Every regulatory point in this article has been verified against Mexico’s Official Federal Gazette (DOF), the Ministry of Health and official COFEPRIS publications, including the General Provisions on the Abbreviated Regulatory Pathway of 18 July 2025, the Procedure Simplification Agreement of 22 August 2025, and the new labeling standard NOM-137-SSA1-2025 published in May 2026. Throughout, the article keeps two levels strictly apart: what the regulation text says, and how COFEPRIS actually executes it – and in Mexico today the gap between the two is wide. Save this one for reference.
Q1. Who is the competent authority for medical devices in Mexico, and under what regulations?
Medical devices in Mexico are regulated uniformly by the Federal Commission for the Protection against Sanitary Risk (COFEPRIS), which is part of the Ministry of Health (Secretaria de Salud). The regulatory framework has three tiers: the General Health Law (Ley General de Salud), the Health Products Regulation (Reglamento de Insumos para la Salud, RIS), and the various official standards (NOM). Product classification, registration procedures and post-market surveillance are governed by the RIS and by the specific agreements (Acuerdos) published in the DOF gazette. COFEPRIS’s official filing platform is DIGIPRIS.
Q2. How many classes of medical devices does Mexico have, and how do I determine my product’s class?
Mexico classifies devices by risk into three classes: Class I (low risk), Class II (medium risk) and Class III (high risk); the classification rules are set out in Article 83 of the RIS. Note that Mexico uses a three-class system and, unlike the EU, does not subdivide into IIa/IIb. Class III roughly covers implantable devices, life-supporting devices, devices acting on the central nervous system or the heart, devices emitting ionizing radiation, and novel or newly commercialized devices. Where a product of the same type contains drug components, the risk class usually moves up. In practice, check the intended use description item by item against Article 83 of the RIS and the list of low-risk devices published by COFEPRIS (see Q3); the classification conclusion directly determines the review timeline and the fee band.
Q3. Can low-risk products really skip registration?
Some products on the list can, but the rules were just tightened in 2025. In July 2025 COFEPRIS issued a new version of the Agreement on the List of Low-Risk and Non-Regulated Medical Devices, redrawing the boundaries with three annexes: Annex I lists devices that are low-risk but must be registered (some products previously exempted were brought under mandatory registration, transitioning in batches by number, at the latest by 2029); Annex II lists low-risk products exempt from registration that must still meet GMP, vigilance, designated domestic representative and other obligations; Annex III lists products that are not medical devices at all and fall entirely outside COFEPRIS’s scope. Companies that previously obtained a COFEPRIS exemption letter should pay particular attention: exemption letters remain valid for 5 years from the date the new agreement took effect, and lapse after that.
Q4. Must foreign manufacturers use a Mexican company as the registration holder? Can the certificate be issued in my own company’s name?
This is the question most often answered incorrectly. After Mexico amended the RIS in 2018, the registration certificate can be issued to the foreign manufacturer itself, on condition that a legal representative (Legal Representative) located in Mexico is designated to bear the filing and compliance responsibilities; alternatively, a local Mexican entity (such as an importer or agency company) can be chosen as the registration holder (the so-called MRH). Each model has pros and cons: manufacturer-held certificates give the manufacturer strong control over the certificate as an asset, but depend on the legal representative performing; local-company-held certificates are operationally flexible, but carry the commercial risk that the certificate is ‘not in your own hands’. This is a structural choice that must be thought through before submission; there is no default lock-in.
Q5. Can multiple holders be appointed at the same time? Is changing holders troublesome?
Mexico does not require exclusive binding – the same product from the same manufacturer can be held by several Mexican entities at once. This is looser than Indonesia, Russia and similar markets. Changing holders goes through the registration variation (modificacion) procedure; in 2026 COFEPRIS has issued dedicated variation guidance. Changes involving the manufacturer, the manufacturing site, distributors or the product name must all be filed, and ‘a minor change in the EU’ does not equal an administratively simplified change in Mexico – assess each item individually.
Q6. What core documents does the standard registration pathway require?
