Skip to content

Explore the Global Medical & Surgical Industry

Get Listed

Medical Device Certifications & Regulatory Requirements

What the main standards, conformity marks, approvals, registrations and licences mean, and which apply in 20 markets. Search an entry or browse by category below.

Marks, standards and authorities at a glance

Badges are text labels made by SurgiFacts for navigation. They are not official logos or marks and do not imply endorsement, certification or approval by any body.

Quality management & ISO standards

Standards for how a company runs its quality system and manages risk. A QMS certificate covers the organisation, not a product, and is not a market authorization.

Product safety & technical standards

Technical standards describe how to design, test or validate a device. Meeting one is evidence toward legal requirements; it is not itself an approval or a certificate to sell.

International regulatory authorities

Regulators grant the legal permission to supply a device. Depending on the market and risk class that is a clearance or approval, a registration or listing, and often a licence for the company itself.

Regional conformity frameworks

Conformity assessment shows a device meets the rules. A conformity marking is affixed by the manufacturer after that assessment; it is not a certificate issued to the product by a regulator.

Country and regional requirements

The framework and main requirements for each market, after the international standards. Open an entry for scope, typical documentation, process and official sources. Related: Surgical instrument manufacturers · Medical AI companies

Filters

Clear all
Country or region
Requirement type
Device category
Applicability

7 entries

Saudi Arabia

Saudi ArabiaImporter or Distributor RequirementsLabeling and TraceabilityManufacturer or Establishment Licensing

Saudi Arabia Medical Devices Law and Executive (Implementing) Regulation (SFDA MDL)

Saudi Food and Drug Authority (SFDA) – Medical Devices Sector

Saudi Arabia requires a licensed establishment (MDEL) and a product marketing authorization (MDMA) before any medical device is supplied, under the 2021 Medical Devices Law.

Purpose

The Medical Devices Law (Royal Decree M/54, 1442H) and its Executive Regulation (SFDA Board decree 3-29-1443) govern the full lifecycle of medical devices in the Kingdom. SFDA issues detailed 'MDS-REQ' requirement documents and 'MDS-G' guidance under them.

Who it applies to

Local manufacturers, foreign manufacturers (through a Saudi Authorized Representative), importers, distributors, warehouses and certain service providers.

Applicable products

Medical devices and IVDs, including accessories and software; borderline products are decided under SFDA's products classification guidance.

Classification

Risk classes A (lowest), B, C and D (highest), using the rules in Annex 5 of MDS-REQ 1 (largely aligned with EU MDR rules).

General requirements

  • Establishment licence (MDEL) for each establishment, branch and warehouse (MDS-REQ 9)
  • Medical Device Marketing Authorization (MDMA) for each device or device group (MDS-REQ 1)
  • Saudi Authorized Representative for overseas manufacturers
  • UDI and Saudi-DI database listing (MDS-REQ 7)
  • Post-market surveillance and reporting to the NCMDR (MDS-REQ 11)
  • Storage/transport (MDS-REQ 12), inspections/QMS (MDS-REQ 10) and advertising approval (MDS-REQ 8)

Typical documentation

  • Applications are filed in SFDA's GHAD electronic system
  • Technical documentation per Annex 3/4 of MDS-REQ 1
  • ISO 13485:2016 QMS evidence

A general list; what is actually required depends on the device, its class and the manufacturer’s role.

Assessment process

Register the establishment and obtain the relevant licence in GHAD, then apply for MDMA for each device; list UDI data in Saudi-DI; import shipments are cleared against valid licences and MDMA.

Important notes

  • SFDA establishment licensing and product marketing authorization are separate; both are needed before devices circulate.
  • SFDA documents are revised frequently; always check the version date on sfda.gov.sa.

Points still being verified

  • No newer version of MDS-REQ 1 than v6.0 (Dec 2021) was found; SFDA may have revised it – confirm.
Saudi ArabiaImporter or Distributor RequirementsManufacturer or Establishment LicensingQuality Management Standards

Medical Device Establishment Licence (MDEL)

Saudi Food and Drug Authority (SFDA)

SFDA licence that every Saudi establishment handling medical devices (manufacturer, AR, importer, distributor, warehouse, service provider) must hold.

