Licences and compliance

Medical Device Registration with CDSCO: A Starter Guide

Medical device registration in India — MDR 2017 risk classes, MD-5/MD-9/MD-15 licences, import registration, QMS expectations and route mapping.

Licences and compliance · 4 min read · Updated 2026-02-06

Since the Medical Device Rules, 2017 (and the staged notifications that followed), essentially all medical devices in India — thermometers to stents, glucometers to software — are regulated as drugs with their own licensing grid. Whether you manufacture, import or merely trade devices, there is a form with your name on it. The system looks intimidating; it is actually a risk-class lookup followed by a defined pathway. Here is the starter map.

Step 1: Classify — everything follows from risk class

  • Class A (low risk): thermometers, tongue depressors, absorbent cotton
  • Class B (low-moderate): hypodermic needles, BP monitors, many diagnostics
  • Class C (moderate-high): ventilators, bone fixation, dialysis equipment
  • Class D (high): stents, heart valves, implants sustaining life
  • CDSCO's published classification lists map most device types; software-as-device and IVDs (in-vitro diagnostics) classify under their own parallel grids

Class decides your licensing authority (state for A/B manufacturing, central for C/D), your form numbers, and your evidence burden.

Step 2: Pick your pathway

Manufacturing in India: Class A/B → application MD-3 for licence MD-5 from the State Licensing Authority (Class A non-sterile/non-measuring now largely self-registers); Class C/D → MD-7 for licence MD-9 from CDSCO central. Loan-licence analogues (MD-6/MD-10) cover brand owners using others' facilities. Importing: registration via authorised Indian agent — MD-14 application for MD-15 import licence, riding on the foreign manufacturer's credentials (free-sale certificates, QMS, technical dossiers). Trading/distribution: wholesale/retail of devices runs on the drugs-style sale licences per state practice, and marketplaces ask for exactly these.

The QMS backbone

  • Licences presume a quality management system per the Fifth Schedule (aligned to ISO 13485 thinking) — design controls, purchase controls, production records, complaint handling, recalls
  • Manufacturing sites face audits (notified bodies audit Class A/B; CDSCO inspects C/D)
  • Technical staff requirements apply per class and activity
  • Post-market: adverse-event reporting through the materiovigilance programme, field-safety corrective action procedures, and licence retention through periodic fees
The timeline planner

Class A self-registration: days. Class B MD-5: roughly 3–6 months including notified-body audit. Class C/D MD-9: 6–12 months with dossier depth. Imports (MD-15): 4–9 months riding on manufacturer documentation quality. Fundraising and launch decks should carry these numbers, not hopes.

Labels, UDI and the selling stack

Device labels carry MDR-prescribed particulars (licence numbers, manufacturer/importer, lot/serial, expiry where applicable, storage conditions) with UDI (unique device identification) obligations phasing across classes. Selling adds the familiar Indian stack: GST, Legal Metrology for measuring devices' packaging, BIS where a device type also carries a standards mandate, and e-marketplace dossier checks. Hospital and government tenders will ask for the licence, QMS certificates and often WHO-GMP/CE credentials — assemble the binder once, win repeatedly.

Common founder scenarios, mapped

'We import pulse oximeters from China': appoint yourself authorised agent, obtain MD-15 with the manufacturer's dossier — and verify their plant certificates early; weak foreign paperwork is the usual delay. 'We assemble diagnostic kits': assembly is manufacturing — classify the IVD, expect MD-5/MD-9 with QMS. 'Our app analyses ECGs': software with a medical purpose classifies as a device — plan classification advice before the app store listing. 'We only distribute to hospitals': wholesale licence per your state's device-sale regime, plus your principals' licences on file.

How Aidwish helps

Aidwish navigates device regulation for manufacturers and importers — classification opinions, licence applications (MD-3/5/7/9/14/15), QMS documentation builds, notified-body coordination and the tender-ready binder — turning MDR 2017 from a barrier into a moat.

FAQ

Questions, answered

Are all medical devices really regulated now?

Effectively yes — the phased notifications brought all devices under MDR licensing. Class A non-sterile, non-measuring devices enjoy the lightest (self-registration) touch; everything else has a licence pathway.

Who can be an authorised Indian agent for imports?

An Indian entity holding the requisite wholesale infrastructure and taking regulatory responsibility for the foreign manufacturer — filing MD-14, holding MD-15, and owning post-market duties. Many importers serve as their own agent.

Is ISO 13485 mandatory?

The rules require a QMS per the Fifth Schedule, which mirrors ISO 13485; formal certification is the practical way to evidence it and is what auditors and tenders expect.

Does software need a device licence?

Software intended for diagnosis/treatment purposes classifies as a medical device under MDR and follows the class-based pathway. Pure wellness apps without medical claims stay outside — the claim boundary again.

Ready to move forward?

Book a free consultation and get a clear, step-by-step plan for your business.