Arjun Mehta had been manufacturing examination gloves and elastic bandages from his Pune facility for six years. His products were in demand. His operations were clean. His staff were experienced. But when a hospital procurement tender required CDSCO-registered suppliers, Arjun discovered a problem — the pile of documents he had assumed covered his regulatory obligations didn't include a valid MD5 manufacturing license. His application had lapsed three years earlier without a retention fee payment. The tender window closed in ten days. He lost the contract.
Two months later, with his MD5 license reinstated and his documentation organised into a proper technical dossier, Arjun bid on the next tender. He won it. Then the one after that. The MD5 manufacturing license, he realised, was not a bureaucratic formality — it was the foundation on which his entire commercial operation depended.
📑 Quick Navigation
- What Is the CDSCO MD5 Manufacturing License?
- Class A and B Devices — Understanding the Classification
- Form MD3 and the State Licensing Authority Pathway
- Complete Documentation Checklist
- 7-Step MD5 License Application Process
- License Validity and Retention Requirements
- Common Application Errors and How to Avoid Them
- Frequently Asked Questions
What Is the CDSCO MD5 Manufacturing License?
The CDSCO MD5 manufacturing license is the legal authorisation issued to companies that manufacture Class A and Class B medical devices for sale and distribution in India. It is mandated under the Medical Devices Rules, 2017 (MDR 2017), which brought the entirety of India's medical device manufacturing sector under a unified risk-based regulatory framework administered by the Central Drugs Standard Control Organisation (CDSCO).
Without this license, no entity may legally manufacture, sell, stock, exhibit, or distribute Class A or Class B medical devices in India. The consequences of operating without it extend to seizure of goods, financial penalties, and potential criminal liability under the Drugs and Cosmetics Act.
Who Needs an MD5 License?
Every manufacturer of Class A or Class B medical devices operating in India requires an MD5 license before commencing commercial production. This applies regardless of the scale of operations — whether you are a large-scale facility producing millions of units annually or a small unit producing specialised devices for a regional market. The regulatory obligation is identical, and it falls on the manufacturer, not the distributor or the end buyer.
Class A and B Devices — Understanding the Classification
Before you file a single document, you need to establish with certainty which device class your product belongs to. Your classification determines your license type, your application form, the authority you apply to, the documents you need, and the intensity of scrutiny your application will face. Getting this wrong at the start adds weeks or months to your timeline.
CDSCO classifies all medical devices into four risk-based categories under MDR 2017. The MD5 license covers the two lowest-risk classes:
| Class | Risk Level | Representative Examples | Regulatory Oversight |
|---|---|---|---|
| A | Low risk | Examination gloves, elastic bandages, hot water bags, walking aids, tongue depressors, sphygmomanometers | State Licensing Authority — MD5 license |
| B | Low to moderate risk | Syringes, nebulizers, glucometers, basic surgical instruments, hearing aids, ophthalmic frames | State Licensing Authority — MD5 license |
The Importance of the CDSCO Classification List
CDSCO maintains a published classification list for notified medical devices. If your device appears on this list, its classification is prescribed. If it does not appear, you need to apply the classification principles in Schedule I of MDR 2017 to determine the appropriate class. Many manufacturers benefit from a classification confirmation opinion from a regulatory affairs consultant before filing, particularly for devices with features that could straddle two classes — a glucometer with wireless data transmission, for instance, or a diagnostic device with software decision support.
Form MD3 and the State Licensing Authority Pathway
The MD5 license pathway runs entirely through the State Licensing Authority of the state where your manufacturing facility is located. This is not a CDSCO Delhi application — it is a state-level process, administered by the SLA of your state, though the application is submitted digitally through CDSCO's national SUGAM portal.
Complete Documentation Checklist
Documentation quality is the primary variable determining how quickly your MD5 application progresses. Applications with complete, consistent, and well-structured documentation move through SLA review efficiently. Applications with gaps, inconsistencies, or missing technical details generate queries that extend timelines by weeks — and in some cases, trigger rejection and resubmission cycles.
Invest the time upfront to prepare every document correctly. This is not the stage to cut corners.
