Blog

• What Is INVIMA and What Does It Regulate?
• INVIMA Clinical Trial Approval Timeline
  • Pre-Submission and Document Preparation
  • Institutional Ethics Committee (IEC) Review
  • INVIMA Scientific Review
  • Authorization Issuance
• Required Documents for INVIMA Clinical Trial Submission
• Common Causes of Delay in INVIMA Approvals
  • Incomplete or Incorrectly Formatted Submissions
  • Protocol Language and Translation Quality
  • Ethics Committee Timing Misalignment
  • Query Response Delays
  • Investigator and Site Documentation Gaps
  • Regulatory Classification Uncertainty for Devices
• How Colombia Compares to Other LATAM Jurisdictions
• What to Do If Colombia Is Still the Right Fit
• FAQs
• Plan Your Timeline Around the Approval Process, Not After It

Colombia is one of the most frequently considered Latin American markets for clinical trial expansion. It has a large patient population, established academic medical centers, and a reasonably mature research infrastructure. But for MedTech and biopharma sponsors evaluating where to run a first-in-human or early-feasibility study, INVIMA's approval process carries a reputation worth examining honestly before you commit budget and timeline to it.

This article covers how INVIMA clinical trial approvals actually work, what documents you need, how long the process takes, and where sponsors most often lose weeks or months to delays that could have been avoided.

What Is INVIMA and What Does It Regulate?

INVIMA (Instituto Nacional de Vigilancia de Medicamentos y Alimentos) is Colombia's national health regulatory authority. It oversees clinical trial authorization for drugs, biologics, and medical devices conducted on Colombian territory.

For clinical research, INVIMA operates under Decree 2378 of 2008 and Resolution 8430 of 1993, which establish the ethical and scientific framework for human research in Colombia. Device trials also intersect with INVIMA's medical device registration framework, adding a classification review layer depending on the investigational product.

INVIMA is not a passive registry. It conducts substantive scientific review of protocols — which is one reason timelines run longer than sponsors sometimes expect when they first look at Colombia as a LATAM option.

INVIMA Clinical Trial Approval Timeline

INVIMA's official review window is 30 to 60 business days from the date of an accepted submission. In practice, sponsors should plan for 4 to 9 months total elapsed time — from initial submission to authorization — once you account for document preparation, parallel institutional ethics committee (IEC) review, query resolution, and any resubmission cycles.

Here is how the timeline typically breaks down:

Pre-Submission and Document Preparation

Assembling the dossier usually takes 4 to 8 weeks before submission. This phase is consistently underestimated. Missing or incorrectly formatted documents are the single most common source of delay, and INVIMA will not begin its substantive review until the submission passes an administrative completeness check.

Institutional Ethics Committee (IEC) Review

Colombia requires IEC approval from a recognized ethics committee at each participating site before INVIMA will issue final authorization. IEC timelines vary by institution but typically run 4 to 8 weeks. Some sponsors submit to both IEC and INVIMA simultaneously to compress the overall timeline; others wait for IEC approval first. Running them in parallel is more efficient, but it requires your protocol and consent forms to be finalized before either submission goes in.

INVIMA Scientific Review

Once the submission is accepted, INVIMA's scientific review team evaluates the protocol, investigator qualifications, site suitability, and the study's risk-benefit profile. This phase generates formal queries — called requerimientos — that the sponsor must respond to within a defined window. A single query round can add 4 to 8 weeks, and complex protocols sometimes generate two rounds.

Authorization Issuance

After satisfactory responses to all queries, INVIMA issues the clinical trial authorization. No subjects can be enrolled until this document is in hand.

