Software as a Medical Device, or SaMD, is software intended to be used for one or more medical purposes without being part of a physical medical device. The term was defined by the International Medical Device Regulators Forum and is widely used by the FDA and European regulators. Examples include applications that analyse medical images, calculate drug dosing, or triage symptoms. In the EU, software that qualifies as a medical device is regulated under the MDR or IVDR and classified by the significance of the information it provides and the state of the patient. When such software uses artificial intelligence, the EU AI Act may also apply as a parallel regime. SaMD raises distinct regulatory questions around clinical evaluation, cybersecurity, change management for software updates, and post-market monitoring of real-world performance.
What is Software as a Medical Device?
Software as a Medical Device is software intended for a medical purpose that performs that purpose without being part of a hardware device.
Is all health software a medical device?
No. Software is only a medical device if it has a medical purpose as defined by the MDR or IVDR. General wellness and administrative software is generally out of scope.
HDS Certification Framework v2.1: anticipated changes
Version 2.1 of the health data hosting certification framework, published October 2026, strengthens transparency requirements on third-country data transfers and foreign legislation submission.
ANS - French Digital Health Agency · FranceAEPD analysis of data quality, accuracy and minimisation in processing by AI systems
Leer más
AEPD (Spanish Data Protection Agency) · SpainGuidance: Ambient voice technology-enabled products
Guidance on device qualification and classification of ambient voice technology-enabled products as medical devices in Great Britain.
UK MHRA · UKMHRA clarifies regulatory status of ambient voice technologies used in the NHS
MHRA guidance clarifies how medical device law applies to ambient voice technology products in UK health and care settings.
UK MHRA · UKGuidance: Digital mental health technology: qualification and classification
Guidance to help manufacturers of digital mental health technologies determine regulatory qualification and appropriate device classification.
UK MHRA · UKThe enforcement framework of the AI Act
The European Commission's AI Office, national competent authorities, and the European Data Protection Supervisor share enforcement of the AI Act across different AI system categories.
EU AI Act Implementation · EU-wideAI Act enforcement and transparency requirements begin 2 August 2026
From 2 August 2026, AI Act enforcement begins and transparency rules require AI systems to disclose interaction with users and label AI-generated or altered content.
EU AI Act Implementation · EU-wideCommission guidelines on transparency obligations for providers and deployers of certain AI systems
Guidelines clarify AI Act transparency obligations for interactive AI systems and AI-generated content, effective 2 August 2026.
EU AI Act Implementation · EU-wide