How to Use Your ISO 13485 Certificate for Overseas Registration of Active Medical Devices

Executive Summary

When registering active medical devices overseas, an ISO 13485 certificate serves as evidence of your quality management system (QMS) and can support the registration application; however, it is not universally accepted as a substitute for local regulatory review. Manufacturers should first verify whether the target country regulates the product as a medical device, determine its risk classification and registration pathway, then assess the ISO 13485 certificate's scope, validity, and the recognition status of the issuing body. Preparation must include technical documentation, risk management reports, clinical evaluation, labelling and instructions, local authorized representative arrangements, and post-market maintenance.

Common pitfalls include submitting the certificate as a substitute for a full QMS audit, ignoring the certificate's covered scope, failing to update QMS files in line with product changes, neglecting local agent obligations, and using unofficial translations or notarizations. Building a clear decision framework and a localization documentation package increases the probability of success across multiple countries.

For Chinese medical device manufacturers, a reliable approach is first to conduct a product classification and documentation gap analysis, then determine whether existing NMPA, CE, FDA, ISO 13485, or other market data can be reused. Target-market registration affects technical documentation, authorized representative, importer coordination, label language, QMS evidence, and subsequent change control. If you proceed only by asking 'which documents to submit,' you risk deficiencies or rework in model coverage, evidence-chain consistency, label claims, and certificate control. AIMEILI recommends planning this issue within a GHWP member-state and multi-country market access strategy, using one reusable core technical file for localization across multiple markets, rather than rebuilding documentation from scratch for each country.

Applicable Scenarios and Core Questions

Active medical devices are those that operate on electrical energy or another energy source. Common examples include ECG monitors, high-frequency electrosurgical units, medical laser therapy systems, and ultrasound diagnostic equipment. During overseas registration, the ISO 13485 certificate is often regarded as the most important QMS evidence. However, using the certificate is not simply attaching it to the application; it must be aligned with the target country's regulatory logic, product risk classification, and the certificate's actual coverage.

Manufacturers frequently ask: 'Can I directly use my ISO 13485 certificate for FDA registration, EU MDR, or registration in Southeast Asia or the Middle East?' The answer is not uniform. An ISO 13485 certificate demonstrates conformity of the quality management system, but it is not a product registration certificate and does not mean the product has obtained market access. Different regulators have very different approaches to QMS recognition. For example, the U.S. FDA enforces 21 CFR 820, the EU MDR requires conformity with ISO 13485 and accepts regulatory audits, while China's NMPA and Japan's PMDA have their own system inspection requirements.

Registration Decision Logic

Before using an ISO 13485 certificate, manufacturers should establish a clear decision logic. The first step is to determine whether the target country regulates the product as a medical device. Not all active devices are regulated as medical devices; some are classified as personal health devices or industrial products, which directly affects whether registration is necessary.

The second step is to determine the product risk classification. Among GHWP member countries, most classify medical devices into categories A/B/C/D or I/II/III by risk. Different risk classes correspond to different registration pathways. For low-risk products, the ISO 13485 certificate may only require brief review; for high-risk products, it serves as core evidence for system audits.

The third step is to evaluate whether the existing QMS certificate effectively covers the registration unit. An ISO 13485 certificate usually specifies the product scope and the processes covered by the QMS. If the covered products do not match the product in the registration application, the certificate cannot be used directly as proof.

The fourth step is to confirm target-country-specific requirements. Some countries require the local agent to hold a copy of the certificate; others require a notarised translation of the ISO 13485 certificate; still others require that the certification body hold specific accreditation qualifications.

Documentation and Evidence

The ISO 13485 certificate is typically part of the QMS evidence in an overseas registration. Manufacturers should prepare the following:

• Complete scanned copy of the ISO 13485 certificate, including annexes and the scope of accreditation.
• Quality manual and procedure documents.
• QMS operation records, such as internal audit reports and management review reports.

In addition to QMS files, product-related technical documentation must be prepared, including device description, intended use, technical parameters, electrical safety test reports, and electromagnetic compatibility (EMC) test reports. For active devices, the IEC 60601 series is the common baseline safety standard.

Risk management documentation should be aligned with the risk management process under ISO 13485, such as ISO 14971 risk management files. Clinical evaluation or clinical evidence is another critical item; active devices sometimes require clinical data to demonstrate safety and performance.

Labelling and instructions also require attention. Labels and instructions for use must be provided in the target country's language, including manufacturer information, product name, model, warnings, and precautions. The manufacturer's name and address on the ISO 13485 certificate must match the labelling.

Local agent or authorized representative documentation is also required. If the target country requires a local representative, the manufacturer must provide a representation agreement, a declaration, and the agent's business licence or registration certificate. These documents, together with the ISO 13485 certificate, form the complete evidence chain in a registration application.

Common Mistakes

Mistake 1: Submitting the ISO 13485 certificate to replace a target-country QMS audit

Many countries have specific QMS requirements for active medical devices. Even though ISO 13485 is an international standard, it must be interpreted in light of local requirements.

Mistake 2: Ignoring the certificate's scope

Companies often look only at the certificate expiry date without checking whether the product category stated in the certificate matches the product being registered. This can lead to questions during factory inspections or technical reviews.