Purpose

Under Article 6 of the Medical Devices Law no establishment may carry out regulated activities unless registered and licensed; MDS-REQ 9 sets the conditions.

Who it applies to

Saudi legal entities acting as local manufacturer, authorized representative, importer/distributor, warehouse, testing lab, conformity assessment body, clinical-trial verification, radiation QA, technical consultation or maintenance provider.

Applicable products

All medical devices; optics importers/distributors have a specific licence type.

Classification

Not device-class based; SFDA assigns an establishment category (A–D) from the GHAD questionnaire (activities, staff, coverage, device groups), which sets the QMS evidence required.

General requirements

  • Saudi legal entity with other required government licences
  • GHAD account and establishment number; application via GHAD or the Saudi Business Center
  • Manufacturers/importers/distributors in establishment categories A and B: ISO 13485 certificate (SFDA.MD/GSO ISO 13485) from an SFDA-accredited CAB
  • ARs/importers/distributors in categories C and D: documented QMS evidence or an SFDA inspection report
  • Qualified authorized person to deal with SFDA; local manufacturers need full-time technical and quality managers
  • Importers/distributors: warehouse licence or licensed third-party storage, documented storage/transport and traceability procedures, AR details for each overseas manufacturer
  • Keep records for at least 5 years; give documents to SFDA within 10 days of request; notify changes within 10 days

Typical documentation

  • Commercial registration and other authority licences
  • QMS certificate or inspection evidence
  • Manufacturer data and signed declarations of conformity (importers)
  • Procedures for storage, transport and tracking

A general list; what is actually required depends on the device, its class and the manufacturer’s role.

Assessment process

Apply in GHAD; SFDA reviews and may inspect, then issues the licence; renewal can be requested 60 days before expiry.

Validity and renewal

SFDA states licences are issued for one year or renewable similar periods; Annex 2 of MDS-REQ 9 lists licence periods that vary by establishment type.

Important notes

  • A licence does not authorize sale of any device – each device also needs an MDMA.
  • Importers/distributors must ensure each device has a valid MDMA, a manufacturer-signed DoC and a UDI.
  • Fees exist in Annex 2 of MDS-REQ 9; not reproduced here.

Points still being verified

  • Licence periods per establishment type in Annex 2 were only partially legible in the extracted text; confirm in the original PDF.
Saudi ArabiaImporter or Distributor RequirementsManufacturer or Establishment LicensingPost-Market Surveillance

Saudi Authorized Representative for Overseas Medical Device Manufacturers (AR)

Saudi Food and Drug Authority (SFDA)

Foreign manufacturers need a Saudi-based, SFDA-licensed Authorized Representative, with a separate AR licence for each manufacturer represented.

Purpose

The AR acts for the overseas manufacturer in dealings with SFDA, including marketing authorization and post-market duties.

Who it applies to

Manufacturers located outside Saudi Arabia and the Saudi legal entities appointed as their ARs.

Applicable products

All medical devices of the represented manufacturer; only one AR per manufacturer for the same type or general group of devices.

General requirements

  • Saudi legal entity holding an SFDA AR licence (part of MDEL) for each manufacturer represented
  • Written, documented agreement with the manufacturer covering delegated activities, device types, PMS compliance and termination rules
  • QMS evidence or SFDA inspection report per establishment category
  • Authorized person with relevant qualification
  • Annually confirm the accuracy of submitted information

Typical documentation

  • Signed AR agreement / mandate from the manufacturer
  • AR licence application in GHAD

A general list; what is actually required depends on the device, its class and the manufacturer’s role.

Assessment process

The Saudi entity obtains an AR licence in GHAD for the manufacturer, then can apply for MDMA on its behalf.

Important notes

  • AR responsibility continues after termination until a new AR is appointed or devices are no longer on the market or with users.
  • AR must report incidents outside KSA affecting devices traded in KSA, cooperate in PMS, notify NCMDR of supply shortages of high-risk devices and ensure after-sales service and spare parts.

