# COFEPRIS, INVIMA & ANVISA approval for medical device trials: a country playbook
Running a medical device clinical trial in Latin America requires authorization from two separate bodies in every country: an ethics committee and the national regulatory authority. Neither approval substitutes for the other, and enrollment cannot begin until both are in hand. That sequencing rule is where most first-time sponsors lose weeks or months, not because the regulators are slow, but because the dossier was assembled in the wrong order or was missing documents that gate the next step.
This playbook covers the exact workflow for COFEPRIS (Mexico), INVIMA (Colombia), and ANVISA (Brazil): what to submit, in what order, what typically triggers a deficiency notice, and how to move through each country’s process without rework.
## The two-track model every sponsor must understand
Every jurisdiction in the region runs the same structural model:
– **Track 1:** Ethics committee (REC/IRB/IEC/CEP) issues a favorable opinion on the protocol, informed consent, and study procedures.
– **Track 2:** National regulator (COFEPRIS, INVIMA, or ANVISA) authorizes the clinical investigation, typically conditional on or concurrent with the ethics approval.
Enrollment cannot begin before both are cleared. Many sponsors try to run these tracks truly in parallel, but in practice, most regulators want at least a pending or favorable ethics opinion before they’ll accept a regulatory dossier as complete. Confirm the specific sequencing requirement for each country before filing.
## Step 1: Confirm your trial type and device classification before filing anything
The documents you’ll need, and the scrutiny you’ll face, depend entirely on what you’re studying and what risk class the device falls into. A first-in-human feasibility study of a novel implantable device triggers a far more detailed dossier than a post-market study of a Class II device with an existing clinical record.
Before drafting any submission, confirm:
– Whether the study qualifies as a clinical investigation, an early feasibility study, or a post-market/confirmatory study (each country treats these differently)
– The device’s local risk classification (Class I/II/III or equivalent) and intended use
– Whether a full device technical file or a lighter-weight summary will satisfy the reviewer
Required sponsor inputs at this stage include a finalized protocol concept, investigator brochure or equivalent device technical documentation, a risk management rationale aligned with ISO 14971, investigational product details (manufacturing, lot/batch controls, sterility), and a labeling and IFU approach.
## Step 2: Ethics committee approval, what the committee must see before enrollment
ISO 14155 (Clinical investigation of medical devices for human subjects) is the organizing standard here. The FDA recognizes ISO 14155 Third Edition (2020-07) as a consensus standard for medical devices, and the CITI Program confirmed ISO 14155:2026 updates that reinforce its global applicability. Designing your study to this standard isn’t optional if you want the resulting data to credibly support any future FDA pathway under [21 CFR 812.28](https://bioaccessla.com/fda-acceptance).
Ethics committees across LATAM consistently require:
– Final protocol (signed, versioned)
– Informed consent and patient information sheet in the local language
– Recruitment and advertising materials
– Safety reporting plan with clear SAE/SUSAR/AE definitions and notification timelines
– Clinical trial insurance or patient compensation evidence
– Investigator CVs and site qualifications
– Risk-benefit narrative aligned with the protocol
The most common reasons for ethics rework are: incomplete consent language (especially around risks, alternatives, and voluntary withdrawal), mismatched risk-to-benefit framing between the protocol and consent, missing or insufficiently described insurance/compensation coverage, and vague SAE definitions. Fix these before submission, ethics committees in the region rarely grant conditional approvals on major items.
## Step 3: Country-specific regulatory submission, what changes by jurisdiction
### COFEPRIS (Mexico)
According to ClinRegs (NIH, October 2025), COFEPRIS requires protocol authorization as a separate step from ethics approval. Sponsors must obtain a favorable opinion from a registered Research Ethics Committee (REC) and approval from a clinical site specifically licensed to conduct investigational studies before COFEPRIS authorization is complete. Regulatory submissions are processed through DIGIPRiS, COFEPRIS’s electronic platform, and the lifecycle includes fees, pharmacovigilance/safety reporting obligations, and investigational product import requirements.
In March 2025, COFEPRIS published a Resolution (Official Gazette, 24/03/2025, reported by Pérez-Llorca on 30/05/2025) introducing a Trusted Regulatory Practices (Reliance) framework that can simplify authorization when prior approvals from recognized authorities exist. Reliance doesn’t eliminate the local ethics or site authorization requirements, but it can reduce duplication in the regulatory dossier.