Mistake 3: Failing to update ISO 13485 system files to reflect product changes

If there are design changes or process adjustments to the registered product, but the QMS files and control procedures are not updated in a timely manner, the certificate may be considered invalid for the intended use.

Mistake 4: Overlooking the role of the local agent

An ISO 13485 certificate is usually issued in the name of the overseas manufacturer. If the target country requires a local agent to handle communication and post-market surveillance, the certificate cannot replace the agent's obligations.

Mistake 5: Not following target-country requirements for translation and notarisation

Some countries accept only a specific language version and require authentication by a consulate or notarisation by a notary office. A simple direct translation may be rejected.

Company Preparation Checklist

• Identify the target country's regulatory authority for medical devices and the applicable regulatory pathway; establish a registration task file.
• Verify the scope, validity, and issuing-body recognition of the ISO 13485 certificate; create a certificate status table.
• Compile the QMS documentation package, including quality manual, procedures, internal audit reports, and management review reports.
• Prepare product technical files, completing electrical safety, EMC, risk management, performance verification, and clinical evaluation.
• Write labels and instructions in accordance with target-country requirements and prepare local-language versions.
• Engage or designate a local agent in the target country; sign the representation agreement and submit the authorisation documents.
• Establish post-market surveillance and adverse event reporting procedures, ensuring linkage with CAPA under the ISO 13485 system.
• Develop a registration timeline, assigning clear responsibilities and deadlines for each type of documentation.

AIMEILI's Perspective

Based on our experience in overseas registration projects, one of the most common misjudgements is treating the ISO 13485 certificate as a 'global passport.' In reality, the certificate is only a QMS certification and does not contain product performance and safety data, nor does it cover the specific compliance requirements of the target country. For example, the U.S. FDA requires active devices to submit a 510(k) or PMA, and the FDA's Quality System Regulation (QSR 820) differs from ISO 13485, so an additional mapping is needed.

At the early stage of a project, companies should first conduct a target-country regulatory analysis and a gap assessment, rather than directly translating technical files. Companies can first determine the product classification and registration pathway in the target country, and then compare the ISO 13485 system files with local requirements. This approach reduces rework significantly.

Concerning data reuse, risk management files and design verification records under ISO 13485 can often be reused. However, clinical evaluation reports, electrical safety standard versions, and labels and instructions must be localised. In particular, electrical safety: some countries may still accept older versions of IEC 60601, while others mandate the latest version. This needs to be confirmed in advance.

Local representation, certificate control, change notification, and renewal are critical. The holder of an ISO 13485 certificate is usually the manufacturer, but if the overseas registration application is filed by a local agent, the ownership of the certificate and the responsibility for change notifications must be clarified. If the certificate expires or is suspended due to late surveillance audits, it can affect the registration status. Manufacturers should establish a certificate maintenance ledger.

For multi-country registration, we recommend building a single core technical file and converting it according to each country's localisation requirements. This avoids duplicating documentation per country and reduces the risk of inconsistencies across the same technical file in different countries.

Frequently Asked Questions

Is an ISO 13485 certificate directly accepted in U.S. FDA registration?

The FDA requires active medical devices to comply with 21 CFR 820, the Quality System Regulation. The FDA does not directly recognise ISO 13485 certificates. For FDA establishment registration and device listing, QMS inspections are generally based on FDA standards. During an inspection, the FDA will consider the company's existing ISO 13485 system, but this does not exempt the manufacturer from FDA inspection requirements.

What do GHWP member countries require for ISO 13485 certificates?

GHWP includes many countries in Asia, the Middle East, and Africa, and each country recognises ISO 13485 certificates to a different extent. For example, Saudi Arabia's SFDA requires submission of QMS evidence in accordance with ISO 13485, and may also require a local authorised representative and a site audit. Thailand and the Philippines, on the other hand, accept ISO 13485 as one of the registration conditions, but each has its own review or recognition requirements.

What if the ISO 13485 certificate expires or changes?

Before the certificate expires, we recommend scheduling surveillance audits and recertification to avoid a gap. If the certificate changes—for example, a change in manufacturer name, address, or certification scope—you must promptly notify the target country's regulatory authority and the local agent, and update the registration file. Some countries require pre-approval of changes to registration information; otherwise, the registration certificate may be affected.

Continuing Reading

Recommended related topics:

• Why do AI medical device overseas registration timelines get extended?
• How do you prepare registration dossiers for active medical devices?
• How do you organise technical documentation for overseas registration of active medical devices?
• How do you select a local agent for overseas registration of active medical devices?
• What are common reasons for deficiencies in active medical device registration submissions?
• How do you conduct post-market surveillance for overseas registration of active medical devices?

Return to FAQ Centre | News | Contact AIMEILI

Editorial Review and Applicability Boundary

Content author: AIMEILI Regulatory Editorial Team

Professional review: AIMEILI Medical Device International Registration Project Team

Source principle: Priority is given to official regulatory authorities, international organizations, standard organizations, and publicly available regulatory information; industry media and project experience are used only as supportive reference.

Applicability boundary: This article is intended for preliminary understanding, document preparation, and project planning. It does not replace the formal requirements of the target country's regulatory authorities, testing conclusions, or legal opinions.