Core Documents for All MD5 Applications
- Covering letter addressed to the State Licensing Authority with complete application details
- Identity proof of the organisation — UDYAM Aadhaar, PAN card, Certificate of Incorporation, or equivalent
- Proof of premises — Sale Deed or Rent Deed establishing legal occupation of the manufacturing facility
- Building layout plan — dimensioned drawings of each room, location of equipment, and flow patterns for materials and personnel
- Plant Master File — comprehensive description of the manufacturing facility, utilities, environmental controls, and infrastructure
- Device Master File — full technical specifications, design history, manufacturing process description, and finished device testing protocols
- Essential Principles Checklist — aligned with the requirements under MDR 2017 and the relevant Indian or international standards
- Risk Management File — compliant with ISO 14971, covering hazard identification, risk estimation, risk evaluation, and risk control
- ISO 13485 certificate — valid, in-scope for the device category, and issued by a recognised certification body
- Qualification and competency documentation for manufacturing and testing personnel
- Audit report from a recognised testing laboratory or notified body
- Certificate of Analysis for three consecutive batches — demonstrating that production meets quality specifications under actual manufacturing conditions
- Environmental compliance documents — applicable where the manufacturing process has environmental regulatory implications
- Fee payment receipt (challan) — generated through the SUGAM portal at the time of application
Additional Document for Test License Applicants
If you intend to conduct device testing as part of the MD5 application or as a prerequisite to commercial launch, a CDSCO Medical Device Test License (Form MD13) may be required. This applies where your facility will test devices prior to their first commercial distribution. Confirm with your regulatory consultant whether a test license is necessary for your specific device and testing scope.
7-Step MD5 License Application Process
Here is the complete process from your initial classification decision through to license receipt — with the specific actions at each stage that determine how efficiently your application progresses.
Establish with certainty that your device is Class A or Class B under MDR 2017. Cross-reference the CDSCO notified device list and apply the Schedule I classification principles where necessary. If any ambiguity exists, obtain a formal classification opinion from a regulatory specialist before proceeding. This single step determines your entire regulatory pathway.
Compile your complete documentation package — ISO 13485 certificate, ISO 14971 risk management file, Essential Principles Checklist, Plant Master File, Device Master File, three-batch Certificate of Analysis, and all supporting evidence of manufacturing competence and environmental compliance. Do not begin your SUGAM application until every document is ready and internally reviewed.
SUGAM is the CDSCO national online portal through which all MD5 applications are submitted. Create your manufacturer account if you do not already have one, verify your contact details, and familiarise yourself with the Form MD3 application structure before entering any data. Errors in portal registration can cause delays that cascade through the entire process.
Fill Form MD3 with complete accuracy. Every field must be consistent with your supporting documents — facility address, device name, device class, and manufacturer details must match exactly. Pay the prescribed application fee digitally through SUGAM and upload all documents in the correct format and naming convention as required by the portal. Review the portal checklist before final submission.
The State Licensing Authority reviews your submitted application and technical dossier. The SLA may conduct a desk review for Class A devices or may escalate to a facility inspection for Class B or borderline Class A devices, depending on the device type and local SLA practice. Monitor your SUGAM application status and ensure your contact details are current so you receive any SLA communications promptly.
The SLA may raise queries on documentation, technical specifications, facility details, or labelling compliance. Respond to every query promptly, comprehensively, and accurately. Slow query responses are the single most common reason for extended MD5 application timelines. Designate a regulatory point of contact who monitors SUGAM daily during the active review period.
On successful review, the State Licensing Authority issues your MD5 manufacturing license. Verify all details on the license — facility address, device name, device class, and license number — against your application before commencing any commercial manufacturing activity. File the original license securely and maintain a certified copy at your manufacturing facility.
License Validity and Retention Requirements
One of the most important — and frequently overlooked — aspects of the MD5 manufacturing license is its ongoing maintenance requirement. Understanding this at the outset prevents the kind of lapse that cost Arjun his hospital tender.
Indefinite Validity with Periodic Retention Fee
The CDSCO MD5 manufacturing license does not carry a fixed expiry date. Once granted, it remains valid indefinitely — but this permanence is conditional. A license retention fee must be paid to the State Licensing Authority every five years from the date of issue. Failure to pay this fee allows the license to lapse, converting what was a minor administrative requirement into a potentially significant commercial disruption.
Conditions That Can Affect License Validity
Beyond the retention fee requirement, your MD5 license can be suspended or cancelled by the SLA in specific circumstances — including failure to maintain ISO 13485 certification, manufacturing conditions that no longer comply with the approved Plant Master File, serious adverse event reporting failures, or the manufacture of devices not covered by the license scope. Ongoing compliance is not optional; it is a condition of the license itself.