The typical COFEPRIS dossier for a device clinical investigation includes: Spanish-language protocol, scientific justification, investigator documents, patient-facing consent, investigational device import/handling documentation, and REC favorable opinion. All primary documents must be in Spanish or accompanied by certified translations. See the [Mexico clinical trial regulatory guide](https://bioaccessla.com/regulatory-guide/mexico) for the complete document checklist.
### INVIMA (Colombia)
Colombia uses a strictly sequential model. Ethics committee approval from an INVIMA-registered IEC/IRB must precede INVIMA submission. The total regulatory and ethical review timeline typically spans 120 to 280 days, depending on device risk classification and application completeness.
Required documentation for INVIMA includes: IEC/IRB approval letter, device technical file elements (biocompatibility data, analytical tests, risk analysis), GMP and ISO certificates, clinical trial insurance, and import license documentation. What device teams most often miss: an incomplete technical file (especially biocompatibility and risk analysis sections), insufficient insurance coverage documentation, and absent study registration in a recognized registry. For a structured walkthrough of the [INVIMA clinical trial approval process](https://bioaccessla.com/blog/invima-clinical-trial-approval-process-colombia), review the country-specific submission guide.
### ANVISA (Brazil)
Brazil’s framework has changed materially. Law 14.874/2024 and ANVISA RDC 837/2023 introduced a Clinical Investigation Dossier (DICD) concept for medical devices with risk-based delimitation of ANVISA’s approval scope. Under the modernized framework reported by Med Device Online (July 2025), ethics review is capped at 30 business days from acceptance and ANVISA regulatory analysis may not exceed 90 working days. Both timelines represent meaningful improvements over the prior system.
The DICD consolidates what was previously fragmented across multiple submissions into a single, structured dossier. Ethics governance in Brazil runs through CEP (institutional ethics committee) and CONEP (national ethics council) depending on the study type. Dossier incompleteness and device-class pathway nuances are the primary causes of clock resets in Brazil, sponsors that submit a near-complete package often find the 90-working-day clock paused at first technical review.
## Step 4: Investigational device import, don’t treat this as an afterthought
Every country in the region requires documented authorization to import investigational devices before they can be used in a clinical study. Regulators treat this as a separate gate, and a sponsor who holds ethics and regulatory approval but lacks import authorization cannot legally administer the device to patients.
Typical import documentation includes: import permit or letter of authorization from the regulator, GMP evidence or manufacturer declaration, investigational labeling (often country-specific), chain-of-custody documentation, and a storage, handling, and disposition plan.
This workstream often takes 2-6 weeks after regulatory approval, depending on the country and device type. Planning it in parallel, not sequentially, with site activation is the single biggest schedule optimization available at this stage.
## Step 5: Site activation and start-up readiness
Ethics and regulatory approval get you to the starting line. Site activation gets the trial running. Before the first patient is screened:
– Clinical trial agreements must be fully executed
– Delegation of responsibilities log must be in place
– All study staff must complete protocol and GCP training
– EDC or data capture system must be configured and validated
– Device accountability procedures and storage conditions must be documented and verified
– Monitoring plan must be approved and the first monitoring visit scheduled
Site selection should prioritize institutions with a track record of ISO 14155-aligned device studies, an accredited or registered ethics committee, investigator experience with the specific device category, and the operational infrastructure to handle investigational product controls. Picking sites that look strong on paper but lack device-trial-specific SOPs is a reliable way to generate protocol deviations in the first month.
## Step 6: Safety reporting and documentation during the trial
Sponsor and investigator responsibilities for safety reporting are distinct, and both are auditable. Sponsors are responsible for aggregate safety surveillance, SUSAR/expedited reporting to regulatory authorities, and DSMBs (where required). Investigators are responsible for identifying, documenting, and promptly reporting individual adverse events to the sponsor.
Timelines for regulatory reporting of SUSARs vary by country: typically 7 days for fatal/life-threatening events and 15 days for others, but confirm the specific requirement for each jurisdiction in your safety management plan. Audit readiness requires that source data, signed consent forms, and protocol deviations are documented contemporaneously, not reconstructed. [Clinical trial costs and timelines](https://bioaccessla.com/costs-and-timelines) across key LATAM jurisdictions reflect these operational requirements.