Required Documents for INVIMA Clinical Trial Submission

The exact document list varies depending on whether the study involves a drug, biologic, or medical device, but the core dossier for most clinical trials includes:

• Clinical study protocol (in Spanish or with a certified Spanish translation)
• Investigator's Brochure (IB) or equivalent device description document
• Informed consent form(s) in Spanish, compliant with Resolution 8430
• Investigator CVs for principal investigators at each site
• Site qualification documentation (infrastructure, equipment, staff)
• Ethics committee approval letter from the IEC at each participating site
• Sponsor authorization letter and legal representation documentation for the sponsor's local representative or CRO
• Product dossier including manufacturing information, quality data, and preclinical safety summary
• Insurance or indemnification documentation covering trial participants
• INVIMA application form completed in the required format

For medical device trials specifically, INVIMA may also request the device's risk classification under Colombian regulation and, in some cases, prior regulatory clearance or CE/FDA status as supporting context.

All documents must be submitted through INVIMA's digital platform (VUE, Ventanilla Única Empresarial) in the required format. Paper submissions are no longer accepted for most trial types.

Common Causes of Delay in INVIMA Approvals

Knowing where approvals stall is more useful than knowing the official timeline. These are the delays sponsors run into most often:

Incomplete or Incorrectly Formatted Submissions

INVIMA's administrative completeness check is strict. A missing document, an incorrectly formatted file, or a translation that does not meet certification standards will result in the submission being returned. The review clock does not start until the submission clears this check.

Protocol Language and Translation Quality

The protocol and consent forms must be in Spanish. Machine-translated documents or low-quality translations regularly generate queries during scientific review — and errors in technical terminology can raise substantive scientific questions that take multiple rounds to resolve.

Ethics Committee Timing Misalignment

If IEC review at a site is delayed, INVIMA will not issue final authorization even if its own review is complete. Sponsors who treat IEC review as a sequential step after INVIMA review, rather than a parallel track, routinely add 6 to 10 weeks to their overall timeline.

Query Response Delays

INVIMA's formal queries must be answered within a specified window. Sponsors who are not organized to respond quickly — or who need to revise the protocol to address a query — can lose significant time. Each query round resets a portion of the review clock.

Investigator and Site Documentation Gaps

INVIMA scrutinizes investigator qualifications carefully. CVs that do not reflect relevant therapeutic area experience, or sites that lack documented GCP training records, frequently generate queries or requests for additional information.

Regulatory Classification Uncertainty for Devices

For medical device trials, INVIMA's classification of the investigational device under Colombian regulation can introduce uncertainty. If the device does not map cleanly to an existing Colombian classification, INVIMA may request additional technical documentation before proceeding with clinical trial review.

How Colombia Compares to Other LATAM Jurisdictions

For sponsors evaluating where to run a first-in-human or early-feasibility study, the INVIMA timeline is a meaningful planning input. The realistic 4 to 9 month window for clinical trial authorization in Colombia is significantly longer than what sponsors can achieve in certain other Latin American jurisdictions.

In Panama, El Salvador, Chile, and the Dominican Republic, ethics and regulatory approvals are typically observed in 30 to 90 days. That gap matters when your runway is tied to a Series A milestone or a board deadline. A 6-month difference in regulatory approval timing can determine whether you have data in hand before your next funding round closes.

This is one reason sponsors working with bioaccess® on FIH programs operate in those four jurisdictions rather than Colombia. The faster approval windows are not a workaround — Panama, El Salvador, Chile, and the Dominican Republic are established regulatory environments with qualified sites and data structured for FDA acceptance under 21 CFR 812.28 for foreign clinical data.

What to Do If Colombia Is Still the Right Fit

Some sponsors have specific reasons to run in Colombia: existing investigator relationships, a patient population with particular disease prevalence, or a market access strategy that makes Colombian data valuable beyond the FIH milestone. If that describes your situation, the practical steps to minimize delay are:

1. Start document preparation 3 to 4 months before your target submission date. Certified translations and site qualification packages take longer than most teams expect.
2. Run IEC and INVIMA submissions in parallel. Coordinate with your sites so ethics committee submissions go in at the same time as your INVIMA dossier.
3. Engage a local regulatory affairs consultant or CRO with active INVIMA experience. Familiarity with current query patterns and administrative requirements is worth more than general LATAM regulatory knowledge.
4. Finalize your protocol before submission. Amendments after submission restart portions of the review process.
5. Build query response capacity into your team. Assign a dedicated person to monitor INVIMA communications and coordinate responses within the required window.

