A U.S. company with a 510(k) in hand usually assumes the Mexico registration under COFEPRIS’s FDA equivalence route is mostly paperwork. It is paperwork. That’s the problem. The technical file rarely stops these dossiers. What stops them is that the U.S. documents don’t agree with each other: a company name spelled one way on the certificate and another on the label, a country missing from a GMP certificate, a contract manufacturer with no notarized quality agreement, a device called three different names across three test reports.
I’m Julio Martinez-Clark, CEO of bioaccess®, the first-in-human CRO for the Americas. We also hold and file device registrations for sponsors after their trials. We have an FDA-equivalence dossier for a powered device and its disposable accessories open right now. So here is what COFEPRIS’s own requirements guide says each U.S. document must show, and where our checklist keeps catching problems before submission.
The short answer
Under the 2010 FDA Equivalence Agreement, COFEPRIS accepts the FDA’s review instead of re-running its own technical evaluation. It still reads every legal document against every other one. Its requirements guide for registrations under the equivalence agreements and the abbreviated pathway says the trade name on the FDA clearance must match the name in the monograph, the label project and the certificate of analysis. The legal name and address of the establishment on that FDA document must also match the manufacturer stated in those same documents. If that address is the manufacturing site, it must match the GMP documents too. Every foreign original needs an apostille, and the guide spells out who issues it. If one link in that chain breaks, expect a prevención (a deficiency letter) rather than a registration.
First decide which legal instrument you are filing under
Mexico now has two reliance routes for FDA-cleared devices. One is the equivalence agreement published in the Diario Oficial de la Federación (DOF) on 26 October 2010 (FDA and Health Canada), with a 2012 agreement adding Japan. The other is the abbreviated regulatory pathway published on 18 July 2025. The COFEPRIS guide says the applicant picks the route on page two of form FF-COFEPRIS-01. Options A to C are the 2010 agreement, D and E the 2012 agreement, and F the 2025 pathway. The documents in the file must match the requirements of the instrument you selected.
That sounds obvious. In practice, we see U.S. teams assemble a pack from an old checklist for one route and file it under the other. Choose the instrument first, then build the document list from that instrument’s table. Our knowledge-base note on the abbreviated pathway for FDA-cleared devices covers how the routes differ.
The five legal documents and what each must show
1. Certificate to Foreign Government (CFG)
The FDA’s CFG is the proof that the device can be sold in the United States. The COFEPRIS guide requires it to be apostilled, and only a competent authority within the U.S. can issue that apostille. It must be an original or a copy certified by a notary in Mexico, and it must be current. It must cover the device’s trade name and its codes and models, the legal manufacturer and/or manufacturing site, and, where relevant, the list of presentation codes. If a model or catalog code you want registered isn’t on the CFG, it isn’t covered.
2. GMP evidence for every establishment that makes the device
For the 2010 FDA route, the guide asks for the FDA Establishment Inspection Report (EIR) from the last inspection of the manufacturing site. It must be specific to that site’s legal name and address. If more than one establishment takes part in manufacturing, each one needs its own EIR. There are alternatives: an inspection report from an MDSAP auditing organization, a current ISO 13485:2016 certificate from an MDSAP-recognized body, or, where FDA never inspected or never gave the site a report, a current ISO 13485 certificate plus an explicit GMP statement in the CFG.
An ISO 13485 certificate used this way must state the manufacturer’s legal name, address, issue date and validity. It must be apostilled in the manufacturer’s country or the certifying body’s country, it must be current, and it must cover the production line(s) of the device being registered.
The March 2025 COFEPRIS guidelines on GMP documents (DOF, 20 March 2025) add the general rules:
- A paper certificate must be an original or a certified copy, complete and legible. A foreign one must be apostilled or legalized by the issuing country (Art. 3).
- An electronically issued certificate doesn’t need an apostille if COFEPRIS can verify it on the issuing authority’s website. You must give the exact access path (Art. 4).
- The certificate must be valid at submission and stay valid for the life of the registration. If it shows no expiry date, COFEPRIS counts 30 months from the inspection date, or from the issue date if the inspection date isn’t shown (Art. 5).
Where this breaks: a certificate shows the company and street address but not the country, while the CFG states “United States of America.” Ask the certifying body to reissue it with the country before you apostille it. A clarification letter is a fallback, and accepting it is up to COFEPRIS. The other common gap is the contract manufacturer or component supplier. If the dossier names that site as a manufacturer, it needs its own apostilled GMP evidence.
3. The FDA clearance itself
This is the 510(k) letter for Class II, the PMA approval for Class III, or the establishment registration and listing showing “510(k) exempt” status for Class I. It is apostilled by a U.S. competent authority. This is where the guide’s matching rules sit. The trade name on the FDA document must match the monograph, label project and certificate of analysis. The legal name and address of the establishment on it must match the manufacturer named in those documents, and where that address is the manufacturing site, it must match the GMP documents.
If the company changed its name or moved after clearance, deal with that before you file. Don’t leave a reviewer to work it out.
