ISO 13485 certification is no longer just a quality credential that medical device companies keep on file to reassure customers. In the UAE, it has become a required document for getting a device registered and onto the market at all. This article covers what changed recently in how devices are registered, what the standard itself actually requires, and what a company needs to have in place before applying for ISO 13485 medical device registration UAE authorities will accept.
What Changed: The Move from MOHAP to EDE
Medical device regulation in the UAE went through a significant restructuring recently. Federal Decree-Law No. 38 of 2024, in force since January 2, 2025, established the Emirates Drug Establishment as a dedicated federal authority for pharmaceuticals and medical devices. According to MOHAP’s own website, EDE formally assumed 44 core services from MOHAP effective December 29, 2025, including device classification, marketing authorization, import and export permits, and manufacturer facility licensing.
This means EDE medical device registration is now the process companies need to follow, not MOHAP’s previous system. MOHAP hasn’t disappeared from the picture entirely. It retains jurisdiction over community and compounding pharmacies and a handful of narcotics-related administrative functions, but medical device registration itself now runs through EDE’s portal and review process. For companies with applications already in progress, or planning to register a device soon, this shift is worth confirming directly rather than assuming the older MOHAP process still applies.
Why ISO 13485 Certification Is Non-Negotiable for Registration
A valid ISO 13485 certificate covering the manufacturing site is one of the required documents in the registration dossier submitted to EDE, alongside items like the Certificate of Free Sale and other technical documentation. It isn’t an optional piece of supporting evidence that strengthens an application. Without it, product registration cannot move forward, regardless of how complete the rest of the submission is. For any organization building a medical device quality management system UAE authorities will recognize as valid, ISO 13485 certification is the starting point, not an afterthought to be addressed later in the process.
What ISO 13485:2016 Certification Actually Requires
ISO 13485 is a quality management system standard built specifically for medical devices, and it differs from a general standard like ISO 9001 in an important way. Where ISO 9001 focuses broadly on customer satisfaction and process efficiency, ISO 13485:2016 UAE certification is built around regulatory compliance and patient safety as its core purpose.
The standard covers several core areas. Risk management runs across the entire product lifecycle, from design through post-market use, rather than being treated as a one-time assessment. Design and development controls require documented, validated processes for how a device moves from concept to production. Traceability and documentation requirements mean an organization needs clear records of how products were made, tested, and released. Post-market surveillance and complaint handling close the loop, requiring organizations to monitor how devices perform once they’re in use and to act on issues that come up.
Who Actually Needs This Certification
ISO 13485 certification applies to manufacturers directly, but it also extends further down the chain. A UAE-based Local Authorized Representative acting on behalf of a foreign manufacturer needs to understand these requirements just as thoroughly, since they are the party submitting the registration application locally. More broadly, any organization involved in the design, production, distribution, or servicing of a device reaching the UAE market falls within scope, regardless of company size. A small distributor handling Class I devices and a large manufacturer producing complex implants are both expected to demonstrate the same underlying quality discipline, even if the depth of documentation differs.
Getting Ready Before You Apply
A few practical points make the difference between a smooth application and a delayed one. The quality management system needs to actually be operating, not just written down, before the certification audit takes place. Auditors are assessing whether the system functions in practice, not whether the documentation reads well. Manufacturing site details also need to match exactly across the ISO 13485 certificate and the EDE registration dossier, since mismatches between the two are a common and avoidable source of delay. It’s also worth confirming the device’s risk classification early in the process, since that shapes how much documentation the registration itself will require further down the line.
Certification as a Market-Access Requirement, Not a Formality
ISO 13485 certification has moved from being a quality differentiator to being a functional requirement for reaching UAE patients and healthcare providers at all. Getting the certification right and understanding how it fits into the current EDE registration process is part of any credible market entry plan for a medical device company.
URS Middle East provides ISO 13485 certification audits for organizations across the UAE, conducted by auditors with medical device sector experience. Contact us to learn more!