Colombia's ten-year registration rests on a five-year permit

One decree, four classes, two tracks

Decreto 4725 de 2005 is the framework Colombia's INVIMA — the Instituto Nacional de Vigilancia de Medicamentos y Alimentos — has run medical device registration under since it replaced the country's older device rules. It sorts devices into four risk classes, I, IIa, IIb, and III, and then splits them across two tracks rather than reviewing all four the same way. Class I and IIa devices go through what INVIMA calls automatic registration: the Registro Sanitario issues once a complete technical file is filed, without INVIMA conducting a substantive review of the file's contents first. Class IIb and III devices go through a controlled track instead, where INVIMA does review the technical file before the registration is granted. That split places the review, not just the paperwork burden, on one side of the boundary — a Class I filing and a Class III filing aren't the same process run at different speeds, the way the Philippines' CMDN and CMDR both still route through a review of some kind. In Colombia's automatic track, no INVIMA reviewer reads the file before the certificate exists.

The registration itself runs ten years

Whichever track a device came through, the Registro Sanitario that results is valid for ten years before it has to be renewed — a longer standing term than most of the markets this blog has already covered, where five- and six-year cycles are closer to the norm. A device cleared once under Decreto 4725 carries that clearance for a full decade without touching INVIMA's review process again, automatic track or controlled track alike.

The importer's own permit runs half as long

What doesn't run ten years is the credential the importing or distributing entity has to hold in its own name. Before a foreign manufacturer's device can be registered through a Colombian importer, that importer has to hold a current Certificado de Capacidad de Almacenamiento y/o Acondicionamiento — the CCAA, INVIMA's own certificate confirming the entity's storage and conditioning facilities meet the standard the device's own handling requires. The CCAA is valid for five years from the visit where INVIMA's technical compliance opinion is issued, half the ten-year term the device's own Registro Sanitario carries. A device registered on day one of a Colombian importer's freshly issued CCAA will outlive that same certificate once, and be more than halfway to outliving it twice, before its own registration ever comes up for renewal.

Recertification is the importer's own errand, not the manufacturer's

INVIMA's own guidance puts the burden of keeping the CCAA current squarely on the certificate holder: a recertification visit has to be requested before the certificate's own expiry, and an importer that requests it in time is recorded as “current, in recertification process” rather than lapsed. Nothing about that renewal cycle touches the Registro Sanitario sitting on top of it, and nothing about the Registro Sanitario's own ten-year term prompts anyone to check whether the importer's CCAA underneath it is still valid. A distribution agreement that treats the importer as a fixed address to ship product to, rather than a certificate holder running its own five-year clock, has no way to notice the moment that certificate lapses — which breaks the legal chain the device's own registration depends on, even while the registration's own printed date is nowhere near arriving.

Where this meets the file

A Colombia registration record needs the track recorded as its own field — automatic for Class I and IIa, controlled for Class IIb and III — alongside the importer's CCAA expiry tracked as a distinct date feeding the Registro Sanitario it supports, rather than one “Colombia: registered” status standing in for both. A cross-border registration tracker built to carry that structure, alongside the launch catalog's other device-registration templates, is previewed there now. If your program has tracked INVIMA's two certificates differently, the shelf takes that correction directly.