Points still being verified

  • MDS-REQ 9 v2.0 says it replaces older AR documents (IR5, G3); older AR guidance found online should not be relied on.
Saudi ArabiaProduct Registration or ListingQuality Management StandardsRegulatory Approval

Medical Device Marketing Authorization (MDMA)

Saudi Food and Drug Authority (SFDA)

Product authorization needed for every medical device supplied in Saudi Arabia, applied for in GHAD by a local manufacturer or the foreign maker's AR.

Purpose

Confirms the device meets SFDA's Essential Principles of Safety and Performance and is registered before it is made available, paid or free.

Who it applies to

Local manufacturers (holding a manufacturing licence) and overseas manufacturers via their licensed AR.

Applicable products

All medical devices and IVDs. Devices may be bundled/grouped in one application per SFDA bundling criteria (now also in guidance MDS-G-028, 2026).

Classification

Classes A–D per Annex 5 of MDS-REQ 1; the class drives evidence depth.

General requirements

  • Compliance with Essential Principles (Annex 1, or Annex 2 for IVDs)
  • Technical documentation per Annex 3/4, held and kept updated by the manufacturer
  • QMS to ISO 13485:2016 (or identical adopted standard)
  • Applicant licence (manufacturer or AR) before applying
  • Notify SFDA of significant changes within 10 days and non-significant changes within 30 days
  • Renew before expiry; renewal can be requested 90 days before expiry

Typical documentation

  • Application form in GHAD – Marketing Authorization Services
  • For low-risk devices (except IVDs, sterile, measuring, reusable surgical instruments and novel devices): device description and specification, information supplied by the manufacturer, Essential Principles checklist and evidence, risk management file, PMS plan and report
  • Other devices: full technical documentation (design and manufacturing, verification/validation incl. clinical evidence, PMS, PSUR where applicable)
  • Declaration of Conformity (Annex 14)
  • SFDA may request the full technical file at any time, to be supplied within 10 days

A general list; what is actually required depends on the device, its class and the manufacturer’s role.

Assessment process

Submit in GHAD with fees; SFDA reviews and, once satisfied, issues an Arabic/English MDMA certificate showing the device(s), Medical Device National Listing Numbers and validity period.

Validity and renewal

The validity period is stated on each MDMA certificate; SFDA refers to its circulars for fees, review times and validity.

Important notes

  • Reusable surgical instruments are expressly excluded from the reduced low-risk dossier in MDS-REQ 1, so plan for fuller technical documentation even though they are Class A.
  • Innovative devices may be exempted from some technical-documentation requirements via the Innovative Medical Device Summary Form (Annex 11).

Points still being verified

  • MDMA validity period, fees and review times are set by SFDA circulars (Annex 12), which were not reviewed; third-party sources cite figures that are not repeated here.
Saudi ArabiaRisk Management Standards

SFDA Risk Classification Rules for Medical Devices (Annex 5, MDS-REQ 1)

Saudi Food and Drug Authority (SFDA)

Saudi devices are classed A–D by rule-based risk; reusable surgical instruments are Class A, but SFDA still treats them outside the simplified low-risk dossier.

Purpose

Determines the device class used in MDMA applications, UDI phasing and evidence requirements.

Who it applies to

Manufacturers, who must classify each device under Annex 5 of MDS-REQ 1.

Applicable products

Non-IVD devices (rules in Annex 5); IVDs have separate classification rules.

Classification

Class A (low) to Class D (high). Example rules: non-invasive devices are Class A unless another rule applies; transient surgically invasive devices are higher class unless they are reusable surgical instruments, which are Class A.

General requirements

  • Classify using Annex 5 rules and definitions (duration, invasiveness, active/non-active, body system)
  • Where several rules apply, the strictest applies

Typical documentation

  • Classification rationale within technical documentation

A general list; what is actually required depends on the device, its class and the manufacturer’s role.

Assessment process

Manufacturer self-classifies; SFDA verifies during MDMA review.

