ISO 13485 and the Fifth Schedule QMS in India

1. Key takeaways

India requires a quality management system conforming to the Fifth Schedule of the Medical Devices Rules, 2017, and an ISO 13485 certificate is the mainstream form of evidence. The rules themselves do not require a GMP certificate — for devices and IVDs, a GMP certificate is not a necessary condition for obtaining regulatory approval.

• The regulatory object is conformity with the Fifth Schedule, not possession of any particular certificate.
• ISO 13485 is accepted as the practical evidence route, and its scope must cover the product and the site.
• The QMS obligation extends to the importer, who must hold a quality certificate meeting the Fourth Schedule requirements.
• Certificate scope, rather than expiry, is the element most frequently challenged in review.
• The Fifth Schedule is India’s own text, closely corresponding to but not identical with ISO 13485.

2. Legal basis

The QMS obligations are spread across the Fifth Schedule and several sub-rules of Rule 20, with additional expectations recorded in CDSCO guidance. The table below sets out each element and its source.

3. Expert insights

Insight one: India wants a QMS, not a GMP certificate. This is the document Chinese manufacturers most often bring to the wrong market. Presenting a Chinese medical device GMP certificate in an Indian application does not constitute compliance evidence; what is required is an ISO 13485 certificate, and its scope must cover the declared product and the manufacturing site. The distinction matters because the two documents are issued under different systems and carry different scopes, and a reviewer will look for the ISO certificate by name.

Insight two: the QMS obligation extends to the import stage. It is not limited to local manufacturing. The CDSCO expressly requires the importer to submit a QMS quality certificate meeting the Fourth Schedule requirements — which means the overseas manufacturer’s ISO 13485 certificate must also be submitted. The importer cannot satisfy the requirement with its own quality documentation alone; the manufacturer’s system is part of the evidence chain. In practice this means the import licence file carries quality evidence from both sides of the transaction, and both must be current at the time of submission.

Insight three: the “scope” of an ISO 13485 certificate is challenged more often than its “validity”. A certificate can be well within its validity period, yet if its scope does not cover the product category or the site included in this application, it is equivalent to having no certificate at all. Scope language is often written broadly by certification bodies and narrowly interpreted by reviewers, so the wording on the certificate should be compared against the application before submission rather than after a query.

Insight four: the Fifth Schedule is India’s own text. It corresponds closely to ISO 13485, but it is India’s own schedule, and conformity verification for Class A and Class B sites is completed through an on-site audit by a notified body — holding a certificate is not the same as passing the audit. The certificate establishes that a system exists; the audit establishes that the system operates. Both are needed, and the second cannot be substituted by the first.

4. Practical recommendations

When GRZAN takes on a project, the first thing it reviews is the scope statement page of the ISO 13485 certificate, not the expiry page. Where the scope does not cover the product, the client is advised to contact the certification body to extend the scope before any discussion of submission dates. We also remind clients that the certificate is only the entry ticket; what actually determines the outcome is the on-site verification of the site by the notified body or the CLA. For that reason we run QMS preparation and product documentation preparation as two parallel workstreams, rather than treating the QMS as a single page in a document checklist. Each workstream has its own owner, its own milestones, and its own readiness review before the application is filed.

• Read the scope statement first and map it against every product and site in the application.
• Extend the certification scope before submission if any product or site falls outside it.
• Prepare the Fifth Schedule QMS conformity undertaking as a separate, signed document.
• Obtain the overseas manufacturer’s QMS quality certificate for the importer’s file.
• Schedule audit readiness activities in parallel with dossier writing, not after it.
• Confirm the certificate is valid across the full expected review period, not only on the filing date.

5. Verification checklist

• □ An ISO 13485 certificate is held, and its scope covers the declared product and site
• □ It has been confirmed that no GMP certificate is required (India requires a QMS)
• □ The Fifth Schedule QMS conformity undertaking has been prepared
• □ A QMS quality certificate for the overseas site has been prepared to the Fourth Schedule requirements
• □ On-site verification preparation for the notified body or CLA has been arranged

Regulatory information verified as of 27 October 2026.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support across South Asia, including India. Our team prepares dossiers to CDSCO expectations, manages SUGAM submissions and deficiency responses, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com