The simplification agreement of 22 August 2025 merged the previous three procedures (domestic, import and OEM) into two codes: ‘Sanitary Registration of Medical Devices’ (COFEPRIS-04-060) and ‘Registration of Low-Risk Medical Devices’ (COFEPRIS-04-070). Typical document list for imported devices: official application form (FF-COFEPRIS series) and proof of fee payment; certificate of free sale (CFS) or equivalent issued by the competent authority of the country of origin; GMP certificate or equivalent (usually ISO 13485 certification); manufacturer’s letter of authorization (notarized and legalized if signed abroad); draft Spanish-language label complying with Mexican official standards; Spanish instructions for use; and the technical dossier (device description, manufacturing overview, risk analysis, clinical evaluation, summary of performance and test data, and more). Note: the agreement expressly states that COFEPRIS may not additionally request duplicate materials beyond the documents and lists in the agreement itself.
Q7. Do all documents have to be in Spanish?
Labels and instructions for use (IFU) must be in Spanish – a hard requirement; in addition, some technical documents must still be accompanied by certified Spanish translations. Original Chinese documents (such as Chinese registration approvals and test reports) must be translated and notarized or legalized accordingly – one of the most common rework points for Chinese manufacturers – so plan the translation and legalization chain at the project initiation stage.
Q8. What mandatory standards apply to labeling?
The current standard is NOM-137-SSA1-2025 (published in the DOF on 19 May 2026, replacing the 2008 version). Mandatory label information includes: the generic and brand name, the COFEPRIS registration number, manufacturing and expiry dates, lot or serial number, model or catalog number, contents, the full name and address of the manufacturer and of the importer or distributor, warnings and precautions, the sterile marking (if applicable), the ‘USO PROFESIONAL / USO DOMESTICO’ (professional use / domestic use) distinction, and more. Where the original label lacks items, they may be completed after customs clearance and before commercialization by adding a supplementary label (contraetiqueta), which is the responsibility of the holder or distributor. For the quality system, NOM-241-SSA1 applies (updated with a new version in 2025).
Q9. The market says ‘Mexico grants the certificate in 30 business days’ – is it true?
No. This swaps ‘statutory review timeline’ for ‘actual time to certificate’, and it is the most important myth-busting point in this article. The ’30 business days’ claim comes from two statutory figures: first, the 30 business day statutory settlement cap that the 2025 abbreviated regulatory pathway (ARR pathway) sets for devices (see Q11); second, the shortened statutory timelines of the standard pathway after the simplification agreement (Class II 25 business days, Class III 35 business days, see Q10). But a statutory timeline is the settlement cap for the ideal state of ‘perfect dossier, platform ready, no deficiency notice, and the authority actually delivering’; it is not the actual timeline. Based on the projects we have handled, the Mexican standard pathway currently takes about 12 months from submission to certificate, and 18 months or more for high-risk (Class III, implantable) devices is common. If marketing material promises ‘certificate in 30 business days’, filter that supplier out before signing.
Q10. So what exactly are the statutory timelines and the actual timelines of the standard pathway?
Statutory timelines (simplification agreement of 22 August 2025, effective for devices 180 business days after publication, i.e. from May 2026): Class I 20 business days, Class II 25 business days, Class III 35 business days; low-risk registration 15 business days; renewal (prorroga) 45 calendar days. Actual timelines: because of review backlogs, prevencion (deficiency notice) round trips and queuing for technical review, Class I actually takes about 8 months, Class II about 12-18 months, and Class III 18 months or more, sometimes even 24-30 months. The industry rule of thumb: one deficiency notice roughly doubles the timeline. When planning the market, always schedule by the actual timeline – do not back-plan sales targets from the statutory timeline.
Q11. The regulations do provide a ‘fast track’, but is it actually fast in practice?
Conclusion first: it exists on paper, but has not delivered in practice. This is the second reality this article must make clear.
There is indeed a legal basis: on 18 July 2025 the Ministry of Health published in the DOF the General Provisions on the Abbreviated Regulatory Pathway (Via Regulatoria Abreviada), effective 1 September 2025, procedure code COFEPRIS-04-050, which under the principle of ‘regulatory reliance’ recognizes review conclusions already completed by reference regulatory authorities (ARR); the text states a statutory settlement within 30 business days. In addition, from 6 October 2025 the old ‘US/Canada/Japan tri-national equivalence agreements’ (the separate pathways for FDA, Health Canada and Japan’s MHLW) were all repealed and merged into this pathway. The eligibility conditions are strict: the product filed must be fully identical to the ARR-approved product (design, materials, manufacturing process, intended use, packaging), and the ARR approval must have been issued under the regular procedure and be valid within 5 years – accelerated approvals, conditional approvals and emergency use authorizations (EUA) are not accepted at all.
