How to Prepare Registration Dossiers for Overseas Registration of Active Medical Devices?

Core Summary

Preparing registration dossiers for overseas registration of active medical devices is not a simple matter of applying the complete NMPA, CE, or FDA file sets. Instead, the first step is to understand the target country's regulatory logic, and then reuse and localize documents based on the product risk class and intended purpose. Companies should first confirm whether the device falls within the scope of medical device regulations in the target country, and clarify the classification rules, registration pathway, applicant entity, and local agent requirements. Next, assess whether existing ISO 13485 quality system documents, risk management reports, electrical safety and EMC test reports, software lifecycle documentation, and clinical evaluation or clinical evidence can be used directly, and determine which items require supplementary local testing or declarations by the local representative. Common risks include neglecting local language labeling and instruction requirements, unclear legal obligations of authorized representatives and certificate holders in changes and renewals, non-recognition of clinical evaluation evidence, missing software cybersecurity documentation, and lack of local implementation for post-market surveillance and adverse event reporting. The documentation system should be built around the Product Master File, organized according to a Common Technical Document (CTD) or similar format, so that multi-country reuse is supported. Companies should complete regulatory research and gap analysis in the early stages of the project, rather than waiting until test reports are about to expire to make up for missing information.

Applicable Scenarios and Core Questions

This article addresses active medical devices including diagnostic equipment, therapeutic equipment, monitoring devices, infusion pumps, surgical energy platforms, imaging systems, and rehabilitation stimulators. The purpose is to help companies establish a practical dossier preparation pathway, not to provide a one-size-fits-all checklist, because regulatory frameworks, classification rules, technical documentation formats, and post-market obligations vary significantly across countries.

Before starting overseas registration, companies must answer three questions. First, is the product classified as a medical device in the target country, or is it exempt or managed under another category? Second, what is the risk class, and what is the corresponding registration pathway: notified body review, competent authority review, notification, or self-declaration of conformity? Third, who can act as the applicant or certificate holder, and is it mandatory to appoint a local agent or authorized representative?

Many companies ask directly “what documents do I need to prepare,” but the correct question is “what documents does the target country require, and which of my existing documents are recognized, and which need to be supplemented?” If the document structure is not unified, recompiling every time you enter a country not only reduces efficiency, but also increases the risk of errors in translation, format, and evidence chain. In particular, GHWP member states, Southeast Asia, the Middle East, and Latin America are gradually moving toward harmonized documents, and core technical document reuse is feasible, but only if the master file is sufficiently complete.

Registration Determination Logic

Step 1: Definition Determination

Confirm whether the product falls within the scope of medical device regulations in the target country. Some active products, such as health management apps, sports recovery devices, and general electronic therapy devices, may not be medical devices in some countries, or may be classified as low-risk personal health devices. If this determination is wrong, all subsequent dossier preparation will be misaligned.

Step 2: Classification and Conformity Pathway

For example, under the EU MDR, active devices are typically Class IIa or IIb and require notified body involvement. Under the US FDA, most active devices are Class II and require 510(k). In Southeast Asia, Singapore's HSA and Thailand's TFDA both use risk-based classification, but the submission format differs. In the Middle East, Saudi Arabia's SFDA and the UAE's MOHAP each have their own national requirements.

Step 3: Existing System Evidence Assessment

Companies should treat existing NMPA registration certificates and test reports, CE technical files, FDA 510(k) or PMA documentation, ISO 13485 certificates, MDSAP certificates, CB reports, and UL reports as reusable assets. However, reusable does not mean directly copyable. For example, the EU MDR requires clinical evaluation reports to be based on current regulations and MedDev 2.7/1 rev.4, with sufficient literature searches and clinical data. The US FDA requires substantial equivalence comparison with performance data. Many Latin American and Southeast Asian countries require free sales certificates from the country of origin or notarized translations of CE certificates.

Step 4: Localization Gap Determination

Even when core documents are technically reusable, labels, instructions for use, local language, units of measurement, plug standards, voltage and frequency, network interfaces, and patient use information must be localized. One frequently overlooked point is that some countries have independent cybersecurity requirements for software. For example, Singapore and Australia require cybersecurity and privacy risk assessments for medical device software. If the software version, middleware, and remote diagnostic functions of an active device are not clearly described in the registration dossier, subsequent changes will be very difficult.