Common Application Errors and How to Avoid Them
Rego Services has supported dozens of Class A and B manufacturers through the MD5 application process. The errors that delay applications are consistent and entirely predictable.
| Common Error | Impact | Prevention |
|---|---|---|
| ISO 13485 certificate scope doesn't cover the device being licensed | Immediate SLA query — application halted | Verify ISO 13485 scope explicitly before filing |
| Building layout missing dimensions or equipment locations | SLA query — revised layout required | Use a professional draftsperson for layout preparation |
| Device Master File incomplete — no manufacturing process description | SLA query — supplementary submission required | Use the DMF template and complete every section |
| Facility address on application doesn't match lease deed | Application rejection — resubmission required | Cross-check all address fields against source documents |
| Risk management file referencing ISO 14971:2007 instead of current version | SLA query — updated documentation required | Ensure all standards references are to current editions |
| Three-batch Certificate of Analysis based on pre-production samples | SLA rejection — CoA must cover actual production batches | Confirm batch status with QC team before including CoA |
Frequently Asked Questions
Is the MD5 license mandatory for all Class A device manufacturers?
Yes, with one narrow exception. Class A non-sterile, non-measuring medical devices that are not notified under MDR 2017 require a Class A registration rather than an MD5 license. All other Class A device manufacturers — including those producing sterile Class A devices, measuring Class A devices, or any Class A device listed in the MDR 2017 notification schedule — require the MD5 manufacturing license.
Can one MD5 license cover multiple devices?
Yes. A single MD5 license can cover multiple Class A and Class B devices manufactured at the same facility, subject to the SLA's assessment of the facility's capability and the technical dossiers submitted for each device. Each device covered by the license must be listed on the license document, and the license scope must be updated through a variation process if new devices are added after initial grant.
What happens if I change my manufacturing facility address?
Any change to the licensed premises requires a variation application to the State Licensing Authority. You cannot legally manufacture at a new address under your existing MD5 license until the variation is approved and the license is updated. Operating from an unlicensed premises — even temporarily during a relocation — constitutes a violation of MDR 2017.
Do I need a separate license if I manufacture both Class A and Class C devices?
Yes. Class A and B devices are covered under MD5. Class C and D devices require an MD9 manufacturing license, applied for through Form MD7 and processed by CDSCO at the central level rather than the SLA. Manufacturers producing devices across multiple classes must hold the relevant license for each class they manufacture.
How long does the MD5 application process typically take in 2026?
Processing times vary by state and depend heavily on the completeness of your application. Well-prepared applications for Class A devices typically complete the SLA review process within four to eight weeks. Class B applications, which may involve more detailed technical review and in some cases facility inspection, typically take six to twelve weeks. Incomplete applications or those generating multiple SLA queries can extend well beyond these timeframes.
✓ Key Takeaways
- The CDSCO MD5 license is the mandatory manufacturing authorisation for all Class A and Class B medical device manufacturers in India under MDR 2017
- Applications are filed via Form MD3 on the SUGAM portal and processed by the State Licensing Authority — not CDSCO centrally
- Correct device classification is the foundation of the entire process — ambiguity should be resolved before filing, not during review
- The MD5 license has no fixed expiry but requires a retention fee payment every five years — failure to pay causes the license to lapse
- ISO 13485 certification must explicitly cover the device category being licensed — check the scope before filing
- The three-batch Certificate of Analysis must cover actual production batches, not pre-production or development samples
- A single MD5 license can cover multiple Class A and B devices at one facility — list all devices at the time of application
- Any change to licensed premises, device scope, or key personnel requires a formal variation application to the SLA
Your Next Step
The CDSCO MD5 manufacturing license is the threshold between a business that can sell to hospitals, tender for government contracts, and access export markets — and one that cannot. The process is demanding, but it is entirely navigable for manufacturers who approach it with accurate information, complete documentation, and sufficient lead time.
The manufacturers who encounter delays are, in almost every case, those who begin with an incomplete picture of what is required. The documentation is not difficult — it is voluminous and detail-sensitive. The SLA process is not unpredictable — it is structured, and it rewards preparation.
Start your classification review now. Confirm your ISO 13485 scope. Engage your regulatory team. The manufacturers who initiate the process with clear documentation and realistic timelines are the manufacturers who secure their licenses — and their market access — on schedule.