FAQs

What is the official INVIMA review timeline for clinical trial authorization?
INVIMA's official review window is 30 to 60 business days from the date of accepted submission. In practice, total elapsed time from initial submission to authorization is typically 4 to 9 months when accounting for document preparation, IEC review, and query resolution rounds.

Does Colombia require ethics committee approval before INVIMA authorization?
Yes. INVIMA requires IEC approval from a recognized institutional committee at each participating site as part of the authorization process. Running IEC and INVIMA submissions in parallel is the most efficient way to manage overall timeline.

What language must clinical trial documents be submitted in for INVIMA?
The protocol, informed consent forms, and most supporting documents must be in Spanish. Certified translations are required for documents originally prepared in other languages. Low-quality translations are a common source of queries and delays.

Can a foreign sponsor submit directly to INVIMA without a local representative?
No. Foreign sponsors must designate a local legal representative in Colombia or engage a CRO with local legal standing to submit and manage the application on their behalf.

What is the most common reason INVIMA submissions are delayed?
Incomplete or incorrectly formatted submissions that fail the administrative completeness check are the most frequent cause. This prevents the substantive review clock from starting and can add weeks to the process before the sponsor receives any feedback.

How does INVIMA's timeline compare to other Latin American jurisdictions?
Colombia's realistic 4 to 9 month window is longer than what is achievable in jurisdictions like Panama, El Salvador, Chile, and the Dominican Republic, where ethics and regulatory approvals are typically observed in 30 to 90 days for clinical trials in those markets.

Is INVIMA clinical trial data accepted by the FDA?
Foreign clinical data submitted to the FDA must meet the requirements of 21 CFR 812.28 for investigational devices, or equivalent standards for drugs and biologics. Whether INVIMA-authorized Colombian trial data satisfies those requirements depends on study design, ICH-GCP compliance, and the specific submission context. Sponsors should confirm FDA alignment before initiating any study intended to support a US regulatory pathway.

Plan Your Timeline Around the Approval Process, Not After It

INVIMA is a capable regulatory authority, and Colombia is a legitimate clinical research market. But the approval timeline is not forgiving of late starts or incomplete submissions. If you are managing a startup runway, a 4 to 9 month regulatory approval window needs to be factored into your FIH planning from the moment you begin site selection — not after your protocol is finalized.

If your primary goal is getting first human data within a timeline that works for your next funding round, it is worth understanding all your jurisdiction options in Latin America before defaulting to Colombia. Learn more at bioaccessla.com.

WordPress category: Navigating Regulatory Landscapes in Latin America

• Why Protocol Development Is Different for FIH Medical Devices
• Step 1: Align on Your US Regulatory Pathway First
• Step 2: Define Study Objectives and Endpoints Precisely
• Step 3: Write Eligibility Criteria That Reflect Real Patient Populations
• Step 4: Design the Safety Monitoring Plan
• Step 5: Build the Statistical Analysis Plan Into the Protocol From the Start
• Step 6: Address Regulatory Submission Requirements for Your Target Jurisdiction
• Step 7: Write the Protocol Amendment Process Into the Document
• How the FIH-12™ Program Structures Protocol Development
• Common Protocol Development Mistakes in FIH Device Studies
• FAQs
• Start With the Right Foundation

WordPress Category: Navigating Regulatory Landscapes in Latin America

Writing a clinical trial protocol for a first-in-human (FIH) medical device study is not a documentation exercise. It is a strategic decision that shapes your regulatory pathway, your site selection, your enrollment timeline, and ultimately whether your data will be accepted by FDA. Get it right, and you have a submission-ready evidence package. Get it wrong, and you are rewriting sections after your first ethics review, burning weeks you cannot afford.

