CDSCO Medical Device Software Guidance 2026
Updated: August 5, 2026

CDSCO Medical Device Software Guidance 2026

New classification and compliance rules for software used in diagnosis, treatment and clinical decision-making

Key Requirements

Hospitals and health-tech vendors must verify whether their software qualifies as a regulated medical device

Software Classification

Software intended for diagnosis, monitoring or treatment must be classified by risk and regulated accordingly.

Risk-Based Classes A to D

Registration & Licensing

Manufacturers must obtain the applicable license before distribution of regulated software in India.

CDSCO Approval Needed

Privacy & Security

Aligned with DPDP requirements, including consent, encryption and breach notification obligations.

Data Protection Mandate

Clinical Validation

Documented evidence of safety and performance, including validation for AI and decision-support tools.

Evidence Submission

Post-Market Surveillance

Ongoing monitoring, incident reporting and version control once the software is in clinical use.

Continuous Compliance

Hospital Procurement Duty

Facilities must verify regulatory status of software and devices before clinical deployment.

Due Diligence Required

For Health-Tech Vendors

Determine whether your product is medical device software or general wellness software

Prepare quality management system and technical documentation

Submit clinical and performance evidence for the applicable risk class

For Hospitals & Clinics

Audit clinical software inventory and confirm regulatory approvals

Review vendor contracts for compliance and data protection clauses

Document staff training and safe-use procedures for regulated software

Unsure If Your Software Is Regulated?

Our regulatory experts help you classify, document and stay compliant with CDSCO requirements