Practice, however, is another matter. From the projects we track and official feedback, this pathway has so far produced no stable record of ‘settlement in 30 business days’: the pace at which prevencion (deficiency notices) are issued, the queuing for technical review and the progress of final certificate issuance show no substantive difference from the regular pathway; some projects have even seen extra round trips because the internal process of the new pathway has not yet bedded down – inconsistent form interpretations and reviewers unfamiliar with the ARR document system. In other words, the 2025 reform opened this door institutionally, but COFEPRIS’s execution capacity has not kept pace, and the institutional dividend currently remains on paper.
The correct reading is therefore: the pathway’s real value today is ‘document relief’, not ‘time acceleration’. It removes the need to redo in full the technical review work already completed by an ARR authority; the dossier is thinner, there are fewer technical points of contention, and the probability of triggering a deficiency notice is somewhat lower – all real benefits, but none of them is ‘a certificate in a few months’. Using it as an accelerator in market planning will seriously misjudge the launch date.
Q12. Can a Chinese NMPA registration certificate use this pathway?
Eligible on paper; do not count on speed. The two things must be judged separately. The ARR definition covers the jurisdictions that are members of the IMDRF Management Committee, twelve in total: Australia, Brazil, Canada, China, the European Union, Japan, Russia, Singapore, South Korea, Switzerland, the United Kingdom and the United States; for GMP certificates, certificates issued by MDSAP full members are also recognized. So an NMPA registration certificate can, institutionally, serve as the basis for a COFEPRIS-04-050 filing – this is indeed the most substantive change of the 2025 reform for Chinese manufacturers (previously only FDA, Canada and Japan were recognized), and the significance of that threshold should not be underestimated.
But eligibility does not equal speed. As stated in Q11, actual review feedback and certificate issuance have not visibly improved by using this pathway. Accordingly, our practical recommendations are three:
(1) If you are eligible, use it – but be clear about the purpose: the benefit lies in a lighter document burden, fewer technical points of contention and a lower probability of deficiency notices, not in ‘fast certification’; set the time expectation at around 12 months;
(2) Prepare the certified Spanish translations of the Chinese approvals and decision documents in advance – this is the most frequent bottleneck of this pathway; the product name, model and specifications, and registrant information on the NMPA approval must map one to one to the filing documents;
(3) If you are already queued in the standard pathway, do not switch tracks blindly to ‘grab time’ – after switching, the original procedure terminates automatically; if the new pathway is not actually faster, you give away the queue time you have already accumulated. The switching decision should be computed case by case on time already queued, prevencion progress and document completeness.
Q13. Are products without NMPA/CE/FDA reference approvals at a bigger disadvantage?
Institutionally yes; in practice the gap is not as large as imagined – this is precisely the key to understanding Mexican review today.
Without an ARR approval, you can only take the standard pathway (COFEPRIS-04-060 for ordinary devices / COFEPRIS-04-070 for low-risk devices), submit the full technical and administrative documentation, and accept COFEPRIS’s independent review. But because the abbreviated pathway itself has not truly sped up, the gap in actual time to certificate between the two groups is being compressed: on the standard pathway Class II generally takes more than 12 months and Class III more than 18 months (two or three years is not unusual for some), yet projects on the abbreviated pathway currently show no order-of-magnitude advantage either.
This reality means two things. First, do not agonize over whether you ‘qualify for the fast track’ – it determines how the documents are prepared, but not when the certificate comes out; what really deserves attention is document quality and the speed of your response to deficiency notices. Second, document quality remains the biggest time variable: an intended use statement inconsistent with the classification conclusion, missing items on the Spanish label, a broken translation and legalization chain, or a CFS scope that does not match the models and specifications actually filed – any one of these triggers a deficiency notice, and one round trip usually costs months. A good part of Mexico’s review ‘slowness’ is slowness created by companies’ own rework – that part is controllable, and it is exactly where professional service providers can genuinely create value.
Q14. I heard there is ‘third-party review’ that can speed things up?
