In the increasingly interconnected world of medical device regulation, manufacturers face the daunting task of navigating multiple, often overlapping quality system requirements. For companies targeting both Canada and the United States, the Medical Device Single Audit Program (MDSAP) offers a transformative solution. This program allows a single, recognized auditing organization to conduct one audit that satisfies the regulatory requirements of multiple jurisdictions simultaneously. If you are planning to market devices in Canada and the US, understanding how to check and leverage MDSAP certification can save time, reduce costs, and streamline your compliance strategy.
The core benefit of MDSAP is its ability to replace separate audits for each participating country. Instead of undergoing a Health Canada audit under the Canadian Medical Devices Regulations (CMDR) and a separate US Food and Drug Administration (FDA) inspection under 21 CFR Part 820 (soon to be replaced by ISO 13485-based QMSR), a single MDSAP audit covers both. For Canada, MDSAP is mandatory. Since January 1, 2019, Health Canada requires all medical device manufacturers seeking or maintaining a Medical Device Establishment License (MDEL) or a Medical Device Licence (MDL) to hold a valid MDSAP certificate. For the US, the FDA participates in MDSAP on a voluntary basis, but it is highly recommended. Holding MDSAP certification can significantly reduce the frequency of FDA routine inspections, as the FDA will generally accept MDSAP audit reports in lieu of its own inspections, provided the manufacturer has a satisfactory compliance history.
So, how do you check if your MDSAP certification is valid and covers both Canada and the US? First, you must verify that the certification was issued by an MDSAP-recognized Auditing Organization (AO). Certifying bodies such as BSI, DNV, TÜV SÜD, and others are authorized to conduct these audits. Each certificate should clearly list the participating regulatory authorities for which the audit is valid. When reviewing your certificate, look for the specific marking indicating “Canada – Health Canada” and “United States – FDA”. Some certificates may also include flags or logos representing each accepted authority. Additionally, the certificate must reference the applicable international standard—usually ISO 13485:2016, which serves as the base standard for MDSAP audits, in addition to country-specific regulatory requirements.
To ensure ongoing compliance, you must also check the status of your certificate with the MDSAP online database, which is maintained by the FDA or the Regulatory Authority Council. This database allows manufacturers, importers, and regulators to verify the current status of any MDSAP certificate number. A certificate that is “Suspended” or “Withdrawn” will not be accepted by either Health Canada or the FDA. Furthermore, the audit cycle must be maintained. MDSAP requires an initial full audit, followed by annual surveillance audits, and a recertification audit every three years. Missing a surveillance audit can invalidate your certification for both Canada and the US simultaneously.
For manufacturers already holding separate Certificates of Registration for Canada and the US, transitioning to a single MDSAP audit requires careful planning. You must select an AO that is recognized by all the authorities you need. During the transition audit, the auditor will assess your quality management system against the requirements of ISO 13485, as well as the specific regulatory requirements unique to Canada (such as recall reporting and medical device incident reporting under CMDR) and the US (including premarket notification, establishment registration, and device listing). The audit report will be shared with each participating authority, ensuring unified transparency.
One common pitfall is assuming that MDSAP covers all aspects of US FDA requirements. While it covers quality system regulation (QSR) and many general controls, it does not replace premarket submission requirements (510(k), PMA), nor does it cover the FDA’s Unique Device Identification (UDI) requirements or labeling compliance. Similarly, for Canada, MDSAP does not replace the need for a Medical Device Establishment Licence (MDEL) for importers and distributors, though manufacturers can use the MDSAP certificate to obtain or renew their MDEL.
In conclusion, checking your MDSAP certification for a single audit covering Canada and the US is not just about having a piece of paper. It is about verifying that the certificate is active, issued by a recognized body, explicitly covers both Health Canada and the FDA, and that your ongoing audit schedule is current. By mastering this single audit process, you can eliminate redundant regulatory burden, reduce audit fatigue, and focus resources on innovation and quality improvement. For any medical device manufacturer serious about North American market growth, MDSAP is no longer just an option—it is the strategic backbone of a streamlined global regulatory pathway.