This walkthrough covers what founders and clinical operations leads need to understand before a single word of their protocol is drafted.

Why Protocol Development Is Different for FIH Medical Devices

FIH drug trials follow a relatively standardized dose-escalation framework. Medical device FIH studies are more variable. The protocol must account for device-specific risks, operator learning curves, procedural endpoints, and the regulatory route the sponsor intends to pursue — whether that is IDE, 510(k), De Novo, PMA, or HDE.

FDA's investigational device exemption guidance and ISO 14155:2020 — the international GCP standard for medical device trials — together define the architecture your protocol must satisfy. If your study will generate data used in a US submission, structuring under ISO 14155 from the start is not optional. It is how you ensure the data qualifies under FDA 21 CFR 812.28 for foreign clinical data acceptance.

That regulatory anchor needs to be set before protocol drafting begins, not after.

Step 1: Align on Your US Regulatory Pathway First

Before writing a single inclusion criterion, confirm which FDA pathway the study data will support. Protocol design follows from that answer.

• IDE pathway: Your protocol must satisfy FDA's investigational device exemption requirements. For studies conducted outside the US, you will need to demonstrate that the study design, GCP compliance, and data collection meet the standards FDA applies to foreign clinical data under 21 CFR 812.28.
• 510(k) or De Novo: The protocol must define substantial equivalence endpoints or performance criteria that map directly to your predicate or device classification.
• PMA or HDE: Expect a more rigorous statistical plan, longer follow-up windows, and a higher bar for safety documentation.

Drafting a protocol to a generic GCP standard without first confirming the regulatory pathway is one of the most common and costly mistakes in early-stage device development. You end up with data that is scientifically valid but regulatorily incomplete.

Step 2: Define Study Objectives and Endpoints Precisely

The primary objective of a FIH device study is typically safety and feasibility, not efficacy. That distinction matters for how you structure your endpoints.

Primary endpoints should capture:

• Device-related adverse events and serious adverse events (SAEs)
• Technical success at the procedural level
• Early performance indicators tied to the device's mechanism of action

Secondary endpoints might include:

• Subject-reported outcomes at defined follow-up intervals
• Imaging or biomarker data supporting performance claims
• Operator assessment of usability and handling

Be specific. "Safety will be assessed" is not an endpoint. "Incidence of device-related SAEs at 30 days post-procedure" is. Vague endpoints create ambiguity during data analysis and give ethics committees a reason to request revisions.

Step 3: Write Eligibility Criteria That Reflect Real Patient Populations

Overly restrictive eligibility criteria are the single largest driver of enrollment delays in FIH device trials. Founders often write criteria that reflect their ideal study subject rather than the patients who actually present at clinical sites.

A few practical guidelines:

• Anchor criteria to your intended indication. If your device is intended for a broad population, your criteria should not narrow to a subgroup so specific that enrollment stretches to 18 months.
• Exclude for safety, not convenience. Every exclusion criterion should have a documented safety or scientific rationale. Ethics committees will ask.
• Pressure-test criteria against site feasibility data. If your CRO has pre-qualified sites in your target geography, they should be able to tell you whether the criteria are achievable given the patient populations those sites actually see.

In jurisdictions like Panama, El Salvador, Chile, and the Dominican Republic, patient populations are often well-suited for FIH feasibility work, with disease prevalence and site infrastructure that support enrollment within realistic timelines. Even so, your criteria still need to match the site's actual patient flow.

Step 4: Design the Safety Monitoring Plan

For a FIH device study, the safety monitoring plan is not a boilerplate appendix. It is a core section that regulators and ethics committees scrutinize carefully.