Important notes

  • SFDA defines a reusable surgical instrument as one intended for surgical use in cutting, drilling, sawing, scratching, scraping, clamping, retracting, clipping or similar procedures, without connection to an active device, intended to be reused after appropriate reprocessing.
Official sources (1)

Last verified 29 October 2026

Saudi ArabiaLabeling and TraceabilityProduct Certification or Conformity Marking

Unique Device Identification (Saudi-DI) and Labelling Requirements (UDI / Saudi-DI)

Saudi Food and Drug Authority (SFDA)

Devices on the Saudi market need a UDI on label/packaging and data in the Saudi-DI database; reusable instruments also need a permanent direct-marked UDI.

Purpose

Enables identification and traceability of devices across the Saudi supply chain.

Who it applies to

Manufacturers or their ARs (Saudi-DI submission); importers/distributors must check that UDI is present.

Applicable products

Devices placed on the Saudi market and not exempted from marketing authorization; phased by risk class.

Classification

Compliance dates are phased by risk class (A–D) per SFDA announcement.

General requirements

  • UDI (UDI-DI + UDI-PI such as lot, serial, expiry, manufacturing date) in human-readable and machine-readable (AIDC) form on label/packaging
  • Submit device data (incl. risk class, GMDN, maximum reuses, storage conditions) to the Saudi-DI database; update within 10 days for changes not needing a new UDI-DI
  • Reusable devices reprocessed between patients must carry a permanent Direct Marking (DM) UDI readable through their intended life
  • Labels per MDS-REQ 1 Annex 1 section 23 (name, manufacturer, UDI carrier, expiry, sterile state etc.); lay-user information in Arabic and English; SFDA logo not allowed on labels; reusable devices need reprocessing instructions

Typical documentation

  • Saudi-DI database records
  • Labels and IFU (e-IFU allowed under Annex 10 conditions)

A general list; what is actually required depends on the device, its class and the manufacturer’s role.

Assessment process

Assign UDIs (via an issuing agency such as GS1/HIBCC/ICCBBA), apply carriers, and submit data on udi.sfda.gov.sa before the class compliance date.

Important notes

  • DM exemptions exist if marking would affect safety/performance, is not technically feasible, the device is already marked, it is only cleaned (not disinfected/sterilized) between uses, or it is single-patient use – the manufacturer must document the justification.
  • Devices imported before a compliance date may be distributed for one year after that date.
  • IFU may be omitted for Class A and B devices that can be used safely without them.

Points still being verified

  • Class-by-class UDI compliance dates are set in an SFDA announcement (sfda.gov.sa/ar/node/80966) that was not reviewed; dates are not stated here.
  • MDS-REQ 7 v4.0 dates from 2022 – check for a newer version.
Saudi ArabiaPost-Market Surveillance

Post-Market Surveillance of Medical Devices (MDS-REQ 11) (PMS / NCMDR)

Saudi Food and Drug Authority (SFDA) – National Center for Medical Devices Reporting (NCMDR)

Manufacturers and Saudi ARs must report adverse events to SFDA's NCMDR within 2, 10 or 30 days by severity and report FSCAs affecting KSA within 2 days.

Purpose

Sets reporting, investigation, safety-alert and field safety corrective action duties after a device is on the Saudi market.

Who it applies to

Manufacturers, authorized representatives and healthcare providers (and licensed establishments, who must comply with REQ 11).

Applicable products

All medical devices on the Saudi market.

General requirements

  • Report adverse events/complaints: within 2 days if a serious public health threat; within 10 days if it may cause or contribute to death or serious injury; within 30 days otherwise
  • Respond to NCMDR follow-up queries within 5 days
  • Submit initial, follow-up and final investigation reports; final report deadlines of 15, 30 or 60 days depending on severity
  • Report FSCAs/safety notices affecting KSA within 2 days of the FSCA letter date and implement per NCMDR-approved plan
  • Report violating devices and submit a corrective plan within 5 days
  • Appoint a contact officer with the NCMDR

Typical documentation

  • MD reporting form, investigation reports, FSCA letters and closure reports
  • PMS plan and report within the technical documentation

A general list; what is actually required depends on the device, its class and the manufacturer’s role.

Assessment process

Reports are submitted to the NCMDR; SFDA may issue safety alerts and require recalls or other corrective actions.

Points still being verified

  • MDS-REQ 11 v2 (2023) – check for a later revision.

