# FDA regulatory compliance for medical devices and software

> FDA regulatory compliance counsel for medical device and SaMD companies. Premarket strategy, registration, quality systems and post-market work, quoted flat.

Page: https://arapackelaw.com/fda-regulatory-compliance/  
Title: FDA Regulatory Compliance for Medical Devices | Rapacke Law Group  
Breadcrumb: [Home](https://arapackelaw.com/) / [Startup legal services](https://arapackelaw.com/startups/) / [FDA regulatory compliance](https://arapackelaw.com/fda-regulatory-compliance/)

FDA counsel for medical device, medical software and wearable companies, from the premarket pathway to quality systems and post-market duties, planned alongside your patents.

- Flat fee, quoted before work begins
- No hourly billing
- Regulatory and patent work in one firm

## For companies bringing a medical product to market.

FDA compliance decides when you can sell in the US, and investors look at the regulatory plan as closely as the patents. Getting the pathway right early avoids delays, recalls and redesigns later.

- **Medical device startups** A first device headed for 510(k), De Novo or PMA review, with a plan investors can follow.
- **Software as a medical device** Apps, algorithms and AI that inform a diagnosis or treatment decision.
- **Wearables** Devices that sit between consumer electronics and medical regulation.
- **Established device makers** Registration, quality system and post-market obligations as the product line grows.

## From pathway to post-market.

The firm’s FDA regulatory compliance work covers the whole life of a device. We do not promise clearance or approval, and no one honestly can.

### What we help with

- **Premarket submission strategy** Choosing and preparing a 510(k), De Novo or PMA submission, including clinical trial strategy and answers to FDA requests for more information.
- **SaMD and wearables** Classification, software validation and documentation, cybersecurity and interoperability.
- **Registration and listing** Initial establishment registration, annual renewals and device listing updates, including foreign establishments.
- **Quality system and post-market** Gap analysis, quality documentation, inspection preparation, complaint handling, reporting and recalls.

### Gaps we look for

- **A device in the wrong class** Which sets the wrong pathway, timeline and budget.
- **A predicate that does not fit** A 510(k) built on a device that is not substantially equivalent.
- **Design controls added late** Documentation reconstructed after the design is done.
- **Disclosure before the patent** A public submission, trial listing or demo before the invention is filed.

Regulatory filings and patents run on separate clocks. We plan both so the patent application is on file before anything becomes public.

## How FDA regulates medical devices.

FDA regulatory compliance for a medical device starts with its classification. FDA sorts devices into three classes by risk, and the class largely decides which premarket pathway applies and how much evidence the agency expects.

*FDA medical device classes*

| Class | Risk | Usual pathway |
| --- | --- | --- |
| **Class I** | Low, such as many hand tools and bandages | Most are exempt from premarket notification but still follow general controls |
| **Class II** | Moderate, such as many monitors, pumps and diagnostic software | Most need a 510(k) |
| **Class III** | High, such as implants that sustain life | Generally premarket approval (PMA) |

### 510(k), De Novo or PMA

*FDA premarket pathways compared*

| Pathway | When it fits | What it shows |
| --- | --- | --- |
| **510(k) premarket notification** | A similar legally marketed device (a predicate) exists | Substantial equivalence to the predicate |
| **De Novo request** | A novel device of low to moderate risk with no predicate | Reasonable assurance of safety and effectiveness, and a new classification |
| **Premarket approval (PMA)** | A high-risk Class III device | Safety and effectiveness, usually with clinical data |

For a 510(k), choosing the predicate is the central decision, and the submission argues equivalence to it. For a De Novo, the submission has to show the device is safe and effective on its own. A PMA usually needs clinical trial data, so the trial design matters as much as the filing.

Medical device startups also have to time patents against these filings. Read [IP and FDA regulatory strategies often go hand in hand](https://arapackelaw.com/patents/medical-device/ip-fda-regulatory-strategies/), and see our [medical device patent](https://arapackelaw.com/patents/medical-device-patents/) page.

## Software as a medical device and wearables.

Software can be a medical device on its own, with no hardware at all. Whether it is depends on its intended use, the claims you make about it, not on the code.

### Is your software a medical device?

Software intended to diagnose, treat, cure, mitigate or prevent a disease is generally a device. Since the 21st Century Cures Act of 2016, some software functions are excluded, such as administrative tools, general wellness apps, electronic health records and certain clinical decision support that lets a clinician independently review the basis for a recommendation. More on [when software becomes a medical device](https://arapackelaw.com/saas-startups/when-does-software-become-a-medical-device/).

### What we help SaMD companies with

- **Classification.** Determining the regulatory classification from the intended use and risk level.
- **Validation and documentation.** Guidance on software validation and the documentation FDA expects.
- **Cybersecurity and interoperability.** Devices that connect to the internet and meet the definition of a cyber device have to include cybersecurity information in premarket submissions under section 524B of the FD&C Act, in effect since March 2023.
- **Digital health guidance.** Keeping the product in line with FDA’s current guidance on digital health technologies.

### Wearables

Wearables sit where consumer electronics meet device regulation. The firm’s work here covers usability outside a clinic, data privacy and security, integration with mobile health platforms and electronic health records, and continuous monitoring and data management. Patient data also raises the questions on our [privacy and data protection](https://arapackelaw.com/privacy-and-data-protection/) page.

## What FDA expects after the submission.

Compliance does not end with clearance or approval. Three sets of obligations follow the device for its whole life.

### Establishment registration and device listing

Establishments that make or distribute devices for the US generally register with FDA and list their devices, and renew each year between October 1 and December 31. Foreign establishments also name a US agent. We help determine what your business activities require, prepare initial registrations and annual renewals, and keep device listings current.