## Pre-submission completeness audit: run this before you file
A deficiency notice resets your timeline by weeks. Before submitting to any country, verify:
– Protocol version matches the version referenced in the informed consent
– Consent language covers all study procedures, risks, alternatives, and compensation terms
– Insurance certificate is valid for the full study duration and covers all enrolled subjects
– SAE/SUSAR/AE definitions are consistent across the protocol, consent, and safety management plan
– Device technical file is complete for the specific device, not a generic corporate summary
– Import documentation package is drafted and in queue, not waiting for regulatory approval
– All local language requirements are met (Spanish for Mexico/Colombia, Portuguese for Brazil)
Run this checklist against every section of your dossier, not just the cover page.
## Common pitfalls that trigger deficiency notices
Across all three countries, the same themes appear in deficiency letters:
– Protocol and consent are different versions or contain conflicting risk language
– Insurance evidence is present but doesn’t name all participating sites or cover all study phases
– Investigational product supply documentation is generic (e.g., a catalog GMP certificate) rather than study-specific
– Safety reporting plan lacks a notification workflow diagram or fails to define “unexpected” in the context of the device’s risk profile
– Technical file doesn’t include biocompatibility evidence appropriate for the intended contact type and duration
Fixing these before submission, not in response to a deficiency, is the difference between a 90-day and a 6-month approval timeline.
## When foreign approvals can help: reliance and streamlining
Reliance mechanisms allow regulators to recognize prior approvals from trusted foreign authorities as part of the local review, reducing the analytical burden on the national reviewer. COFEPRIS’s March 2025 Resolution is the clearest example in the region: sponsors with recognized foreign approvals may qualify for a simplified authorization pathway.
Two guardrails apply everywhere. First, eligibility for reliance depends on trial phase, device class, and the specific regulatory resolution, it’s not a blanket right. Second, reliance never removes the requirement for local ethics approval and local regulatory submission. It may shorten the review, but it doesn’t eliminate the track.
## FAQ
**How do I get COFEPRIS, INVIMA, or ANVISA approval to run a device trial?**
Obtain ethics committee approval first, then submit a complete regulatory dossier with device technical documentation and investigational product import evidence to the national authority.
**Do I need ethics approval before regulator approval?**
Yes, in all three countries. The sequencing is sequential (ethics first), though the specific timing requirements differ by jurisdiction.
**How long does the process take?**
Mexico (COFEPRIS): approximately 8-16 weeks total from a complete submission. Colombia (INVIMA): 120-280 days depending on device risk class and application completeness. Brazil (ANVISA): ethics capped at 30 business days and ANVISA review not to exceed 90 working days under the modernized framework (Law 14.874/2024).
**What documents do I need to submit?**
At minimum: protocol, informed consent, investigator documents, device technical file, GMP/ISO certificates, clinical trial insurance, risk management documentation, and investigational device import/supply plan. Country-specific additions apply.
**Can ISO 14155/GCP-aligned data support FDA planning?**
Yes. The FDA recognizes ISO 14155 as a consensus standard and may accept foreign clinical data under 21 CFR 812.28 when the study is conducted under ISO 14155/ICH-GCP with independent ethics oversight. This is a case-by-case determination, not a guarantee. See the [FDA acceptance of Latin America clinical data](https://bioaccessla.com/blog/fda-acceptance-latin-america-clinical-data-guide) guide for the full criteria.
**Do I need a local representative or importer?**
Yes, in all three countries. A local regulatory representative or importer of record is required for investigational device import authorization and regulatory correspondence. In Brazil, an authorized representative in-country is a structural requirement for ANVISA submissions.
## Get your submission-ready plan in 2-4 weeks
bioaccess® operates as a [first-in-human CRO](https://bioaccessla.com/first-in-human-cro) purpose-built for MedTech startups that need submission-ready human evidence on a predictable timeline. The FIH-12™ Medical Device Program structures every workstream required to go from protocol to clinical study report: FDA-anchored strategy, ISO 14155 protocol architecture, ethics and regulatory submissions in Mexico, Colombia, and Brazil, site selection and activation, investigational device import logistics, patient enrollment, monitoring, data management, and final report delivery.
The program runs under ICH-GCP standards with an ACRP-certified operations team across a network of 50+ pre-qualified clinical trial sites. Clinical data is structured from day one for potential FDA consideration under IDE, 510(k), De Novo, PMA, or HDE pathways.
If you’re planning a device trial in Latin America and want a country-by-country readiness assessment with a realistic timeline deliverable, [contact bioaccess®](https://bioaccessla.com/first-in-human-clinical-trials) to schedule a scoping call. The assessment covers ethics/regulatory sequencing, dossier gap analysis, import logistics planning, and a milestone-anchored submission timeline, typically delivered within 2-4 weeks of engagement.
Leave a Reply