e-Submission Account Registration with the Myanmar FDA

1. Key takeaways

The official electronic submission channel of the Myanmar FDA is the e-Submission system (https://esubmission.fda.gov.mm/), which uses a single unified login for food, drugs, cosmetics and medical devices. The applicant — usually the local authorised representative — must complete account registration before submitting any application. Identity document requirements differ by applicant type: Myanmar citizens submit the National Registration Card (NRC), while foreign nationals or representatives of foreign companies submit a valid passport together with the DICA company registration documents of the Myanmar entity.

GRZAN note: from 8 June 2026, portal login mandatorily requires two-factor authentication (2FA). Account opening, identity verification and 2FA configuration occupy several days and must be scheduled ahead of the first submission, not alongside it. The account workstream can be remembered as 1 unified portal, 2 types of identity documents, 1 mandatory 2FA switch-on date.

• Account registration is a pre-submission task for the local authorised representative;
• Identity documents: NRC for Myanmar citizens, valid passport for foreign nationals or representatives of foreign companies;
• Company documents: DICA company registration file of the Myanmar entity;
• From 8 June 2026 the portal enforces two-factor authentication (2FA) at login.

The scheduling consequence is simple but often missed: because account opening, identity verification and 2FA configuration together consume several days, and because the FDA must then activate or confirm the account, the whole sequence has to sit in front of the first submission date on the project plan. Starting it on submission day guarantees a delay.

2. Legal basis

The portal, the applicant profile and the registration workflow are set out below. The registration steps run from account creation through identity upload to FDA activation or verification confirmation, and the same contact details entered during registration later carry the 2FA mechanism, so their accuracy matters on day one, not only at submission time.

3. Expert insights

Insight 1: the unified login means one set of credentials manages several product categories. The same account can operate the food, drug, cosmetic and medical device modules. Companies must therefore separate module operators in their permission management, so that no single person can submit across categories beyond their mandate, and so that an error in one module cannot be traced to an uncontrolled shared login.

Insight 2: identity verification binds the person and the company together. Citizens verify with the NRC, foreign nationals with a passport, and the corporate entity separately with DICA registration. This design makes the AR’s entity status verifiable, and it also means that any change of AR requires the identity verification to be completed again, because the new representative is a new verified person.

Insight 3: contact details are critical infrastructure, not just a notification channel. The email address and phone number entered at registration are used for verification and carry the 2FA mechanism. Companies must ensure that the registered contact details remain valid long term and that a backup method is registered, since a dead phone number can make an otherwise healthy account unusable.

Insight 4: mandatory 2FA raises the bar for account maintenance. Every AR staff member who submits or tracks applications must hold an individual account and enable 2FA. This means companies should configure at least two authorised persons on the AR side, so that staff turnover or a lost device does not become a single point of failure that freezes submissions.

Insight 5: account preparation can run in parallel with document preparation, but the account belongs to the AR. Without a confirmed AR there is no account to open, so the appointment of the AR is the prerequisite for the entire account workstream. Choosing the AR early therefore protects the submission calendar, and the FDA’s published Viber support channel gives teams a way to resolve portal access problems once the account exists.

4. Practical recommendations

• Start account registration immediately after the AR is appointed. Do not wait until the dossier is complete to open the account.
• Configure at least two authorised persons on the AR account, each with 2FA enabled. This prevents staff changes from interrupting submissions.
• Register backup contact details. A change of the primary phone number must never lock the team out of the portal.
• Write the 2FA recovery procedure into the quality or regulatory SOP. Treat it as a standard AR management action.
• Record the account-to-person mapping in the internal register. This supports audits and handovers.

Treat account readiness as an explicit gate in the submission plan: the account exists, identity documents are verified, 2FA is active and a second authorised person can log in — only then is the e-Submission workstream ready to carry the dossier. Building this gate into the project plan costs nothing at design time, yet it prevents the most common late-stage failure, in which a finished dossier sits idle for days because nobody can actually log in and upload it.

5. Verification checklist

• □ Official portal confirmed as https://esubmission.fda.gov.mm/
• □ Account registration completed by the local authorised representative
• □ Appropriate identity documents submitted (NRC or passport)
• □ DICA company registration documents submitted
• □ Email address and phone number verified
• □ 2FA enabled for all operating staff
• □ Backup contact details registered
• □ 2FA recovery procedure written into the SOP

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support across Southeast Asia, including Myanmar. Our team prepares the technical dossier to ASEAN CSDT structure, manages submission and deficiency responses with the Myanmar FDA, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com