### Quality management system

FDA’s quality system rule is now the Quality Management System Regulation (QMSR). Since February 2, 2026, it incorporates the international standard ISO 13485:2016. The firm’s work includes gap analysis of an existing quality system, quality manual, procedures and forms, guidance on design controls, process validation and risk management, and preparation for FDA inspections, including mock audits.

### Post-market surveillance

After launch, manufacturers handle complaints, report certain adverse events to FDA through Medical Device Reporting, and manage corrections and recalls. We help build complaint handling and reporting systems, plan post-market clinical follow-up studies, assist with recalls and field safety corrective actions, and set up monitoring of real-world performance for SaMD and wearables.

> **General information**
>
> This page explains how FDA regulation generally works. Whether a rule applies to your device depends on its intended use and design, which is what your strategy call is for.

## One flat fee, quoted before work begins.

There is no hourly billing. Your FDA regulatory work is quoted as a flat fee on your strategy call, once the scope is clear, and nothing starts until you approve it.

What sets the fee is the work itself, not the time on the clock.

- **The device and its class.** A Class I listing is a different job from a PMA.
- **The deliverable.** A pathway strategy, a submission, a registration, a quality system review or post-market support.
- **What already exists.** Testing, documentation and quality records you have in place.

Ongoing work for a growing company can run on a monthly [Fractional IP Counsel](https://arapackelaw.com/counsel-on-demand/) plan instead of one fee per document. This service is not covered by The RLG Guarantee, which applies to patentability searches, provisional patents, design patents and trademarks.

## From first call to a regulatory plan.

What happens at each step and who does the work. FDA review times are set by the agency and are never a promised date.

1. **Strategy call** (Day one). Free. Walk us through the deal, the documents or the problem.
2. **Scope and flat fee** (Flat fee). What the work covers and its price, in writing, before it begins.
3. **Classification and pathway**. Intended use, class and the pathway that fits.
4. **Documents and submission**. We prepare or review what FDA will see, with you approving it.
5. **Ongoing compliance**. Registration, quality system and post-market duties as you grow.

## Questions about FDA regulatory compliance.

### What does FDA regulatory compliance mean for a medical device?

Meeting FDA’s requirements to market and keep selling a device in the US. That includes the right premarket pathway, establishment registration and device listing, a quality management system, labeling, and post-market duties such as complaint handling, adverse event reporting and recalls.

### Is my software a medical device?

It depends on its intended use. Software meant to diagnose, treat, mitigate or prevent disease is generally a device, even without hardware. Some functions, such as general wellness apps, administrative tools and certain clinical decision support, are excluded. Classification is the first thing we look at on your call.

### What is the difference between a 510(k), De Novo and PMA?

A 510(k) shows your device is substantially equivalent to a legally marketed predicate. A De Novo request is for a novel low to moderate risk device with no predicate. A PMA is for high-risk Class III devices and usually needs clinical data.

### Do I need to register with FDA?

Most establishments that make or distribute devices for the US must register and list their devices, and renew every year between October 1 and December 31. Foreign establishments also name a US agent. Some activities are exempt, which we check for you.

### What is the QMSR?

The Quality Management System Regulation, FDA’s updated quality rule for device makers. Since February 2, 2026, it incorporates ISO 13485:2016, so companies built around the old Quality System Regulation may need to update their procedures.

### Can you guarantee FDA clearance or approval?

No. FDA decides, and no one can honestly promise an outcome. What we can do is help choose the right pathway, prepare a complete submission and respond to the agency’s questions.

### Should I file a patent before my FDA submission?

Usually, yes. A De Novo or PMA decision summary, a clinical trial listing or a public demo can disclose the invention. Filing the patent application first, often as a provisional, protects it before anything becomes public.

### How much does FDA regulatory compliance work cost?

With us it is a flat fee, quoted on your strategy call before any work begins. It depends on the device, its class, the deliverable and what documentation already exists. FDA’s own user fees are separate and set by the agency.

## More in Startup legal services

- [Startup legal services](https://arapackelaw.com/startups/)
- [Business formation and structure](https://arapackelaw.com/business-formation-and-structure/)
- [Contracts and agreements](https://arapackelaw.com/contracts-agreements/)
- [Cease and desist letters](https://arapackelaw.com/cease-desist-letters/)
- [Fractional IP counsel](https://arapackelaw.com/counsel-on-demand/)
- [Fundraising agreements](https://arapackelaw.com/fundraising-agreements/)
- [IP licensing agreements](https://arapackelaw.com/intellectual-property-licensing-agreements/)
- [Non-disclosure agreements](https://arapackelaw.com/non-disclosure-agreements-ndas/)
- [Privacy and data protection](https://arapackelaw.com/privacy-and-data-protection/)
- [Technology transfer agreements](https://arapackelaw.com/technology-transfer-agreements/)

## Go deeper on MedTech and FDA.

- [When Does Software Become A Medical Device?](https://arapackelaw.com/saas-startups/when-does-software-become-a-medical-device/)
- [IP and FDA Regulatory Strategies Often Go Hand-In-Hand](https://arapackelaw.com/patents/medical-device/ip-fda-regulatory-strategies/)
- [How IP Assets Can Help Med Device Startups Raise VC Funding](https://arapackelaw.com/patents/how-ip-helps-med-device-startups-raise-vc-funding/)

[All medical device articles](https://arapackelaw.com/category/patents/medical-device/)

## Next steps

- [Book a free strategy call](https://arapackelaw.com/contact-us/) with a registered patent attorney, or call (954) 951-0154
- [Take the Intelligent IP Quiz](https://arapackelaw.com/intelligent-ip-quiz/) to see what to protect first
- [The RLG Guarantee](https://arapackelaw.com/rlg-guarantee/), the refund promise on four services

General information, not legal advice.