CDSCO Registration for SaMD in India: Complete Guide to Software as a Medical Device Classification & Approval

• CDSCO regulates Software as a Medical Device (SaMD) under IMDR 2017 — Class A, B, C, and D define your regulatory pathway.
• All 60 officially notified software medical devices require mandatory CDSCO registration before legal sale or import in India.
• The approval process involves Form MD-3, MD-9, or MD-14 depending on device class — Class C and D require clinical data.
• Registration fees, timelines, and technical file requirements differ significantly across classes — know your classification first.

CDSCO registration for SaMD in India is mandatory for all Software as a Medical Device products under the Medical Devices Rules (IMDR) 2017. SaMD is classified into Class A (low risk), B (low-moderate), C (moderate-high), and D (high risk). The registration process requires filing with the Central Drugs Standard Control Organization (CDSCO) via SUGAM portal, submission of technical documentation, and — for Class C and D — clinical evaluation data. Processing timelines range from 30 to 180 days. All 60 notified software medical devices must be registered before import or sale in India.

What is Software as a Medical Device (SaMD)?

Software as a Medical Device, commonly called SaMD, refers to software that is intended to be used for one or more medical purposes — independently of any hardware medical device. In simple terms, if software diagnoses, treats, monitors, or mitigates a disease without being embedded in a physical device, it qualifies as SaMD.

The definition is drawn from the International Medical Device Regulators Forum (IMDRF) guidance, which India has largely adopted through CDSCO. Examples include AI-powered diagnostic tools, mobile health apps that detect arrhythmias, clinical decision support software, and radiology image analysis platforms.

India regulates SaMD under the Medical Devices Rules (IMDR) 2017, as amended in 2020, making CDSCO registration mandatory for all software medical devices sold or imported in India.

Why Does SaMD Need CDSCO Registration?

Unregistered software medical devices risk patient harm, misdiagnosis, or inappropriate treatment decisions. CDSCO registration ensures:

• Safety and performance standards are met before market entry
• Post-market surveillance and recall mechanisms are in place
• Manufacturers take accountability for clinical claims made by their software
• Healthcare providers and patients can trust the product's intended use

SaMD Classification Under IMDR 2017: Class A, B, C & D

CDSCO classifies all medical devices — including software — into four risk-based classes. For SaMD, the classification depends on the healthcare situation (critical, serious, or non-serious) and the significance of the information provided by the software (treat/diagnose, drive clinical management, or inform clinical management).

Class A SaMD Devices — Low Risk

Class A SaMD products carry the lowest risk. No devices from the official CDSCO SaMD notification (MD-163 to MD-167) fall under Class A in the 60-product list. However, general administrative software and non-diagnostic wellness apps may qualify as Class A. These products typically require registration but face the least regulatory burden — no clinical data is required.

Class B SaMD Devices — Low-Moderate Risk

Class B SaMD represents the largest segment in the notified list, covering 30 products. These are software devices that provide diagnostic support or processing for acquired signals and images — but all outputs remain subject to clinician review and are not autonomous. Registration for Class B requires technical documentation and quality management system (QMS) compliance, but no clinical trials.

Class C SaMD Devices — Moderate-High Risk

Class C SaMD covers 29 products in the notified list. These are software devices that directly drive clinical management decisions, provide diagnoses, or make therapeutic recommendations. Class C registration requires a full technical file, clinical evaluation report, and post-market surveillance plan. CDSCO scrutiny at this level is significantly higher.

Class D SaMD Devices — High Risk

Class D SaMD represents the highest risk category — software that directly treats or diagnoses in critical healthcare situations. No products from the MD-163 to MD-167 notification are classified as Class D in the 60-product list. However, software used to control life-sustaining active implanted devices (e.g., advanced pacemaker control software) may be classified as Class D in future notifications.

Who Needs CDSCO SaMD Registration?

Any entity that manufactures, imports, or sells a software medical device in India must obtain CDSCO registration. This includes:

• Indian manufacturers of software medical devices — diagnostic apps, clinical decision support tools, AI-based imaging software
• Foreign manufacturers seeking to import or distribute SaMD in India — registration through an authorized Indian agent is mandatory
• Startups and health-tech companies developing mobile applications with medical diagnostic claims
• Hospitals or institutions that develop proprietary SaMD for clinical use beyond their premises

If your software makes a medical claim — diagnosis, treatment, monitoring, or mitigation — it likely qualifies as SaMD and requires registration.