Dossier and Evidence

Core documents for overseas registration of active medical devices can be organized into seven modules.

• Module 1: Administrative and Management Documents – company qualifications, letters of authorization, local agent agreements, proof of registration in the country of origin, or free sales certificates.
• Module 2: Product Description and Intended Purpose – working principle, structural composition, mode of action, patient population, environment of use, contraindications, and warnings.
• Module 3: Risk Management Documents – ISO 14971 risk management report, risk analysis, risk evaluation, risk control measures, and overall residual risk evaluation. For active devices, risk management outputs related to basic safety and essential performance must be included, covering electrical safety, mechanical safety, radiation safety, electromagnetic compatibility, and biocompatibility (if the device contacts the patient).
• Module 4: Technical Specifications and Performance Verification – technical parameters, mechanical and electrical drawings, list of critical components, software description and software verification reports, product performance test reports, and stability or reliability test reports. For active devices, EMC and electrical safety test reports usually come from third-party laboratories, and laboratory accreditation must be recognized by the target country.
• Module 5: Clinical Evaluation or Clinical Evidence – requirements vary by country. Some products can rely on substantial equivalence or equivalent device evidence, while others require local clinical trials, such as certain Class III active implantable devices or high-risk therapeutic devices. The clinical evaluation report should include the literature search protocol, clinical data assessment, risk-benefit analysis, and conclusion.
• Module 6: Labeling and Instructions for Use – this is not just translation. The target country may require local language, and compliance with local symbol standards, warning wording, unit systems, and shelf life labeling. For example, the EU requires CE marking and MD symbols, the US requires FDA labeling regulations, and Saudi Arabia requires Arabic labels.
• Module 7: Post-Market Surveillance and Quality System Documents – regulatory authorities usually require submission of a post-market surveillance plan, adverse event reporting procedures, after-sales service system, and division of responsibilities with the local agent. ISO 13485 and MDSAP certificates can greatly simplify the review of quality system documentation, but if the manufacturing site is subject to overseas registration inspection, the complete quality system documentation must be prepared.

Common Mistakes

• Submitting CE technical files directly to Southeast Asian or Middle Eastern countries without first performing a definition determination, resulting in rejection at the acceptance stage.
• Neglecting the scope of authorization of the local agent. The agent is only responsible for submission and is not authorized to handle changes, renewals, or vigilance system contacts, leaving the certificate unmanaged afterward.
• Failing to re-review old CE or FDA documents. Active devices that have undergone software updates, hardware changes, or critical component changes without updating technical files will produce contradictory registration submissions.
• Assuming that passing IEC 60601 testing is sufficient for all countries. In reality, some countries may require additional national difference testing, such as Japan's PSE certification requirements, or Brazil's requirement for INMETRO-recognized laboratories for electrical safety testing.
• Weak clinical evaluation. Many companies replace a complete clinical evaluation report with a few English abstracts, without literature search strategies, inclusion/exclusion criteria, and analysis conclusions, which is nearly impossible to pass under MDR and new Southeast Asian regulations.
• Missing software-related documentation. Active devices often include embedded software, standalone software, or apps. Without software requirement specifications, software test reports, cybersecurity assessments, and update descriptions, the registration dossier is considered incomplete.
• Post-market surveillance plans are a formality. Writing “will comply with regulations” without clarifying the specific responsibilities of the local agent, manufacturer, and distributor, and without specifying the flow of complaints, adverse events, and corrective actions.

Manufacturer Preparation Checklist

• Establish a regulatory registration matrix for target countries, clarifying the definition, classification, registration pathway, fees, timeline, and agent requirements for each country.
• Develop a Product Master File list, storing technical data, test reports, risk management, clinical evidence, and quality system documents in a stable structure, ensuring traceability for each update.
• Complete a gap analysis comparing target country requirements with existing documents, and list all required additional tests, document translations, notarizations, and localization modifications.
• Designate a single technical document owner to ensure synchronization of information across engineering, registration, quality, and after-sales departments. Do not let a regulatory affairs specialist compile documents alone.
• Sign a legally binding authorization agreement with the local agent early, clarifying certificate holder rights, change authority, renewal obligations, post-market surveillance reporting mechanisms, and termination clauses.
• Compile existing clinical data and literature for similar products to create a continuously updated clinical evidence package, saving time for future model extensions or multi-country registrations.
• Check the remaining validity of test reports, especially electrical safety and EMC reports, which are typically required to be within three years. Older reports may not be accepted in new submissions.
• Prepare a traceability matrix linking risk control measures to test requirements and design verification results. This is one of the most frequently reviewed items by auditors.

