How to Secure NMPA Approval in China: 2026 Guide for Foreign Businesses
Securing NMPA approval for digital health products in China requires a 24-to-36-month process for Class III devices, with a first-attempt rejection rate of approximately 35% as of 2025. The National Medical Products Administration (国家药品监督管理局, NMPA, guójiā yàopǐn jiāndū guǎnlǐ jú) regulates all medical devices—including software-as-a-medical-device (SaMD), AI diagnostic tools, and digital therapeutics—under a risk-based classification system. For foreign companies, the pathway involves a locally registered entity, a China-specific clinical evaluation, and a quality management system audit. This 2026 guide walks through each step, from classification to post-market compliance, with concrete numbers, timelines, and decision frameworks tailored to digital health innovators.
1. Understanding the NMPA Classification System for Digital Health Products
The NMPA categorizes digital health products into three classes based on risk: Class I (low risk, notification only), Class II (moderate risk, provincial registration), and Class III (high risk, national registration). For software products, classification depends on the intended use and the criticality of the data processed. In 2024, the NMPA issued a supplemental guideline specifically for AI medical software (人工智能医疗器械, AI medical device, réngōng zhìnéng yīliáo qìxiè), further clarifying that autonomous diagnostic algorithms (e.g., AI for retinal screening) fall into Class III, while decision-support tools (e.g., AI that flags abnormal lab values) are often Class II.
Class I digital health products—such as simple health tracking apps with no diagnostic claims—require only a filing (备案, bèi’àn) with local authorities. The process takes 1–3 months and costs approximately 30,000–50,000 RMB. However, the NMPA has tightened definitions: if an app generates clinical recommendations based on patient data, it automatically moves to Class II or III. Class II products—like telemedicine platforms that support remote diagnosis—require provincial NMPA review, a quality system certificate (ISO 13485 or China-specific QMS), and a clinical evaluation report. Timeline: 12–18 months. Cost: 300,000–800,000 RMB. Class III products—including AI-based diagnostic software, digital therapeutics, and implant-associated software—require national NMPA review, full clinical trials (often multi-center), and a QMS audit by an accredited body. Timeline: 24–36 months. Cost: 1,500,000–3,000,000 RMB.
| Classification | Risk Level | Example Product | Approval Type | Timeline (months) | Estimated Cost (RMB) | Clinical Data Required |
|---|---|---|---|---|---|---|
| Class I | Low | Wellness app (no diagnostic claim) | Filing (备案) | 1–3 | 30,000–50,000 | None |
| Class II | Moderate | Telemedicine platform with remote diagnosis | Provincial registration | 12–18 | 300,000–800,000 | Clinical evaluation report (literature + data) |
| Class III | High | AI-based diagnostic software (e.g., retinal screening) | National registration | 24–36 | 1,500,000–3,000,000 | Full clinical trial (multi-center, ≥200 patients) |
Decision Framework: If your product is a general wellness app with no medical claims and no data integration with hospital systems, choose Class I filing. If your product analyzes patient data and provides clinical decision support (but not autonomous diagnosis), choose Class II registration. If your product autonomously diagnoses, triages, or recommends treatment, choose Class III registration. Misclassification is the most common cause of delays—over 20% of first submissions are returned for incorrect classification.
2. The NMPA Approval Pathway: Step-by-Step for 2026
The NMPA approval process for digital health products consists of six stages. In 2025, the NMPA introduced an optional “priority review” pathway for innovative digital therapeutics and AI software that demonstrate significant clinical benefit. Priority review can cut the review timeline by 30–50%, but requires a special application with preliminary clinical evidence. Here is the step-by-step pathway for 2026:
- Entity registration in China. Foreign companies must establish a wholly foreign-owned enterprise (外商独资企业, WFOE, wàishāng dúzī qǐyè) or appoint a Chinese agent (代理人, dàilǐrén) to act as the legal applicant. The WFOE should hold the medical device registration certificate. Typical timeline: 2–4 months.
- Classification determination. Submit a product description and intended use statement to the NMPA classification center. In 2025, the NMPA introduced an online pre-classification tool that provides an initial classification within 10 business days. Timeline: 2 weeks–1 month.
- Quality management system (QMS) certification. Digital health products require ISO 13485 certification or China’s equivalent (医疗器械质量管理体系, yīliáo qìxiè zhìliàng guǎnlǐ tǐxì). For Class III products, the NMPA requires an on-site audit of the manufacturing site—including software development facilities—by an accredited body such as TÜV SÜD or BSI. Timeline: 6–12 months.
