Software as a Medical Device
Software intended for medical purposes that performs without being part of a hardware device.
Definition
Per IMDRF, Software as a Medical Device (SaMD) is software intended to be used for one or more medical purposes that perform these purposes without being part of a hardware medical device.What this means in practice
SaMD spans diagnostic apps, AI triage tools, and clinical decision support systems. IMDRF risk categorization (I to IV) considers the state of the healthcare situation (non-serious, serious, critical) and the significance of the information the SaMD provides (inform, drive, treat or diagnose). Regulators worldwide, including FDA, MHRA, and Health Canada, align to the IMDRF framework.Examples
- A mobile app that analyzes retinal images to screen for diabetic retinopathy without connecting to hardware.
- A cloud service that triages CT scans and flags suspected large-vessel occlusion strokes for radiologist review.
- AI software that estimates ejection fraction from standard echocardiograms.
Use cases
1 scenarioMobile app analyzing skin lesions for melanoma risk
Founder / RAThe app meets the FDA SaMD definition. The team applies IMDRF risk categorization, follows IEC 62304 for software lifecycle, and uses GMLP principles for the underlying model. They submit a 510(k) with a cleared dermatology AI as predicate.
- •Confusing SaMD with SiMD. If the software is embedded in or required to operate a hardware device, it is SiMD and regulated with the parent device.
- •Assuming a wellness app is out of scope. Once the intended use includes diagnosis, treatment, cure, mitigation, or prevention, the software is likely SaMD.
- •Skipping IEC 62304 lifecycle documentation because the product feels like a normal SaaS release cycle.
- •Treating model updates as bug fixes. Retrained AI models often require a Predetermined Change Control Plan or a new submission.
Frequently asked questions
Cross-references
Governed by
Related terms
Shared paths + categoryFDA mechanism to pre-authorize specific modifications to AI/ML-enabled devices.
Software embedded in or required to operate a hardware medical device.
Software providing healthcare professionals with knowledge and patient-specific information.
Lifecycle requirements for medical device software.
International standard for the application of risk management to medical devices.
The bundle of cybersecurity artifacts a sponsor includes in a 510(k), De Novo, PMA, or HDE submission for a cyber device.
Latest in MedTech
Primary references
3 sources- 1IMDRF SaMDVerifiedIMDRFimdrf.org
- 2FDA SaMD ResourcesVerifiedFDAfda.gov
- 3FDA - AI/ML-Enabled Medical DevicesVerifiedFDAfda.gov
Inline markers like [1] jump to the matching reference above.