How to Handle Inconsistent Quality System Certificates for Overseas Registration of Active Medical Devices?

Key Summary

When registering active medical devices overseas, discrepancies between quality system certificates and the target country’s requirements are common. Examples include: the manufacturer on an NMPA registration certificate differing from the scope covered by the ISO 13485 certificate; an expired address on a certificate; the system standard version not matching local regulations; or the manufacturer being unable to provide a valid MDSAP certificate when registering in GHWP member countries. Companies should first determine whether the product falls within the target country's medical device regulatory scope, clarify the risk class and registration pathway, and then review existing quality system evidence such as NMPA, CE, FDA, ISO 13485, and MDSAP, comparing each item against the target country’s technical documentation, labeling, and local authorized representative requirements. The core solution is to establish a consistency statement and a gap analysis document, supplementing with on-site audits or obtaining local quality system certificates when necessary. Common risks include rejection due to inaccurate certificates, registration failure because the legal entity does not match, and penalties for failing to notify post-market system changes. Companies should complete a gap analysis early in the project, designate a person responsible for the localization of system certificates, and rely on the local authorized representative to maintain certificate validity and change control. This article is based on the AIMEILI Registration Practice Database, the Medical Device International Registration Knowledge Base, and publicly available regulatory information; specific projects should follow the target country regulatory authority’s latest requirements and the product’s technical documentation.

Applicable Scenarios and Core Issues

In overseas registration of active medical devices, inconsistency in quality system certificates is a common reason for deficiency letters. Typical manifestations include: using a different version of the system documentation than what was submitted for overseas registration; the ISO 13485 certificate not covering the intended model; mismatched registered address and production address on the certificate; or submitting English or Chinese documents when the target country requires a local-language quality manual summary. Inconsistency does not necessarily mean the quality system is nonconforming; rather, it means the regulatory evidence chain is mismatched. Most GHWP member countries, Southeast Asian and Middle Eastern countries treat quality system certificates as a precondition for product safety and effectiveness. If discrepancies exist between the company name, address, product scope, or standard version on the certificate and the information in the application, review bodies usually issue a deficiency notice or refuse to accept the application. Therefore, companies must first identify the specific type of inconsistency and then determine the path forward: submit an explanation letter, update the certificate, or re-apply for a locally recognized quality system certificate. It is also necessary to assess whether these issues affect the registration timeline and whether they could be considered fraudulent submission.

Registration Judgment Logic

Step 1: Determine Regulatory Scope

The first step is to determine whether the product falls under the medical device regulatory scope of the target country. Active devices are usually regulated due to electrical safety, electromagnetic compatibility, software functionality, and other factors, but definitions and classifications of “medical device” vary by country. For example, some rehabilitation active devices may be managed as ordinary electronic products in certain countries, in which case the quality system certification dispute disappears.

Step 2: Determine Risk Class and Registration Pathway

Class A, B, C, and D products have different levels of system review depth. For high-risk products, regulatory authorities may require factory inspections rather than merely accepting an ISO 13485 certificate. Companies should consult the target country’s registration guidelines to confirm whether the quality system certificate is a precondition for acceptance or just one module in the technical documentation.

Step 3: Clarify the Applicant Entity

The overseas registration applicant is usually a local entity or authorized representative, while the holder of the quality system certificate is the manufacturer. When the applicant and the certificate holder differ, you need to provide proof of authorization. If the product is manufactured under OEM/ODM arrangements, you must submit the manufacturing agreement and quality agreement.

Step 4: Assess Reusability of Existing System Documentation

NMPA production licenses, ISO 13485 certificates in CE technical files, FDA establishment registrations and listings, and MDSAP audit reports can all serve as components of quality system evidence. However, you must check validity periods, scope, and language requirements. GHWP member countries do not yet fully mutually recognize quality system certificates, so you cannot directly use one country’s approval to cover other markets.

Documentation and Evidence

Handling inconsistency in quality system certificates requires a complete evidence chain. Basic documents include: a valid ISO 13485 certificate, MDSAP audit report, NMPA medical device production license, quality manual, procedure documents, internal audit and management review records, and product release records. When certificate information differs from the registration application, prepare a gap analysis report. The report should list each difference between the existing certificates and the target country’s requirements, explain the reason for the difference (e.g., standard version update, address change, product scope expansion), and propose corresponding control measures.

• The ISO 13485 certificate should cover the intended product and be valid.
• If the target country requires a local version of GMP or ISO 13485, convert it and submit on time.
• The NMPA production license should include the production address and product category, with a scope no smaller than the registration scope.
• Manufacturer information in a free sale certificate must be consistent with the system certificate.
• MDSAP certificate can serve as supplementary evidence for multi-country recognition but does not guarantee automatic acceptance by the target country.
• A local-language version of the quality manual and control procedures can serve as localization evidence.
• If the target country requires audit or inspection reports, provide recent internal audits, management reviews, annual quality system maintenance records, and corresponding adverse event monitoring and CAPA reports.