Understanding certifications

These terms are not interchangeable. A quality-system certificate, a product authorization, a registration and an establishment licence are different things, granted by different bodies for different purposes. Which ones apply depends on the product, its intended use, its risk class, the company’s activities and the target market.

Product certification

Product certification is a third-party attestation that a specific product meets stated requirements; it is not the same as permission to sell a medical device.

Explains what a product certificate or certification mark means: an independent body has evaluated a product (or product type) against defined requirements, such as a safety standard, and attests that it conforms.

  • A product certificate does not by itself authorize sale of a medical device in a regulated market; regulators have their own authorization routes.
  • Product certification is different from QMS certification (e.g. ISO 13485), which covers the organization's management system, not a specific product.
  • Check that a certificate names the exact model, the standard edition, and the issuing body; certificates cannot be transferred to look-alike products.
  • Example: CE marking of a medical device is a manufacturer's declaration of conformity with EU law, sometimes involving a notified body; it is not a voluntary private certification mark.

Regulatory approval / marketing authorization

Marketing authorization is a regulator's (or legally designated body's) decision allowing a device to be placed on a market; routes and names differ by country.

Explains the legal step that permits a medical device to be sold in a given jurisdiction, and why different terms (clearance, approval, certificate, licence, registration) are not interchangeable.

  • FDA 510(k) clearance, De Novo grant and PMA approval are different outcomes; calling a cleared device 'FDA approved' is inaccurate.
  • FDA establishment registration and device listing are not FDA approval of the establishment or its devices.
  • An establishment licence (permission to operate a business activity) is different from authorization to market a specific device.
  • Authorization in one country does not carry over to another, although some regulators use reliance or abridged routes.

Product registration and listing

Registration and listing put a company or device on a regulator's record; in many systems this is administrative and does not mean the device was reviewed or approved.

Explains that many regulators keep databases of establishments and devices, and that the meaning of 'registration' varies widely: in some countries it is a filing, in others it is the actual marketing authorization.

  • US: FDA establishment registration and device listing are required for many firms, but FDA states that registration does not denote approval of the establishment or its devices.
  • EU: actor and device registration in EUDAMED is a separate obligation from conformity assessment and CE marking.
  • In some countries 'registration' is the name of the marketing authorization itself, so always read what the specific regulator means.
  • A registration number alone is not evidence of quality, safety or performance.

Manufacturer / establishment licensing

An establishment licence permits a company to carry out activities such as manufacturing, importing or distributing devices; it does not authorize any specific device.

Separates permission for a business to operate (a site or activity licence) from permission to market a particular device.

  • Holding an establishment or manufacturing licence does not mean every product the company makes is authorized for sale.
  • Conversely, a device authorization usually does not license an unrelated importer or distributor to handle it.
  • Names differ: licence, permit, registration, manufacturing licence, import licence.

Quality management system (QMS) certification

QMS certification confirms an organization's management system meets a standard such as ISO 13485; it does not certify or authorize any individual product.

Explains what an ISO 13485 or ISO 9001 certificate means: an independent certification body audited the organization's QMS against the standard for a stated scope and sites.

  • ISO itself does not certify organizations; certification bodies do.
  • ISO 13485 is a QMS standard; an ISO 13485 certificate is not a product approval, CE marking or FDA clearance.
  • Some regulators require or rely on QMS certification (e.g. Health Canada requires an MDSAP-issued ISO 13485 certificate for Class II-IV licence applications), which is a regulatory use of a voluntary standard.
  • Check that the certification body is accredited for that scope and that the certificate can be verified with the issuer.
  • QMS certification is different from FDA inspection: FDA does not issue ISO 13485 certificates.

Conformity assessment

Conformity assessment is any process showing that specified requirements are met: testing, inspection, certification, or a manufacturer's own declaration.

Gives the umbrella term for how products, processes, systems or organizations are shown to meet requirements, and explains its legal meaning in the EU medical device framework.

  • CE marking signals that the manufacturer claims conformity with all applicable EU requirements following the required conformity assessment; it is not a quality mark or a product certification by the EU.
  • A notified body certificate under the MDR is part of conformity assessment, not an EU 'approval' issued by the European Commission.
  • Using a harmonised standard gives a presumption of conformity only for the requirements that standard covers.