Your plan should define:

• Stopping rules: Specific, measurable criteria that would pause or terminate the study
• DSMB or independent safety review: Whether one is required, how often it convenes, and what data it reviews
• Adverse event reporting timelines: Expedited reporting requirements for SAEs, including timelines to the sponsor, ethics committee, and regulatory authority
• Device deficiency reporting: ISO 14155 requires a clear distinction between adverse events and device deficiencies — your protocol needs to reflect that

Sponsors running multi-site studies increasingly use dedicated ICSR (Individual Case Safety Report) platforms to manage regulatory submissions across jurisdictions, which reduces the risk of missed reporting windows during active enrollment.

Step 5: Build the Statistical Analysis Plan Into the Protocol From the Start

Many early-stage sponsors treat the statistical analysis plan (SAP) as something to write after enrollment closes. That is the wrong sequence.

Your protocol should include, at minimum:

• Sample size justification: For FIH feasibility studies, this is often based on precision estimates rather than power calculations — but you still need a documented rationale
• Primary analysis method: How you will analyze your primary safety and feasibility endpoints
• Handling of missing data: Especially relevant for device studies with procedural endpoints where some subjects may not complete follow-up

FDA reviewers will look at whether your analysis was pre-specified. A post-hoc safety analysis carries less weight than one defined prospectively in the protocol.

Step 6: Address Regulatory Submission Requirements for Your Target Jurisdiction

If you are running your FIH study in Latin America, your protocol needs to satisfy both the local regulatory authority and FDA's foreign data acceptance standards simultaneously.

In the four jurisdictions where bioaccess® operates, ethics and regulatory approvals take 30 to 90 days. That speed advantage is only realized if your protocol is structured correctly from submission. A document that requires multiple revision cycles with MINSA/CNBI in Panama or SRS/CNEIS in El Salvador will erode the timeline advantage those jurisdictions offer.

Key requirements to address in the protocol:

• Informed consent language: Must satisfy local ethics committee requirements and be available in the local language
• Investigator qualifications: Document the PI's experience with the device type and procedure
• Site infrastructure requirements: Define what the site needs to have in place — equipment, staff, and follow-up capabilities
• Data management standards: If the data will be submitted to FDA, your EDC and data collection instruments need to meet the requirements for foreign clinical data acceptance under 21 CFR 812.28

Step 7: Write the Protocol Amendment Process Into the Document

FIH studies generate new information. Your protocol will almost certainly need at least one amendment — whether to adjust stopping rules based on early safety data, modify follow-up windows, or refine eligibility criteria after the first few enrollments.

Define the amendment process in the protocol itself:

• What types of changes require ethics committee re-approval versus administrative notification
• How protocol deviations will be documented and reported
• Who has authority to approve amendments on the sponsor side

Ethics committees in Latin American jurisdictions, like those anywhere, expect sponsors to have a clear governance process for protocol changes. Having it documented upfront prevents delays when an amendment is actually needed.

How the FIH-12™ Program Structures Protocol Development

For startups running their first device trial, the protocol development process described above is often unfamiliar territory. The FIH-12™ program at bioaccess® integrates protocol development as one of nine structured workstreams, alongside FDA strategy alignment, site activation, patient enrollment, data management, and final evidence package delivery.

One accountable team manages all nine workstreams, which means the protocol is written with the site network, enrollment feasibility, and submission requirements already factored in — rather than developed in isolation and handed off to execution teams who find problems later.

If you are 12 to 24 months from needing your first human dataset and want a preliminary view of your country route, timeline range, and evidence package requirements, the FIH Launch Planner at bioaccessla.com generates a preliminary estimate based on your device class in six questions.

Common Protocol Development Mistakes in FIH Device Studies

A few patterns appear repeatedly in early-stage device programs:

Starting protocol development before regulatory strategy is confirmed. The protocol should follow from the regulatory pathway, not the other way around.