Mexico has an Authorized Third Parties (Terceros Autorizados) mechanism: private organizations recognized by COFEPRIS may carry out technical pre-review of certain products and issue opinions, which COFEPRIS then confirms. In theory third-party pre-review can compress the statutory settlement period, but note – for the same reason as with the abbreviated pathway, final certificate issuance remains stuck at COFEPRIS’s own confirmation and issuance stage; however fast the third party reviews, it cannot beat the queue at the issuance window. So do not treat third-party pre-review as a guarantee of ‘a certificate in a few months’; it is more a means of clearing technical points of contention in advance and reducing the probability of deficiency notices, and it requires paying additional third-party service fees.
Q15. How long is a registration certificate valid, and how is it renewed?
A registration certificate is valid for 5 years. Renewal (prorroga) must be filed before expiry (apply within the window of no more than 150 days before expiry), uniformly under COFEPRIS-04-090, with a statutory settlement of 45 calendar days. One important benefit from 2026: the validity after renewal has been extended from 5 years to 10 years (per the 2026 RIS amendment and 2026 COFEPRIS guidance). Special reminder: a certificate not renewed before expiry is cancelled outright; the product must be withdrawn from the market and the full registration redone – treat renewal as a fixed node in the annual compliance calendar.
Q16. How much is the official registration fee?
Per COFEPRIS’s official fee portal (derechos, paid under the Federal Rights Law), the current standards are: Class I approximately MXN 16,499, Class II approximately MXN 24,198, Class III approximately MXN 30,798 (2026 figures, payable in pesos and adjusted with the annual fee schedule). The official fee itself is not high; the main costs of Mexican registration lie in technical document preparation, translation and legalization, and legal representative and holder service fees – do not budget by the official fee alone.
Q17. Once the certificate is granted, can I import and sell right away?
No – there is still a ‘landing trio’. (1) Importer qualifications: the importer must have a premises operation notice (aviso de funcionamiento), designate a qualified sanitary responsible person (responsable sanitario), and be listed in the Federal Registry of Importers (padron de importadores). (2) Sanitary import permit (permiso sanitario de importacion): imports of implantable and some high-risk devices require application per shipment or per quantity, generally valid for 180 days or for the approved quantity, processed through the VUCEM platform. (3) Port consistency: the product name, model and registration number on the customs declaration must match the registration certificate, the CFS and the label exactly; mismatches get goods detained at customs. If the holder and the importer are not the same entity, the importer also needs the holder’s authorization.
Q18. What continuing obligations apply after market entry?
The core is medical technology vigilance (Tecnovigilancia), currently under NOM-240-SSA1: the holder must establish vigilance procedures and report adverse events to the COFEPRIS pharmacovigilance center as required – within 2 business days for events involving a public health threat, within 10 days for events causing death or serious health damage, and within 30 days for other adverse events. In addition, the holder must keep the label consistent with the registered content, cooperate with market surveillance sampling and testing, and file variations in a timely manner. Vigilance and variation obligations are genuine legal responsibilities of the holder (or its legal representative); when choosing a holding model (Q4), think this chain of responsibility through.
Q19. Are there regulatory requirements for product advertising?
Yes. Promotional materials aimed at healthcare professionals must be submitted in advance as an advertising notice (aviso) (current procedure COFEPRIS-02-002-C; the 2025 agreement updated the online submission and material requirements); advertising aimed at the general public requires prior COFEPRIS advertising permission (permiso). Published versions of promotional materials must display the corresponding acceptance or approval number. Claims that exaggerate efficacy or exceed the scope of the registered approval trigger penalties, and cross-border e-commerce and exhibition materials are equally within regulatory scope.
Q20. In one sentence, what is the right way to position for Mexico in 2026?
Three sentences: (1) Get the timelines right – ’30 business days’ is a statutory cap, not a delivery promise; plan on about 12 months for the standard pathway and 18 months or more for high-risk, and the accelerated pathway does not currently change that order of magnitude. (2) Use the new rules for ‘burden relief’ – NMPA approvals can now serve as the basis for COFEPRIS-04-050; the value is fewer duplicate materials and fewer technical points of contention; do not treat it as a time lever, and do not switch tracks blindly mid-queue in the standard pathway. (3) Manage the full life cycle – the holding model, importer qualifications, vigilance obligations and the renewal calendar (renew every 5 years, valid 10 years after renewal) should be designed into the business structure at project initiation, not patched up after the certificate arrives.
Regulatory points in this article were verified as of October 2026; for specific filings, the currently effective COFEPRIS publications prevail.