Published on 20/12/2025
Regulatory Checklist for Digital Therapeutics Submissions
Step 1: Understanding the Regulatory Framework for SaMD
To successfully navigate the regulatory landscape for digital therapeutics, also referred to as Software as a Medical Device (SaMD), it is essential to first comprehend the framework established by the FDA. The FDA categorizes SaMD based on the level of risk associated with its use, which ultimately drives the submission type required. SaMD products must comply with federal laws, including but not limited to the Federal Food, Drug, and Cosmetic Act.
The first step is to identify whether your digital therapeutic qualifies as a medical device under the FDA’s regulations. The FDA defines a medical device as any instrument, apparatus, implement, machine, contrivance, implant, in vitro reagent, or related article intended for use in the diagnosis, cure, mitigation, treatment, or prevention of disease. If your digital health solution fits within this definition, you must determine the appropriate classification—i.e., Class I, Class II,
For digital therapeutics, the classification often hinges on the intended use and the level of risk to patients. Most digital therapeutics may fall under Class II devices marketed through either the 510(k) pathway or as a De Novo classification. Class III devices generally require pre-market approval (PMA) due to their higher risks.
It is also pertinent to review the FDA’s guidance documents on SaMD, including the “Digital Health Innovation Action Plan”, which outlines the agency’s approach to digital health regulation.
Ultimately, your regulatory strategy must incorporate these guidelines while aligning with the FDA’s expectations regarding clinical data, labeling, and marketing claims. An understanding of the unique attributes of your digital therapeutic and the data requirements for submission will facilitate a smoother navigation of the regulatory pathway.
Step 2: Preparing the Regulatory Submission Dossier
Once the regulatory pathway is identified, the next step involves preparing a comprehensive submission dossier. The structure of this dossier may vary based on the chosen submission type—510(k), De Novo, or PMA—but generally should contain essential components that demonstrate the safety and efficacy of the digital therapeutic.
The following subsections outline the major elements required in your regulatory submission dossier:
- Device Description: Provide a clear and concise description of the digital therapeutic, including its intended use, target population, and operational technology.
- Clinical Evidence: Depending on the regulatory pathway, clinical data may be necessary to establish safety and effectiveness. For a 510(k), you need to show substantial equivalence to a predicate device. For the De Novo classification, evidence demonstrating safety and efficacy is crucial.
- Risk Analysis: Conduct a thorough risk assessment using tools such as FMEA (Failure Mode and Effects Analysis) to identify and mitigate potential risks associated with device usage.
- Cybersecurity Considerations: Address cybersecurity risks as part of your submission. The FDA has outlined expectations for protecting digital therapeutics against threats that may affect patient data and device functionality.
- Quality Management System (QMS): Detail your quality management systems in line with FDA’s Quality System Regulation (QSR). Documenting compliance with ISO 13485 can also support your submission.
- Labeling: Include proposed labeling and instructions for use that will accompany your device. Your labeling must be clear, informative, and comply with FDA guidelines.
This collection of documents forms the core of your regulatory submission. It is advisable to have a robust internal review process to ensure completeness and adherence to FDA expectations.
Step 3: Choosing the Appropriate Submission Type
The choice between a 510(k), De Novo, or PMA submission is critical and should be informed by a thorough understanding of your digital therapeutic’s intended use, risk classification, and the presence of equivalent devices on the market.
The 510(k) submission is often used for devices that are substantially equivalent to an already legally marketed predicate device. The submission must include information demonstrating that the digital therapeutic is at least as safe and effective as the predicate device. For instance, if your device leverages already accepted technology (e.g., software platforms for behavioral therapy similar to existing solutions), a 510(k) may be appropriate.
In contrast, the De Novo classification is a pathway for novel devices that are low to moderate risk and do not have a predicate. Suitable for digital therapeutics that introduce new concepts or technologies, this process facilitates market entry while establishing regulatory requirements. The De Novo pathway encompasses substantive data requirements, including clinical studies, though the process is generally streamlined compared to the PMA process.
Finally, the Premarket Approval (PMA) is the most rigorous pathway, necessitating comprehensive clinical data to demonstrate safety and effectiveness. This is typically applicable to high-risk devices. Digital therapeutics that directly influence critical health outcomes, such as managing chronic diseases with significant implications if misused, may fall into this category.
