top of page

REGULATORY INTELLIGENCE

Understanding Guidance Documents for Software as a Medical Device in 2026

SaMD, EU MDR, FDA, 8 min read

The Guidance Documents for Software as a Medical Device have become significantly more complex as digital health expands across global markets. In 2026, regulators are intensifying oversight of AI-powered diagnostics, clinical decision support systems, and mobile-based medical applications. For regulatory teams and digital health innovators, understanding these guidance documents is not just about compliance — it is central to market access, patient safety, and brand credibility.

Defining Software as a Medical Device

According to the International Medical Device Regulators Forum, SaMD refers to software intended for medical purposes that performs those purposes independently of hardware medical devices.

  • AI algorithms interpreting MRI scans

  • Mobile applications detecting cardiac arrhythmias

  • Dose calculation software supporting treatment decisions

If software diagnoses, treats, predicts, or prevents disease, it falls within regulatory scope. Wellness tracking applications without medical intent typically do not.

Core International Standards

Three standards form the backbone of SaMD compliance across all major markets:

  • ISO 13485 — Quality Management System requirements. Without certification, SaMD approval in major jurisdictions is unlikely.

  • IEC 62304 — Software development lifecycle controls covering planning, architecture, verification, validation, and maintenance.

  • ISO 14971 — Risk management. Every SaMD malfunction is treated as a potential patient safety hazard under this framework.

Key FDA and EU MDR Guidance in 2026

United States — FDA

Updated Clinical Decision Support guidance clarifies which AI systems qualify as regulated medical devices. The FDA requires structured documentation for 510(k) and De Novo pathways, including software description, hazard analysis, verification reports, and cybersecurity documentation. The AI/ML framework focuses on transparency, real-world performance monitoring, and change control protocols for adaptive algorithms.

European Union — EU MDR Rule 11

Under Medical Device Regulation 2017/745, software influencing clinical decision-making often falls under Class IIa or higher, increasing conformity assessment obligations.

Key requirement — EUDAMED 2026 Full EUDAMED implementation requires manufacturers to register devices and maintain traceability to preserve CE marking status across all EU member states.

How AI Regulatory Intelligence Strengthens SaMD Compliance

Tracking SaMD guidance updates across jurisdictions is resource-intensive. AI-powered regulatory intelligence systems now support real-time monitoring of global regulatory updates, automated impact analysis on technical documentation, and predictive gap assessments against evolving standards — reducing submission delays and enhancing documentation accuracy.

Building a Future-Ready SaMD Strategy

Organizations must align with ISO 13485, IEC 62304, ISO 14971, FDA software guidance, and EU MDR obligations to maintain regulatory readiness. Compliance in 2026 requires integrated quality systems, cybersecurity resilience, structured risk management, and proactive intelligence monitoring.

See It in Practice

Read about it here.

Experience it in a demo.

Every article, guide, and whitepaper on this page describes problems Sphere was built to solve. See how it works on your regulatory landscape.

bottom of page