FEUM Medical Devices Supplement and Its 23 Classification Rules

1. Key takeaways

Classification in Mexico requires reading two documents together: RIS Articles 83 and 83 Bis provide the three-class principles, and the FEUM Medical Devices Supplement provides 23 detailed rules. The two apply cumulatively — the regulatory principles set the direction first, and the pharmacopeial rules then land the decision on a specific item. Where the two levels could point in different directions, the specific provision of the pharmacopeial rules prevails. This dual-source design is deliberate: the regulation states criteria at a level of generality that keeps it stable across amendments, while the supplement can be updated to address new product technologies without reopening the regulation. For the applicant, the practical consequence is that a classification report must show both layers, in order, with the specific rule number cited for the final conclusion. A report that cites only the articles, or only the rules, is incomplete by construction and invites questions at review.

2. Legal basis

The instruments and versions that govern the combined analysis are summarized below.

Version control is part of the legal basis here. The supplement is a living document whose rules are numbered, so the version in force at the time of filing determines which rule numbers mean what. Citing a rule number without stating the version invites confusion with earlier editions, where the same number may have carried different content.

The agreement layer sits on top of this pair as an overlay rather than a substitute. It does not change what the rules say about any given device; it changes what must be filed for the devices it lists. That is why the recommended report structure keeps the rule citation and the annex citation in separate sections: a reviewer can then confirm the class against the rules and the registration obligation against the annex, without either conclusion contaminating the other. In portfolios with many similar products, this separation also makes it possible to reuse the classification analysis across variants while re-checking only the annex placement for each new item.

3. Expert insights

Insight 1: The number of rules is fixed. The supplement contains 23 classification rules. Rule 16 is used to determine the class of software devices, and rule 23 is used to identify low-risk devices. Citing the rule number explicitly lets reviewers verify the conclusion directly against the rule text, which shortens review and reduces the chance of a correction request. It also disciplines the applicant: because the rule set is closed, every classification must be expressible as one or more of the 23 rules, and a classification that cannot name its rule is a signal that the analysis is not finished. Teams can use this as an internal quality gate before the dossier leaves the building.

Insight 2: Version 5.0 (2023) is the watershed. This edition formally wrote standalone software into the device definition and set out the classification path for software. Before it, software could only be filed attached to hardware; after it, software can be filed independently. The first standalone software device approved through the equivalence route occurred in May 2024 (practical estimate). The change is consequential for portfolio planning: products that were previously invisible to the Mexican system because they lived inside an app now need their own regulatory treatment, their own holder arrangement and their own fee category. Companies should inventory their software assets against this rule early.

Insight 3: Low-risk identification has its own rule. The conditions in rule 23 include safety and effectiveness supported by sufficient technical and scientific information, no requirement to be provided sterile, no diagnostic function, no life support, and use that does not create a risk of bodily injury or health impairment to the patient, the user or healthcare personnel. If any single condition fails, the rule does not apply. This is an all-or-nothing test, not a balancing exercise, so the analysis must be item by item with a yes-or-no conclusion for each condition, documented in the file.

Insight 4: The 2025 agreement rewrote the lists but did not repeal the rules. The agreement replaced the two older agreements of 2011 and 2014, but the supplement rules remain in force; only the specific product listings follow the agreement annexes. Both sets of documents must be consulted together. Reading the agreement without the rules, or the rules without the agreement, produces opposite errors: one overstates exemption, the other understates it.

4. Practical recommendations

1. Structure the classification report in three parts — regulatory principle, pharmacopeial rule number, and agreement annex item number — each part independently verifiable against its source.
2. Route software products through rule 16, and describe the operating platform and data interfaces in the dossier so the software classification can be confirmed without follow-up questions.
3. Support any low-risk claim by walking through the rule 23 condition list item by item; if one condition fails, switch to the regular classification path immediately.
4. Cite the supplement with its version (version 5.0, 2023) whenever a rule number is referenced, to avoid confusion with rule numbers in earlier editions.

5. Verification checklist

Before filing, run the following checks against the final classification report and confirm each item is documented in the dossier itself.

• □ Classification report contains both the regulatory principle and the pharmacopeial rule number
• □ FEUM supplement version stated as version 5.0 (2023)
• □ Rule 16 applied to software products
• □ Low-risk claims checked item by item against the rule 23 conditions
• □ Placement under the annexes of the 2025 agreement verified

Regulatory information verified as of October 28, 2026.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for the Mexican market. Our team manages COFEPRIS registrations and equivalence (equivalencia) reviews, coordinates third-party authorised centre routes, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com