Documents Required for CDSCO SaMD Registration

The documentation requirement varies by class. Below is a comprehensive list of documents required across all classes:

Common Documents (All Classes)

• Form MD-3 (application for grant of license) or Form MD-9 (import license) or Form MD-14 (loan license)
• Manufacturing license or Certificate of Free Sale (for importers)
• ISO 13485 Quality Management System certificate
• Technical documentation covering software description, intended use, and user interface
• Software Lifecycle Management documentation (IEC 62304 compliance)
• Risk management file (ISO 14971)
• Labelling and Instructions for Use (IFU)
• Declaration of conformity

Additional Documents for Class C and D

• Clinical evaluation report (CER) with clinical data supporting safety and performance claims
• Usability engineering file (IEC 62366)
• Post-market clinical follow-up (PMCF) plan
• Cybersecurity documentation and data protection compliance proof
• Algorithm validation study reports (especially for AI/ML-based SaMD)
• Summary of Safety and Clinical Performance (SSCP)

Step-by-Step CDSCO SaMD Registration Process in India

• Determine your SaMD classification (Class A, B, C, or D) based on intended use and healthcare situation.
• Appoint an authorized Indian agent (mandatory for foreign manufacturers).
• Prepare your technical file, QMS documentation, and clinical evaluation report as applicable.
• Register on the SUGAM portal (sugam.gov.in) and create an account.
• Submit the application online along with prescribed fees.
• CDSCO issues an acknowledgment and assigns a review team.
• Deficiency queries (if any) are raised — respond within the stipulated time to avoid rejection.
• For Class C and D, a technical committee review and expert scrutiny may be required.
• Upon successful review, CDSCO grants Form MD-5 (manufacturing license) or Form MD-16 (import license).
• Post-registration, maintain post-market surveillance and report serious incidents (PMSR).

CDSCO SaMD Registration Fees in India

Fees are prescribed under IMDR 2017, Schedule I, and are subject to periodic revision. The following are indicative standard fees — always verify current amounts on the SUGAM portal before filing.

Note: Small-scale manufacturers and startups under DPIIT recognition may be eligible for fee concessions — check CDSCO notifications for the latest exemptions.

Validity and Renewal of CDSCO SaMD Registration

Benefits of CDSCO Registration for SaMD

• Legal market access — only registered SaMD can be lawfully sold, imported, or distributed in India
• Builds clinician and patient trust — CDSCO registration is a mark of regulatory compliance and quality
• Opens doors to government procurement — hospitals and public health programs prefer or require registered devices
• Enables export opportunities — many countries accept CDSCO registration as proof of GMP compliance
• Protects against enforcement action — unregistered SaMD risks product seizure, penalties, and prosecution
• Supports reimbursement eligibility — insurance and payer schemes increasingly require regulatory clearance

Common Challenges in SaMD Registration and How to Overcome Them

Key Regulations and Guidelines Governing SaMD in India

• Medical Devices Rules (IMDR) 2017 — primary legislation for all medical devices including SaMD
• Medical Devices (Amendment) Rules 2020 — expanded the definition and classification of medical devices
• CDSCO Guidance Document on SaMD — provides interpretive guidance on SaMD classification
• IEC 62304 — Software lifecycle processes (internationally referenced standard)
• ISO 14971 — Risk management for medical devices
• IEC 62366 — Usability engineering for medical devices
• IMDRF N12 — SaMD key definitions
• IMDRF N41 — Software as a Medical Device: Clinical Evaluation
• IMDRF N23 — SaMD quality management system

All 60 Notified Software Medical Devices: Complete CDSCO Classification Table

The following consolidated table lists all 60 software medical devices officially notified by CDSCO under MD-163 to MD-167, organized with their IMDR risk class for quick reference.

Conclusion

CDSCO registration for SaMD isn't just a compliance requirement — it's what makes your product legally viable and clinically trustworthy in one of the world's largest healthcare markets.

The process is structured, but it's manageable if you approach it in the right order. Get your classification right first — everything else, from documentation to fees to timelines, flows from that single decision. Class B and Class C have meaningfully different burdens, and a misclassification caught late is expensive.

A few things that consistently trip people up: underestimating how seriously CDSCO treats ISO 13485 and IEC 62304 compliance, assuming international clearances (CE, FDA) will carry weight here, and appointing an Indian authorized agent without thinking through their actual capabilities.

India's SaMD regulatory framework is maturing fast. The SUGAM portal works, the fast-track pathway for innovative devices is real, and CDSCO is increasingly aligned with IMDRF globally. The companies that do well here are simply the ones who prepare early and classify honestly.

Start with your risk class. The rest will follow.

Frequently Asked Questions