- Clinical evaluation. For Class II products, a clinical evaluation report based on published literature and, if needed, a small clinical study (50–100 patients) is sufficient. For Class III products, a formal clinical trial conducted in China is mandatory. The trial must follow China’s Good Clinical Practice (GCP) guidelines and be registered in the Chinese Clinical Trial Registry. Timeline: 12–24 months for Class III.
- Registration submission. Prepare and submit the registration dossier—including product technical documentation, QMS certificates, clinical evaluation report, and labeling—through the NMPA’s online portal. The NMPA then conducts a technical review (90–120 working days for Class III) and may issue deficiency notices requiring additional data. Timeline: 4–8 months for review.
- Certificate issuance and post-market compliance. After approval, the NMPA issues a Medical Device Registration Certificate valid for 5 years. Post-market requirements include adverse event reporting, product changes notification, and renewal submission 6 months before expiry. Ongoing.
Decision Framework: If your product is a Class II digital health tool with strong published clinical evidence (e.g., a decision-support AI for radiology), choose a clinical evaluation report (pathway steps 1–3 and 5–6, skipping full trial). If your product is a Class III autonomous AI diagnostic system with no prior approval in China, choose the full pathway with a multi-center clinical trial. For innovative products, apply for priority review early—up to 40% of eligible applications were rejected in 2025 due to insufficient preliminary data.
3. Clinical Evaluation Requirements for Digital Health and AI Software
The NMPA’s clinical evaluation guidelines for digital health products—updated in January 2025—require foreign companies to demonstrate safety and efficacy in the Chinese population. For AI software, this means the algorithm must be validated on Chinese patient data, including ethnic diversity, disease prevalence, and healthcare settings. The NMPA does not accept overseas clinical trial data alone; a bridging study is mandatory. The required sample size for Class III AI software is typically ≥200 patients per indication, with at least 10% from minority ethnic groups if the algorithm is intended for broad use.
Key timelines for clinical evaluation in 2026: The average time from trial initiation to final report submission is 18 months for Class III AI software. However, if the product uses a validated algorithm (e.g., FDA-cleared AI) and the bridging study only requires 100 patients, the timeline can shorten to 12 months. In 2025, the NMPA accepted real-world data (RWD) from Chinese hospitals as supplementary evidence for Class II products—a significant update that reduced reliance on traditional trials. For Class III, RWD can support the clinical evaluation but does not replace the mandatory trial.
Pitfall 1: Inadequate Clinical Data for AI/ML Algorithms
Decision Framework: If your product is a Class II digital health app with low clinical risk and strong overseas validation, choose a clinical evaluation report + a small (50–100 patient) Chinese bridging study. If your product is a Class III AI diagnostic system, choose a full multi-center trial in China with ≥200 patients. For AI software that uses continuous learning (i.e., algorithm updates), the NMPA requires a separate approval for each major iteration, so plan for modular approvals.
4. Post-Market Surveillance and Ongoing Compliance
After NMPA approval, foreign companies must comply with China’s Medical Device Adverse Event Monitoring and Re-evaluation Regulation (2024 revision). Digital health products require a dedicated adverse event reporting system—both for hardware malfunctions and software errors (e.g., false positives, false negatives). The NMPA expects quarterly reports for Class II and monthly reports for Class III during the first year of commercialization. In 2025, the NMPA launched a pilot program for 24/7 digital health monitoring, requiring AI products to have a “safety switch” that can disable the algorithm if an adverse event cluster is detected.
Renewal and modifications. The registration certificate is valid for 5 years. Renewal must be initiated 6 months before expiry. Any modification to the software—including algorithm changes, user interface updates, or new clinical indications—may require a separate filing or approval, depending on the risk. In 2025, the NMPA introduced a “minor change notification” pathway (minor changes reported within 60 days) and a “major change approval” pathway (full review required). For AI software, a change that affects the algorithm’s performance (e.g., a new training dataset) is always classified as a major change.
Pitfall 2: Not Using a Chinese Entity or Correct Legal Representative
Pitfall 3: Misclassification of Digital Health Software
NEXT STEPS
- Download our NMPA Classification Guide for Digital Health – A 15-page reference covering all software categories, with self-assessment checklist to determine your product’s class.
- Read our China Clinical Trial Strategy for 2026 – Learn how to design a bridging study that meets NMPA requirements while reducing time and cost by up to 40%.
- Use our China Market Entry Checklist for Digital Health – A step-by-step timeline with milestones, budget estimates, and regulatory contacts for foreign digital health companies.
— China Gateway 360 —
Remote China market entry support, built around execution.