Writing endpoints that cannot be measured at your sites. If your primary endpoint requires imaging equipment or lab infrastructure that your sites do not have, you have an enrollment problem before you start.

Underestimating the ethics committee review process. Even in fast-approval jurisdictions, a poorly structured protocol will generate questions that extend your timeline. The 30 to 90 day approval window in Panama, El Salvador, Chile, and the Dominican Republic assumes a submission-ready document.

Separating the statistical plan from the protocol. Pre-specified analysis is a credibility signal for FDA reviewers. Build it in from the start.

Treating the protocol as a static document. Plan for amendments. They are not a sign that the study is failing — they are a normal part of FIH execution.

FAQs

What is the difference between a clinical trial protocol for a medical device versus a drug?
Drug protocols typically follow dose-escalation frameworks with pharmacokinetic endpoints. Medical device protocols focus on procedural safety, technical success, operator performance, and device-specific adverse events. They must also comply with ISO 14155 for GCP — the applicable standard for medical device trials — rather than the ICH E6 framework used for drugs.

Does a FIH protocol written for a Latin American study need to meet FDA standards?
Yes, if the data will be used in a US regulatory submission. Under FDA 21 CFR 812.28, foreign clinical data is acceptable when the study was conducted under GCP standards equivalent to those FDA requires. Structuring the protocol under ISO 14155 and aligning data collection with FDA's foreign data acceptance requirements from the start is how you ensure the data is usable for your IDE or 510(k) submission.

How long does it typically take to develop a FIH protocol for a medical device?
Timelines vary based on device complexity, regulatory pathway, and how much pre-clinical data is already available to inform safety parameters. Within the FIH-12™ program, protocol development is one of nine structured workstreams managed by a single accountable team, with the goal of a submission-ready evidence package within 12 months from program start.

What happens if the ethics committee requests protocol revisions?
Revision requests are normal and should be anticipated. The key is having a protocol that is well-structured enough to minimize revision cycles. In the four jurisdictions where bioaccess® operates, the 30 to 90 day approval window assumes a submission-ready document. Poorly structured protocols extend that window and erode the timeline advantage those jurisdictions offer.

How should sample size be justified for a FIH feasibility study?
For FIH device studies, sample size justification is typically based on precision estimates or feasibility criteria rather than statistical power calculations. You need a documented rationale explaining why the number of subjects is sufficient to characterize safety and feasibility for the intended use. FDA reviewers will look for this justification in the protocol.

What is ISO 14155 and why does it matter for FIH device protocols?
ISO 14155:2020 is the international standard for good clinical practice in medical device investigations. It defines requirements for protocol content, ethics committee submissions, informed consent, adverse event reporting, and data management. Structuring your FIH protocol under ISO 14155 is how you demonstrate GCP compliance to both local regulatory authorities in Latin America and FDA when submitting foreign clinical data.

When should a Data Safety Monitoring Board be included in a FIH device protocol?
A DSMB is not required for all FIH device studies, but it is strongly advisable for studies involving novel mechanisms, high-risk device classifications, or vulnerable patient populations. The protocol should define whether a DSMB is included, how often it convenes, what data it reviews, and what authority it has to recommend study modifications or early termination.

Start With the Right Foundation

A clinical trial protocol is the document that every downstream decision in your study depends on. Site selection, enrollment planning, data management, ethics submissions, and the final evidence package all trace back to choices made during protocol development.

For medical device founders running their first FIH study, the most important thing to get right is the regulatory anchor. Know your FDA pathway before you write your first endpoint. Structure your data collection for foreign data acceptance from day one. And build your safety monitoring plan with the same rigor you would apply to a pivotal trial — because for many FIH studies, this data will eventually support one.

If you are in the early stages of planning your FIH program, bioaccess® manages protocol development as part of a fully integrated nine-workstream engagement across Panama, El Salvador, Chile, and the Dominican Republic, where regulatory approvals take 30 to 90 days.