AIMEILI Regulatory Interpretation

Companies most commonly misjudge the assumption that having CE or FDA registration certificates is a passport to the world. In reality, many countries refer to international documents but impose additional requirements concerning country-of-origin registration, local test reports, authorized representatives, language, and clinical data. If you treat target country registration as a simple translation and submission exercise, you will be caught off guard by the auditing observations.

In the early stages of a project, the first step should not be to contact testing laboratories, but to conduct regulatory research and gap analysis. We recommend that clients spend two weeks completing a target country registration requirements matrix, an existing document inventory, and a gap analysis. This step significantly reduces the cost of corrections and delays in later project phases.

Regarding document reuse, core technical documents such as risk management reports, software verification reports, electrical safety test reports, and quality management system evidence can be reused. What must be localized are labels and instructions for use, local agent documents, local applicability statements in clinical evaluations, and, in some countries, local clinical trials or local verification data.

Business Impact

The business impact of a well-structured registration dossier is a shorter time-to-market, reduced cost of rework, and better control over certificate maintenance across multiple countries. Without a unified Product Master File, companies waste significant time and resources recompiling documents for each country, increasing the risk of discrepancies that lead to regulatory questions and approval delays. Moreover, clarity in the local agent agreement is critical because many countries hold the registration certificate in the name of the local agent. If the agent is uncooperative, the manufacturer may lose the ability to renew the certificate or respond to competent authority inspections. We have seen more than one company lose a registration certificate due to an agent change. Therefore, contracts must explicitly define certificate ownership, document control rights, and post-termination handover obligations.

For multi-country registration, a single “International Registration Master File” reduces repeated compilation and correction risk. Based on this master file, country-specific archives are created according to each country's requirements. This ensures that test reports, software documentation, clinical evidence, and risk management remain version-consistent, avoiding audit observations caused by mixed old versions.

Frequently Asked Questions

Is a Free Sales Certificate (CFS) from the country of origin mandatory?

Most countries require a CFS or proof of registration from the country of origin for initial registration. If the product is not legally marketed in the country of origin, many countries will question it. The solution is to obtain a registration certificate or filing certificate in the country of origin first, and then apply for a CFS. Some countries also accept a letter of guarantee from the local agent or a statement of legal marketing in the country of origin with CE marking as an alternative, but each country's policy must be confirmed individually.

Can test reports be shared across countries?

Electrical safety and EMC test reports can generally be shared, but the laboratory accreditation must be recognized by the target country. For example, the EU accepts IECEE CB reports, but some countries still require the CB test report and certificate. The US FDA accepts reports from accredited laboratories. Brazil and Argentina have additional requirements for national laboratories or international certifications. When sharing, check that the product model, electrical parameters, and software version are identical. Any difference is a technical change and cannot be simply covered.

Will software updates to an active medical device affect registration?

Yes. Software in an active medical device is usually a separate evidence module. If a significant software change occurs after registration, such as changing algorithms, adding functions, or affecting patient safety, a change application or supplementary clinical evidence must be submitted to the regulatory authority. Even non-significant changes should be reported during the next annual update or renewal of registration. Companies should establish a software version identification and change record table, specifying the corresponding test reports and risk management versions for each version.

Content Review and Applicability

This article was compiled by the AIMEILI Regulatory Editorial Team, based on the AIMEILI Registration Practice Database, the Medical Device International Registration Knowledge Base, and public regulatory information. Professional review was conducted by the AIMEILI Medical Device International Registration Project Team. The source principle prioritizes official regulatory authorities, international organizations, standards organizations, and publicly available regulatory materials; industry media and project experience are used only as auxiliary reference.

Applicability: This article is intended for preliminary understanding, document preparation, and project planning. It does not replace the official requirements of target country regulatory authorities, testing conclusions, or legal advice. For specific projects, the latest requirements of the target country regulatory authority and the product's own dossier basis shall prevail.