Common Mistakes

• Submitting only an ISO 13485 certificate without explaining the difference between its scope and the registered product.
• Ignoring the mismatch between the applicant and the certificate holder, using a parent company’s certificate to file a subsidiary’s product.
• Assuming ISO 13485 is globally valid without seeking local recognition or supplementary audits.
• Failing to renew system certificates before expiration, leading to invalid certificates during registration.
• Simply translating the NMPA production license without adapting it to the target country’s format.
• Missing the application process for on-site quality system inspection in the target country, only arranging it after a deficiency notice.
• Lacking a post-market quality system change notification mechanism, so changes made after approval are not reported in time.
• Having a local authorized representative who is unfamiliar with system documents and cannot explain discrepancies or provide supplementary information.

These errors lead to increased deficiency letters, longer registration timelines, and in severe cases, could be deemed fraudulent submission, affecting future applications.

Company Preparation Checklist

• Identify the target country’s specific requirements for quality system certificates, including format, language, notarization, and authentication.
• Compare existing certificates with the latest registration documents and complete a signed gap analysis.
• Update ISO 13485 or equivalent certificates to ensure coverage of the intended product.
• Prepare authorization letters, manufacturing agreements, and quality agreements to clarify responsibilities between manufacturer and applicant.
• Compile internal audit and management review reports from the past two years, confirming no major nonconformances.
• Create local-language labels and instructions for use to avoid rejection due to label inconsistencies.
• Appoint a local authorized representative with authority to communicate with regulators and receive deficiency notices.
• Maintain a quality system change list to ensure ongoing compliance with target-country regulations and post-market requirements.

Complete this checklist before submission and retain a full set of evidence copies for factory inspections or audits.

AIMEILI Perspective

Active medical device companies often mistakenly believe that a single ISO 13485 certificate will be accepted by all countries. In fact, GHWP member countries, Southeast Asian and Middle Eastern countries each have their own requirements regarding the format, validity period, language, and certification body for quality system evidence. More critically, the company name, address, and product scope on certificates must match the registration application word for word; any minor discrepancy can be challenged by review bodies. Early in the project, companies should perform a gap assessment of quality system certificates rather than directly translating existing documents. We recommend checking the validity and scope of all certificates six months before starting overseas registration, and planning updates or recertification. Identifying inconsistencies early helps avoid reactive deficiency handling during registration review. Reusable documents include system certificates, audit reports, quality manual frameworks, and general procedure documents. Items that must be localized include the language version, target-country regulatory format, labels and instructions, regulatory compliance declarations, and local authorized representative authorization documents. In particular, regulatory references and adverse event reporting clauses in the quality manual should be revised according to target-country regulations. A local authorized representative, certificate control, change management, and renewal are critical after approval. Companies should clarify with the local representative the duties of storing certificates and reporting changes, to prevent certificate invalidation due to representative turnover or address changes. If the certificate holder differs from the actual production address, proactively communicate with the regulatory authority to avoid risks revealed during post-market inspections.

For multi-country registrations, avoid repetitive work. Build a core set of quality system evidence documents and adjust them locally for each target country. For GHWP member countries, prioritize MDSAP audit reports as general evidence and prepare supplementary documents for country-specific requirements. This approach reduces deficiency risk and avoids duplicate effort.

Common Follow-up Questions

What should I do if the ISO 13485 certificate scope does not include the intended product?

Contact your certification body to extend the certificate scope or request a gap audit. If time is limited, you may submit a risk analysis explaining that the existing system covers similar models and commit to completing the expansion after obtaining the certificate. However, some countries do not allow commitments in place of certificates, so confirm in advance.

Can I register if the target country requires a GMP certificate but we only have ISO 13485?

Check whether the target country mutually recognizes GMP and ISO 13485. In countries without mutual recognition, you may need to apply for a local GMP inspection or have the inspection conducted by an accredited body recognized by the target country. Consult your local representative or regulatory consultant to determine if your existing system documents can be converted to GMP documents.

What if the address on the quality system certificate differs from the production address in the registration dossier?

Address discrepancies often result from a new production site, relocation, or delayed certificate updates. Apply to the certification body for an address change as soon as possible and provide proof of the old-new address link. If the registration dossier has already been submitted, provide supplemental information to the review body explaining the change and submit the revised certificate.

Do we need to reapply for a quality system certificate if the overseas applicant is not the manufacturer?

No, but you must provide authorization documents and an explanation. The manufacturer remains the responsible party for the quality system, and the applicant may ask the manufacturer to issue a quality statement. If the applicant’s name differs from the certificate holder’s company name, submit an agency agreement or contract manufacturing agreement.

Can an NMPA production license be used as a quality system certificate for the target country?

Most countries do not directly accept the NMPA production license, but it can be used as part of the system evidence. Typically, you must also provide an ISO 13485 certificate or a GMP certificate recognized by the target country. Check the target country’s registration guidelines to confirm whether the NMPA certificate is acceptable; if not, prepare an equivalent document in advance.