage of a project, prioritize product classification and regulatory gap analysis. First confirm whether the target country accepts ISO 13485 for direct audit or requires MDSAP or a local system audit. This avoids substantial document rework later.

Which materials can be reused? Design and development documents, risk management reports, supplier management records, internal audit reports under the ISO 13485 framework, as well as sterilization validation reports and performance verification reports submitted during NMPA/CE registration, can be reused across multiple countries. What must be localized? Labels, instructions for use, local agent information, environmental conditions such as temperature and humidity, grid voltage and frequency differences, and test standard variations in specific countries must be redone.

Local agents and certificate control rights are critical to project success. Many companies hand registration files directly to distributors, resulting in unclear certificate ownership and difficulties with subsequent changes and renewals. We recommend that companies entrust professional regulatory consultants to manage certificates and sign contracts with local agents that clearly define rights and responsibilities.

For multi-country registration, the biggest concern is repeatedly modifying the same technical file for different countries. We recommend that companies first compile a “core technical file package” and then add country-specific modules according to target market requirements. With the ISO 13485 certificate as the system foundation and modular documentation, the risk of repeated preparation and correction can be significantly reduced.

Common Follow-Up Questions

Can the ISO 13485 certificate be used directly for FDA registration?

No. The FDA requires quality systems to comply with 21 CFR 820, which is now aligned with ISO 13485:2016, but companies must still complete FDA establishment registration and device listing. If a 510(k) submission is required, the ISO 13485 certificate can serve as quality system evidence, but the FDA may still conduct an inspection. We recommend evaluating MDSAP certification as well.

How much value does the ISO 13485 certificate have for sterilization equipment registration in Southeast Asia?

In Thailand, the Philippines, Malaysia, and other countries, the ISO 13485 certificate is widely accepted as quality system proof and often exempts the need for a local on-site audit. However, a complete product technical file is still required for registration. Some countries such as Vietnam and Indonesia have additional local requirements, and the certificate scope must match the product category.

Will an expired ISO 13485 certificate affect an already submitted registration application?

Yes. Most regulators require the certificate to remain valid before and after approval. If the certificate expires, the company must immediately arrange a recertification audit; otherwise, the registration may be suspended or withdrawn. We recommend initiating the renewal process at least six months before expiration and notifying all target country agents.

Continuing Reading

Previous article: Can testing reports for sterilization and disinfection equipment be reused for overseas registration?
Next article: How to conduct post-market surveillance for sterilization and disinfection equipment overseas?
Related: How to use ISO 13485 certificates for home medical device overseas registration; How to use ISO 13485 certificates for POCT product overseas registration; Common reasons for supplementary materials in laboratory equipment overseas registration; When is change notification required for laboratory equipment registration; How to prepare registration dossiers for sterilization and disinfection equipment; How to organize technical files for sterilization and disinfection equipment.

Content Review and Applicability

Author: AIMEILI Regulatory Editorial Department
Professional review: AIMEILI Medical Device International Registration Project Team
Source principle: Priority is given to official regulatory authorities, international organizations, standards organizations, and publicly available regulatory materials; industry media and project experience are used only as supporting judgment.
Applicability: This article is intended for preliminary understanding, documentation preparation, and project planning. It does not replace the formal requirements of the target country’s regulatory authority, testing conclusions, or legal opinions.