4. Letter of representation
You need this when the device isn’t made by the Mexican applicant’s parent, subsidiary or affiliate. It must be issued by the foreign legal manufacturer to the company applying in Mexico, granting marketing and distribution rights. It must be an original or a certified copy, apostilled or legalized by a Mexican consul in the country of origin. If you want more than one distributor named, each needs its own letter. In practice, the letter goes back and forth on wording, then gets notarized, apostilled and couriered. That is several weeks of calendar time, so start it on day one. Who holds the registration is a separate decision with long consequences. See who should be your COFEPRIS registration holder.
5. Quality or contract-manufacturing agreement
If a manufacturer is subcontracted and isn’t an affiliate, the COFEPRIS guide asks for the quality agreement or contract-manufacturing (maquila) agreement. It is the legal document showing the relationship between the manufacturers and their responsibilities for regulatory compliance and product quality, notarized at origin. Only the part that sets out the manufacturing relationship and quality or supply responsibilities needs to be submitted. Two things stop these: a signature block missing a party’s name, title or signature, and a supplier quality agreement that was signed but never notarized.
Technical documents: same device, same name, same evidence
- Certificate of analysis (or equivalent). It must come from the person responsible for quality, on company letterhead, and give the parameters tested and the results by lot or serial number. A device history record or final inspection report can stand in. It must show at least the device name or code, lot or serial number, date of manufacture, and the acceptance results.
- Electrical safety. For powered equipment, the guide asks for a certificate of conformity with summaries of the test reports (CB, UL, IEC 60601 safety, EMC and the device-specific particular standards). If those reports name the device by an internal project code, an older model name or an OEM name, write a manufacturer letter linking each name to the registered trade name and models. That letter costs a day. A deficiency letter costs months.
- Model list. The technical description must list every model, presentation and accessory you want on the registration, with a description and code for each. Accessories left off the list are not covered.
- Spanish IFU and label project. These must be in Spanish to the minimum content the guide lists. Our post on COFEPRIS language requirements and NOM-137-SSA1-2025 covers what must be in Spanish and who translates it.
Labels: date of manufacture vs serial number
NOM-137-SSA1-2025, Mexico’s device labeling standard, requires the date of manufacture (5.10.5). The date may be part of the lot or serial number, as long as the date is clearly identifiable. It also requires the lot or serial number on the packaging, with a clear legend or the standard symbol (5.10.6). Many U.S. capital devices carry only a serial number that encodes the build date in a way nobody outside the factory can read. You can add the date to the label. Or you can file a manufacturer letter explaining how the date is encoded in the serial number, so a reviewer can find it. Check the primary and pouch labels of disposables for the same gaps: product name, the manufacturer’s correct address and date of manufacture.
A pre-submission consistency check we run
- Pick one “master” spelling of the legal manufacturer’s name and address, including the country. Check every document against it: CFG, FDA clearance, EIR or ISO certificate, letter of representation, CoA, labels and IFU.
- List every establishment that will appear in the dossier. Confirm each has current GMP evidence that covers the right production line and is apostilled (or verifiable online).
- For each subcontracted, non-affiliate manufacturer, confirm the quality or maquila agreement is fully signed and notarized.
- Map every model and catalog code on the requested registration to the CFG and the technical model list.
- Map every device name used in test reports to the trade name, with a manufacturer letter where they differ.
- Confirm each label shows a readable date of manufacture and a lot or serial number with the right legend or symbol.
- Check validity dates. A certificate that expires during COFEPRIS review is a problem you can see coming.
- Book the courier. Apostilled originals have to physically reach Mexico.
Bottom line
The FDA equivalence route spares you COFEPRIS’s full technical review. It doesn’t spare you COFEPRIS reading your U.S. documents against each other. Most delays we see come from names, addresses, countries, models and signatures that don’t line up across the CFG, the GMP evidence, the FDA clearance, the letter of representation and the labels. Fix those before you file, and the reliance route works the way it was designed to.
Planning a Mexico launch after FDA clearance, or a first-in-human study that leads to one? Start with our COFEPRIS registration checklist. The Mexico COFEPRIS market access page explains how we hold the registration independently of your distributor. If you change distributors later, read changing the distributor or importer on a COFEPRIS registration.
Sources: COFEPRIS, Guía de requisitos para el trámite de Registro Sanitario de Dispositivos Médicos mediante Acuerdos de Equivalencia y vía Regulatoria Abreviada (June 2026 version), requirements 3.1–3.4, 2.2, 1.5 and 1.7 and the FF-COFEPRIS-01 route options; Secretaría de Salud, Lineamientos para la presentación de documentos que garanticen buenas prácticas de fabricación (DOF, 20 March 2025), Arts. 2 (XVII–XVIII), 3, 4, 5 and 15; Acuerdo de equivalencia FDA/Health Canada (DOF, 26 October 2010); NOM-137-SSA1-2025, Etiquetado de dispositivos médicos, 5.10.5–5.10.6. This article is general regulatory information, not legal advice. Confirm current requirements with COFEPRIS before filing.