Pakistan ISO 13485 and GMP Quality Evidence

1. Key takeaways

The quality evidence for medical device submissions in Pakistan centres on the ISO 13485 certificate; in practice, a GMP certificate notarized in the country of origin or a Full Quality Assurance (FQA) certificate of equivalent effect is also accepted. At the level of the rules, Class B, C and D devices require QMS certification issued by a notified body, and Class D additionally requires a design examination certificate. The practical picture that emerges is a pyramid of quality evidence: at the base sits the quality management system itself, evidenced by ISO 13485 for every class; above it, for the higher classes, sits the notified-body certification that the rules demand; and at the top, for Class D alone, sits the design examination that tests not how the device is made but how it was conceived and verified. Each layer takes its own time to obtain, expires on its own calendar, and must remain aligned with the other documents of the dossier, which is why quality evidence deserves the same planning rigour as the registration itself.

It is worth stating plainly why quality evidence receives this treatment in Pakistan at all. The regulator does not inspect every manufacturing site that seeks market access; instead, it leans on the certificate chain, the ISO 13485 certificate, the GMP or FQA alternative where accepted, and the notified-body certification for the higher classes, as the standing proof that production is controlled. The certificate is therefore not paperwork accompanying the product; functionally, it is the substitute for an on-site inspection, and its currency, scope and issuer all carry regulatory weight. That substitution is also why the rules insist that existing foreign evidence be submitted rather than re-created: the authority would rather read a live certificate from a recognised body than receive a fresh but shallow file assembled only for this market.

• ISO 13485 is the core quality evidence across all classes.
• A notarized GMP certificate or an equivalent Full Quality Assurance (FQA) certificate is accepted in practice as an alternative.
• Class B/C/D require notified-body QMS certification under the rules.
• Class D must additionally attach a design examination certificate.
• Quality system and product evidence already held from foreign NRAs or notified bodies must be submitted.
• Notarization in the country of origin applies to the certificates as a practical estimate.

2. Legal basis

The provisions below, all from the Medical Devices Rules 2017 notified on 16 January 2018, define the ladder of quality evidence: the notified-body requirement for the higher classes, the extra design step for Class D, the obligation to submit existing foreign evidence, and the underlying verification principle for manufacturing and testing.

3. Expert insights

Insight one: ISO 13485 is the basic threshold, not a bonus item. The practical compilation shows that a quality management system certificate is expected from Class A through Class D: Class A also requires a notarized ISO 13485 certificate, while Class B, C and D must obtain theirs from a notified body. The difference between the classes is not whether quality evidence is needed but who stands behind it. For the lowest class the manufacturer’s own certified system suffices once notarized; for the higher classes an independent notified body must certify the system. Teams sometimes discover this asymmetry late and try to substitute a self-declared system for the notified-body requirement, which the rules do not permit.

Insight two: the extra tier for Class D is design. Class B and Class C need only the QMS certification; Class D must, on top of that, provide a design examination certificate. This is the true difficulty of Class D dossier preparation, because behind the design examination certificate stands an entire chain of design verification and validation documentation. A manufacturer who has never taken a device through a design examination will find that the certificate cannot simply be ordered; it must be earned by assembling design records, risk documentation and clinical or performance evidence into a coherent whole that a notified body can examine.

Insight three: the validity of the quality certificate and the validity of the registration certificate run on two independent timelines. The registration certificate is valid for 5 years, while an ISO 13485 certificate is typically valid for 3 years and requires annual surveillance audits. If the quality certificate has expired at the time of renewal, the renewal is blocked. The two clocks were never synchronised by any rule, and nothing forces them to align, so the alignment must be manufactured deliberately by the holder: an expiry map that places every quality certificate against the 5-year registration horizon, with surveillance audit dates marked, is the only reliable way to keep the pyramid standing.

4. Practical recommendations

• Bring quality evidence under dual-calendar management: one calendar tracks the 5-year validity of the Pakistan registration certificate, and a second tracks the validity of the ISO 13485 certificate and the CE certificate.
• Start renewal preparation 6 months before the registration certificate expires, and at the same time verify that every foreign certificate held is within its validity period.
• This discipline prevents the high-frequency incident of discovering an expired quality certificate only at renewal.
• Confirm the notified-body status of the QMS certificate for Class B/C/D before dossier assembly begins, so the certificate class matches the device class.
• Keep the certificate details consistent with the application form and the FSC, since mismatches between quality evidence and other dossier documents generate avoidable queries.

5. Verification checklist

• □ ISO 13485 certificate prepared and within its validity period
• □ Class D: design examination certificate prepared
• □ Certificates notarized in the country of origin
• □ Quality certificate validity under dual-calendar management
• □ Certificate information consistent with the application form and the FSC

Regulatory information verified as of 28 October 2026.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support across South Asia, including Pakistan. Our team prepares dossiers to DRAP expectations, manages eCTD-format submissions and deficiency responses, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com