Design Verification, Sterilization Validation and Supporting Evidence in Kenya

Content verified as of 30 October 2026.

1. Key takeaways

• Within the 12 items common to Class B/C/D, the technical evidence concentrates in three: detailed design verification and validation, the complete preclinical study report (including sterilization validation), and the risk analysis.
• The CSDT sets up separate modules for these: design verification and validation, biological safety, sterilization validation, software, packaging, and shelf life and stability. Separate modules mean separate evidence; none can substitute for another.
• The 9 items for a Class A listing carry corresponding requirements: item ⑤ is the certificate of analysis (CoA) for materials of animal, human, microbial or recombinant origin and for production processes; item ⑥ requires that personal protective equipment (masks, surgical masks, gloves) obtain a CoA issued by a PPB-recognised laboratory; item ⑦ is information on the sterilization method and validation standards.
• Sterilization validation must state both the method and the validation standards; stating only the method attracts a request for the missing element.
• Devices containing radiation sources follow a separate track: in addition to PPB registration, authorisation from the Kenya Nuclear Regulatory Authority (KNRA) is required under the Nuclear Regulatory Act, No. 29 of 2019.

2. Legal basis

3. Expert insights

Insight 1: The distinction between verification and validation is the most frequent deficiency point in Kenya. Design verification and validation is written as one dossier item, yet companies often submit only half of it. Verification answers whether the design outputs meet the design inputs; validation answers whether the product meets user needs and intended use. The evidence sources differ: bench testing, dimensional inspection and software unit testing on one side; preclinical animal studies, simulated-use studies or clinical data on the other. When reviewers cannot find validation evidence in the CSDT they usually do not reject outright but issue a deficiency request, stretching the project timeline. GRZAN recommends opening the module with a V-model table aligning design inputs, verification methods and validation methods in three columns, so the reviewer sees the closed loop at a glance.

Insight 2: The depth of biocompatibility evidence depends on the nature and duration of contact. The classification criteria expressly consider duration of contact, degree of invasiveness, and local and systemic effects, and the biological safety module should mirror them. Surface-contacting devices and long-term implants differ in evidentiary depth, and devices containing materials of animal, human, microbial or recombinant origin also require CoAs for the materials and production processes. The common pitfall is attaching the full ISO 10993 series test reports without stating which contact type and duration each test corresponds to, leaving the reviewer unable to judge whether the test plan covers actual use scenarios. A workable fix is a one-page index of contact category, test item and conclusion ahead of the reports.

Insight 3: Sterilization validation is not stand-alone; it links to packaging and shelf life. The CSDT splits sterilization validation, packaging, and shelf life and stability into three modules, but the logic is one evidence chain: the sterilization method determines the choice of sterile barrier system, the sterile barrier system determines the shelf life validation plan, and the shelf life conclusion feeds back into the expiry date on the label. Submitting a sterilization report without packaging validation and shelf life data is a classic combination returned in review. For Class A, item ⑦ names two elements side by side, the sterilization method and the validation standards; in practice GRZAN still recommends attaching packaging and shelf life data as well (practical estimate) to shorten the inquiry rounds.

Insight 4: The PPB-recognised laboratory CoA for PPE is a hard gate, not an option. Class A item ⑥ requires that personal protective equipment — masks, surgical masks and gloves — obtain a CoA issued by a PPB-recognised laboratory. This turns laboratory qualification itself into a submission condition: if the testing laboratory is outside the PPB recognition scope, the report is not accepted. Such products flooded into Kenya after the pandemic and are also the category with the highest rejection concentration. GRZAN recommends confirming the laboratory’s recognition status with PPB in writing, and keeping the confirmation on file, before placing the testing order.

4. Practical recommendations

1. Organise design evidence with a V-model table. GRZAN recommends aligning design inputs, verification methods and validation methods in three columns on the module’s first page, with the complete reports attached behind.
2. Add one index page to the biocompatibility reports. State which contact type and duration each test corresponds to, rather than bundling reports wholesale.
3. Submit sterilization, packaging and shelf life modules together. Organise them along one evidence chain and mark the cross-references between them.
4. State both the sterilization method and the validation standards. Cite the standard number and version; do not write that industry practice was followed.
5. Confirm laboratory qualification first for PPE. Before testing, obtain written confirmation from PPB of the laboratory’s recognition status and keep the record.
6. Schedule KNRA authorisation in parallel for radiation-source devices. Proceed under the Nuclear Regulatory Act, No. 29 of 2019, rather than waiting serially behind PPB registration.

5. Verification checklist

• □ Have both design verification and design validation evidence been submitted, rather than only one?
• □ Is there a three-column table of design inputs, verification methods and validation methods?
• □ Is there a contact category, test item and conclusion index ahead of the biocompatibility reports?
• □ Have CoAs for materials of animal, human, microbial or recombinant origin been submitted where applicable?
• □ Is the CoA for PPE products issued by a PPB-recognised laboratory?
• □ Do the sterilization documents state both the method and the validation standards?
• □ Do the sterilization validation, packaging validation, and shelf life and stability modules form one evidence chain?
• □ Has the KNRA authorisation process been started in parallel for radiation-source devices?

Regulatory information verified as of 30 October 2026.

In African markets, the GRZAN regulatory team focuses on jurisdictions such as Kenya, Nigeria, South Africa and Egypt and maintains a verification mechanism built on primary regulatory sources. Every regulatory conclusion it issues rests solely on official gazettes, the original text of competent authority guidelines and public legal databases, with the verification date stated; any figure, timeline or amount that cannot be located in an official source is marked as a practical estimate and is never presented as presumption.

GRZAN services cover market access strategy and risk classification; preparation and review of registration dossiers in CSDT, STED and CTD formats; selection and management of local authorized representatives (LARs); quality management system and GMP/GSDP compliance support; post-market vigilance, change management and recall response; import clearance and PVoC coordination; regulatory intelligence subscriptions and corporate compliance ledgers.

For a Kenya market access plan for a specific product, contact the GRZAN regulatory team at info@grzanglobal.com.