DIGIPRiS Platform and the e.firma FIEL Electronic Signature

1. Key takeaways

DIGIPRiS is the official electronic filing platform of COFEPRIS (digipris.cofepris.gob.mx), and access requires the e.firma / FIEL, the electronic signature issued by the Mexican tax administration. This creates a hard structural consequence: only entities that have completed tax registration in Mexico can enter the platform. A foreign manufacturer cannot log in and file on its own behalf; every submission must be operated through the Mexican registration holder. The platform is therefore not an incidental IT detail but a gatekeeper that shapes who may act, how documents are prepared, and how deficiency notices are answered, and the holder’s internal procedures should be written with that role in mind. This page explains why the FIEL is a substantive threshold, how the platform’s two categories of procedures differ, where the renewal structure can be confirmed, which file limitations create hidden risk, and how the deficiency cycle runs entirely inside the platform. Each of these points shapes the day-to-day workflow of the holder rather than the legal text of the registration, which is why they deserve a place in the operating procedures of the regulatory team.

2. Legal basis

The platform itself, the electronic signature that opens it, and the form requirements and timelines defined in the underlying instruments together determine the practical workflow. The table below lists each element with its date or key point and the role it plays in the filing process.

3. Expert insights

Insight 1: the FIEL is a substantive threshold, not a formality. The e.firma / FIEL is issued by the tax administration to taxpayers, both corporate entities and natural persons. A foreign manufacturer without a Mexican tax number has no FIEL, and therefore no direct way to file. This platform rule corroborates, from the operational side, the rule that the holder of the registration must be a Mexican legal entity: the same entity that must hold the certificate is the entity that can actually operate the platform. Any plan that assumes a foreign affiliate can log in directly is therefore not merely inconvenient but structurally impossible.

Insight 2: the platform procedures fall into two categories. The first category covers self-managed procedures (autogestivos), which require no written reply from COFEPRIS, such as updates to the operating notice, changes to company representative information, and the suspension or cancellation of a product registration. The second category covers electronic filings that still require COFEPRIS review, such as product registrations, clinical trial authorizations, import and export authorizations and health certificates. Filing a review-required matter as if it were self-managed is a categorization error with real consequences, because the file will sit without the review it needs while the team believes it has been submitted correctly. A short reference table mapping each procedure type to its category prevents the mix-up.

Insight 3: the renewal structure can be confirmed on the platform. The platform documentation states that the first authorization runs for 5 years before renewal, and thereafter once every 10 years, which matches the structure of Article 376 of the LGS as amended by the decree published in DOF 2026-01-15. The platform handbook is therefore a usable secondary reference when planning the certificate lifecycle alongside the statute, and the two readings agree on the structure of the first term and the renewal terms.

Insight 4: the file limitations are a hidden risk. The platform restricts the file format, usually PDF, together with the size of each individual file and the total upload size. Splitting the dossier to fit the platform limits during dossier preparation costs far less time than reworking the files after an upload failure, especially when the submission is already sitting in a queue with a clock attached to it. The splitting scheme and the naming convention should be agreed before the first file is exported.

Insight 5: the deficiency cycle closes inside the platform. Deficiency notices from COFEPRIS are issued through the platform, and the response materials are also submitted through it. If the holder does not have reliable platform operating capability, the correction deadline becomes a genuine operational risk point, since the ability to respond within the allotted days depends on the ability to receive, interpret and answer the notice inside the system. Platform access is therefore part of the holder’s compliance capability, not just its IT footprint.

4. Practical recommendations

• First confirm that the holder’s FIEL is valid and within its validity period, with all three components, the certificate, the private key and the password, available.
• Split the dossier according to the platform file limitations and use uniform naming, for example 01_administrative documents and 02_technical documents_technical specifications.
• Keep the two categories of procedures separate, and never file a matter that requires review as if it were a self-managed procedure.
• After submission, save the unique tracking number generated by the system, and use it as the index for all later queries and deficiency responses.
• For each deficiency notice, build a correspondence table from the platform messages, stating the official requirement, the action taken and the location of the corresponding document.

5. Verification checklist

• □ The holder’s FIEL (certificate, private key and password) is valid
• □ The account logs in normally and a trial upload has been completed
• □ The dossier has been split according to the platform format and size limits
• □ Self-managed and electronic filing procedures have been distinguished
• □ The unique tracking number has been saved after submission
• □ The deficiency correspondence table template is ready

Regulatory information verified as of October 28, 2026.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for the Mexican market. Our team manages COFEPRIS registrations and equivalence (equivalencia) reviews, coordinates third-party authorised centre routes, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com