Accreditation of certification, inspection and testing bodies

Accreditation is a formal check of a certification body or laboratory's competence; it is not a certification of the device maker.

Explains the layer above certification: accreditation bodies assess whether certification bodies, labs and inspection bodies are competent and impartial.

  • Manufacturers are certified, not accredited; a company claiming to be 'ISO 13485 accredited' is usually misusing the term.
  • Regulatory designation is separate from accreditation: EU notified bodies are designated by member-state authorities under the MDR/IVDR, and MDSAP auditing organizations are recognized by the participating regulators.
  • FDA's ASCA programme uses accredited testing laboratories for certain recognized standards; it is a voluntary FDA programme in which testing laboratories accredited to ISO/IEC 17025 plus ASCA specifications perform testing for premarket submissions; it does not replace premarket review.
  • Unaccredited certificates may not be accepted by buyers or regulators.

Product safety and performance standards

Safety and performance standards define technical methods and requirements for products; they are voluntary unless a law or regulator makes them mandatory or recognises them.

Explains how technical standards (e.g. IEC 60601 series, ISO 10993 series, ISO 11135/11137) relate to regulation: they are tools to show requirements are met, not laws themselves.

  • In the EU, applying harmonised standards is voluntary but gives a presumption of conformity with the requirements they cover.
  • FDA recognition can be complete or partial; a declaration of conformity to a recognized standard can support, but does not replace, a premarket submission.
  • Standards have editions and transition periods; an outdated edition may no longer be accepted.
  • Not every standard applies to every device: e.g. IEC 60601-1 applies to medical electrical equipment, not to a manual stainless-steel forceps.

Market-specific labelling and documentation

Each market sets its own rules for labels, instructions for use, languages, identifiers and local contact details; international standards help but do not override them.

Explains why the same device may need different labels and documents in different markets, and how labelling standards fit in.

  • ISO 15223-1 symbols and ISO 20417 content requirements are voluntary standards; the law of each market decides what is mandatory.
  • EU MDR Annex I Chapter III sets EU labelling and IFU requirements; FDA labelling rules are in 21 CFR (e.g. Part 801).
  • A symbol accepted in one market may need accompanying text in another.

Medical device classification

Every market classifies devices by risk, but the systems differ: US Class I/II/III, EU Class I/IIa/IIb/III and India’s Class A–D are not equivalent. Classification follows the intended purpose and each jurisdiction’s rules, not the manufacturer’s product description alone.

Risk-based device classification

Devices are grouped into risk classes that drive the authorization route; each country has its own rules and the class systems are not interchangeable.

Explains that regulators sort devices from lower to higher risk, and that the class determines how much evidence and third-party involvement is needed.

  • US uses Class I, II, III; the EU MDR uses Class I, IIa, IIb, III (with sub-categories such as sterile, measuring and reusable surgical instruments in Class I); India's Medical Devices Rules 2017 use Classes A, B, C, D. These do not map one-to-one.
  • Classification depends on intended purpose, duration of contact, invasiveness, body site, energy source and other factors defined in each jurisdiction's rules.
  • A manufacturer's marketing description or a supplier's catalogue label does not decide the class; the applicable rules applied to the intended purpose do.
  • The same instrument can fall into different classes in different markets, and a change in intended use can change the class.
  • IVD classification is separate in many systems (e.g. EU IVDR Classes A-D).

Related FAQs

All certification and regulatory FAQs

This directory is provided for general informational and educational purposes only. Medical device regulatory requirements vary according to product classification, intended use, manufacturer or importer activities, and destination market. Requirements may change over time. This information is not legal or regulatory advice and does not guarantee market authorization. Manufacturers should verify the applicable requirements with the relevant regulatory authority and qualified regulatory professionals.

For manufacturers

Manufacturer or supplier with documented certifications?

Request a company listing. Certifications and regulatory claims appear on a profile only after we have confirmed them against an official source. Every submission is reviewed before anything is published.

How listings work · A listing is not an endorsement.