Tercero Autorizado: Third-Party Technical Review of Standard Pathway Dossiers

1. Key takeaways

A third-party review body (Tercero Autorizado) is an organization authorized by COFEPRIS that may perform a technical pre-review of a standard pathway dossier before the formal submission and issue a technical report, which COFEPRIS can then take into account to speed up its review. The mechanism is voluntary on the applicant’s side and advisory on the authority’s side, which shapes both its benefits and its limits. The mechanism has two clear limits: the third party cannot review abbreviated pathway applications, and it cannot make the registration decision in place of COFEPRIS. Its practical value lies in finding dossier gaps before they become official deficiency notices, which is most relevant where the evidence burden is heaviest, such as for Class III devices under the standard route. Used correctly, the mechanism moves the discovery of defects from the official clock to the applicant’s own schedule, which is precisely where they are cheapest to fix. This page explains the legal role of the third party, the boundaries of its mandate, why its value is measured in avoided correction rounds, which statutory duties it never replaces, and what should be verified about the third party itself before its services are engaged. Holding all five points together gives a realistic picture of what the mechanism can and cannot do for a filing timeline.

2. Legal basis

The framework combines the abbreviated pathway guidelines, which define the route that third-party review cannot touch, with the implementing regulation, which defines the full scope of the standard pathway documentation, and with the general health law, which identifies the authority that issues the registration. The table below lists each instrument with its date or articles and the point it establishes.

3. Expert insights

Insight 1: the third party performs a pre-review, not an approval. What the third-party body issues is a technical report recommending approval; the final review and the issuance of the registration remain with COFEPRIS. Understanding the mechanism as a delegation of the decision leads to a misjudged chain of responsibility, because the legal act that places the product on the market is still the Mexican certificate, signed by the Mexican authority, not the third-party report. Contracts and internal expectations should be written in the same terms: the report informs the review, it does not conclude it.

Insight 2: the scope is limited to the standard pathway. The object of third-party pre-review is the complete technical dossier of the standard pathway. The summary dossier of the abbreviated pathway does not fit the mechanism, and it does not need to: the abbreviated pathway already carries its own statutory deadline of 30 business days, which leaves little room for a pre-review step to add value to that route.

Insight 3: the value lies in reducing the number of correction rounds. The purpose of the pre-review is to surface dossier gaps early, lowering the probability of a deficiency notice (Prevención) once the file enters COFEPRIS. During periods of heavier backlog this value becomes more visible, because each avoided correction round saves not only drafting time but also the calendar cost of returning to the end of the queue. The saving is difficult to invoice but easy to observe in the final approval date.

Insight 4: no statutory obligation can be skipped. The pre-review does not replace the holder arrangement, the payment of official fees, labeling compliance, technovigilance or the import authorization. The company must still complete every statutory step itself. The third-party service sits in front of the technical review only, and a team that treats it as a bundled compliance package will discover the missing obligations at exactly the wrong moments. The holder arrangement, the fee payment, the labeling work and the vigilance setup should each carry their own owner and their own deadline in the project plan.

Insight 5: the authorization status of the third party itself must be verified. Before engaging the service, the scope and validity of the body’s authorization should be checked, and the verification record kept on file. Using a service provider that does not hold a current authorization for the relevant scope risks the entire pre-review investment, since the resulting report would not serve its intended purpose. The verification takes little time and belongs at the very start of the engagement, before any document is transferred.

4. Practical recommendations

• Decide in the order of pathway, availability of the third party, and expected benefit; for the abbreviated pathway, skip the third-party step entirely.
• For products with heavy evidence obligations, such as Class III, give priority consideration to third-party pre-review so that the correction risk is absorbed before the official filing.
• Archive the third-party report separately from the company’s own dossier, and run a self-check against the lists in Articles 179 and 180 of the RIS before the formal submission.
• Verify the scope and validity of the third party’s authorization and retain the verification record.
• Do not treat the pre-review time as a substitute for the official review time; keep reserving the official review period in the schedule.

5. Verification checklist

• □ Confirmed that the pathway is the standard pathway (the third-party mechanism does not apply to the abbreviated pathway)
• □ The scope and validity of the third party’s authorization have been verified and recorded
• □ The third-party report and the company dossier are archived separately
• □ The dossier has been self-checked against Articles 179 and 180 of the RIS
• □ The schedule still reserves the official review period

Regulatory information verified as of October 28, 2026.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for the Mexican market. Our team manages COFEPRIS registrations and equivalence (equivalencia) reviews, coordinates third-party authorised centre routes, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com