After selecting the submission route, ensure that documentation and communications are clear and compliant with FDA guidelines to support the chosen pathway.
Step 4: Conducting Clinical Evaluations and Trials
Clinical evidence is a cornerstone of any regulatory submission for digital therapeutics. This evidence may be gathered from a variety of sources, including literature reviews or clinical trials. The approach will depend on the classification of the device and the required level of evidence to support the claims being made.
The first step in this process is to determine the nature of evidence needed based on your regulatory strategy. For 510(k) submissions, substantial equivalence to a predicate device often suffices, while De Novo and PMA submissions necessitate robust clinical evaluation. If conducting new clinical trials, registries, or studies, ensure they are designed to meet the specific endpoints required by the FDA, emphasizing safety, efficacy, and usability.
Consider initiating a Pre-Submission meeting with the FDA to discuss your clinical data plan. Engaging in early dialogue with regulatory officials can provide invaluable guidance on trial design, endpoints, and preferred methodologies, thereby increasing the likelihood of successful submission.
During the clinical trials, adhere to Good Clinical Practice (GCP) mandates, ensuring that all data collected are reliable and reproducible. Following the trials, a comprehensive analysis of the data will help to prepare the sections of the dossier focused on clinical evidence. This may include statistical analysis plans, demographics of study participants, and results which should align closely with the intended claims of your digital therapeutic.
Step 5: Submission of Regulatory Documents
With your dossier prepared, the next major step is the submission of regulatory documents through the appropriate channels. For digital therapeutics targeting the U.S. market, submissions will typically be made via the FDA’s Electronic Submission Gateway (ESG). Proper submission requires careful attention to formatting and completeness.
Your submission must adhere to the FDA’s eCTD (electronic Common Technical Document) format, which dictates the necessary structure for the regulatory file. Ensure that all required modules are included: module 1 (regional administrative information), module 2 (summaries), module 3 (quality), module 4 (non-clinical study reports), and module 5 (clinical study reports).
Before submitting, implement a rigorous internal review process wherein team members across regulatory, clinical, and QA departments evaluate the entire submission for accuracy and compliance. Tracking and logging all submissions and any communications with the FDA is also crucial for regulatory oversight and future interrogations of your submission timelines.
Step 6: Engaging with Regulatory Agency during Review
After submission, the regulatory review process begins. The FDA will assess your documentation, clinical data, and overall compliance with requisite standards. Active communication during this stage is vital; maintain open channels for addressing any inquiries or additional data requests from the FDA.
Understand that the review times can vary significantly, depending on the submission type and complexity of the digital therapeutic. For instance, a 510(k) may have a review timeline of approximately 90 days, while PMAs can take significantly longer due to their comprehensive nature.
It is not uncommon for the FDA to issue queries that require timely responses. Prepare to interact with agency staff through meetings, teleconferences, or requests for additional information, demonstrating your commitment to transparency and ongoing compliance. Ensure you respond all inquiries promptly and accurately to maintain progress in the review process.
Step 7: Post-Approval Commitments and Monitoring
Upon receiving regulatory approval for your digital therapeutic, the journey does not conclude. Post-approval commitments—such as the need for post-market surveillance, additional clinical studies, or risk management activities—may be mandated by the FDA. For digital therapeutics, this may include monitoring effectiveness and safety in real-world settings.
Establishing a post-market surveillance team to gather real-world data and report adverse events is paramount. The FDA’s REMS (Risk Evaluation and Mitigation Strategies) requirements may also dictate ongoing activities related to patient safety and effectiveness. Regular reporting through the MedWatch system can aid in ensuring compliance while watching for and addressing potential issues that arise from wider usage.
Additionally, preempting risks involving cybersecurity is essential. A protocol should be in place for re-evaluating cybersecurity measures continually throughout the post-marketing phase, given the evolving landscape of digital threats and vulnerabilities that might compromise the device’s integrity and patient data.
Overall, preserving a robust post-market quality system that encompasses both compliance and adherence to patient safety will enhance the reputability of your digital therapeutic and ensure sustained market presence.