ISO 13485 Certificate Scope Matching: One of the Most Common Rejection Reasons

1. Key takeaways

Article 6(1)(f) requires a valid GMP certificate issued by EDE, by the competent authority of the country of origin, or by a reference institution recognized by EDE, while the EDE service page simultaneously requires a valid factory registration certificate. An ISO 13485 certificate is almost never missing from the documentation package of a Chinese manufacturer, yet rejections remain frequent — the cause is concentrated in the wording of the certificate scope not matching the products to be registered. Our conclusion is that scope matching should be performed word by word against three elements — the product generic name, the intended use, and the process activities — rather than by checking whether the words medical device appear on the certificate cover.

• Article 6(1)(f) requires a valid GMP certificate from EDE, the country-of-origin authority, or a recognized reference institution.
• The EDE service page additionally requires a valid factory registration certificate for the manufacturing site.
• Rejections usually stem from the certificate scope wording, not from the absence of an ISO 13485 certificate.
• Scope matching must be done word by word on generic name, intended use, and process activities.
• Coverage on the certificate cover alone is not evidence that the specific device family falls within scope.

2. Legal basis

The regulatory basis pairs the GMP requirement of Federal Decree-Law No. 38 of 2024 with the site registration requirement on the EDE service page. The table below reproduces the instruments cited in the source material and their key points.

3. Expert insights

Insight 1: Scope matching is a matter of subtraction, not addition. Chinese manufacturers tend to write the ISO 13485 scope broadly in the hope of covering everything, but what EDE reviews is whether the specific product family falls within the scope. Our judgment is that a scope that is broad yet lacks a listing of product families is more likely to attract a request for clarification; the safer approach is to list the generic names of the products to be registered and the activity types explicitly in the certificate annex or the scope description.

Insight 2: The validity of the certificate chain is the time intersection of three certificates. The ISO 13485 certificate, the CE certificate where applicable, and the EDE factory registration certificate together form a chain; if any one expires, the entire chain breaks. Site registration costs approximately AED 10,100 and takes approximately 14–28 working days (practical estimate), and this lead time must be built into the submission schedule; it cannot be assumed that site registration can simply run in parallel with the product submission without affecting progress.

Insight 3: Handling during a certificate renewal window requires written evidence. When a certificate is within its renewal window, we do not recommend submitting the application on the grounds that renewal is in progress. The appropriate approach is to first obtain a renewal status statement from the certification body and simultaneously confirm in writing with EDE whether it will be accepted, because subparagraph (h) of Article 6 leaves other conditions to the Executive Regulations, and procedural matters of this kind should not be inferred from industry practice.

4. Practical recommendations

• Compare the certificate scope word by word against the three elements of product generic name, intended use, and process activities, and keep a written comparison record.
• Where a manufacturer operates multiple production sites, verify certificate coverage site by site, and do not substitute a group-level certificate for the site certificate.
• Schedule site registration in advance at approximately 14–28 working days (practical estimate) and run it in parallel with the preparation of the product technical documentation.
• Do not submit a new application when a certificate is close to expiry; complete the renewal first and then start the submission.
• Where the certificate scope does not cover the products to be registered, apply to the certification body for a scope extension first and submit only after the extension is complete, rather than relying on an explanatory letter.
• In contract manufacturing situations, the system certificate of the contract manufacturer and the contract manufacturing documents must be submitted together, and the contract manufacturer must fall within the scope of the applicant entity.

5. Verification checklist

• □ The ISO 13485 certificate scope covers the generic names and activity types of the products to be registered
• □ The certificate was issued by a body recognized by EDE or by the competent authority of the country of origin
• □ The certificate is valid both on the acceptance date of the submission and throughout the expected review period, with no record of suspension or withdrawal
• □ For multi-site production, the certificate of each site covers the corresponding products
• □ EDE factory registration has been completed, and the registration certificate number matches the entry on the application form
• □ For renewal or scope extension situations, a written statement from the certification body has been obtained and the EDE confirmation record is retained

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for the United Arab Emirates. Our team prepares MOHAP-compliant dossiers, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com