Regulatory

Regulatory & Geography

HealthOS ICU is positioned as software in a medical device / a supervisory-control system. HealthOS ICU is not registered as standalone software as a medical device (SaMD).

Regulatory framing

Basis for the position:

IMDRF SaMD Key Definitions

Requires a host medical device to function.

imdrf.org →

MDCG 2019-11

EU MDR classification of software in a device.

health.ec.europa.eu →

FDA guidance on clinical decision support

Basis for clinical decision support outside a medical device; independent review of the basis is supported.

fda.gov →

EU Artificial Intelligence Act

Regulation (EU) 2024/1689 has been in force since August 2024. For medical-device manufacturers and for HealthOS ICU partners on the European market, it sets a frame that must be met.

Provision	What it establishes	Source
Article 3(1), recital 12	Definition of an AI system; systems based on rules defined solely by humans fall outside the definition	EUR-Lex →
Commission guidelines on the AI-system definition (February 2025)	How to apply the Article 3(1) definition	digital-strategy.ec.europa.eu →
Article 6(1), Annex I	An AI system that is a product or a safety component of a product under Annex I legislation (which includes the 2017/745 medical devices regulation) subject to mandatory third-party conformity assessment is high-risk	EUR-Lex →
Articles 9–15	Obligations of a high-risk-system provider: risk management, data and data governance, technical documentation, record-keeping, transparency, human oversight, accuracy, robustness and cybersecurity	EUR-Lex →
Article 113	Application timeline: for Annex I high-risk systems — August 2027 per the regulation’s text; as of this draft the European Commission has proposed a postponement as part of the digital-legislation simplification package — check the current text	EUR-Lex →

The evidence the regulation requires from a high-risk system — a log of every command with its outcome, rule version, and confirming person; human confirmation for equipment-control commands; technical documentation assembled from evidence-of-fact receipts — HealthOS ICU produces as a product of normal operation.

Qualifying the platform’s recommendation-computation method under the Article 3(1) definition is a matter for regulatory assessment in each market-entry jurisdiction.

Quality and lifecycle standards

Quality management system (QMS)

Quality controls, change-controlled gates, validation records and audit trails are implemented through governance artifacts aligned with ISO 13485:2016 and the IMDRF SaMD QMS document. Certification by a regulatory body is a separate productisation track in any given region.

Certification

Software lifecycle

Software lifecycle structure follows IEC 62304: design control points are the compiled bundle and the [evidence-of-fact receipt](/en/terms/#release-receipt); change control is the governed knowledge-update-request process; anomaly handling is the audit event log with structured classification.

SOUP register, Class B/C dossier

Risk management

The risk-management framework is described in the supporting research, aligned with ISO 14971:2019.

Formal hazard analysis

Traceability as a product property

Medical regulation — ISO 14971, IEC 62304 — is built around traceability. In the architecture of HealthOS ICU, traceability is not a separate line of work, — it is a product property: knowledge changes only through a governed path, execution produces evidence bound to a version of that knowledge, and audit requests are answered with files carrying provenance evidence.

The practical consequence for a regulatory programme: the dossier is assembled from evidence that already exists, rather than reconstructed after the fact. Reconstruction after the fact is a known cause of regulatory programmes failing: by the time you need to prove what was executing on a given day, there is nothing left to prove it with.

Geographic priority

Market entry: from South Africa to Botswana, then Brazil, Malaysia, Kenya, then India.

South Africa

First-market entry. SAHPRA establishment licensing and the clinical-evaluation path. Partner network in two anchor institutions.

Botswana

Sub-Saharan entry following clearance in South Africa. The BoMRA path aligns with the SAHPRA precedent.

Brazil, Malaysia, Kenya

ANVISA RDC 657/2022 (Brazil), NPRA (Malaysia), PPB (Kenya) — fast-follow markets aligned with existing partner networks.

India

The CDSCO path; the largest long-term-volume market.

EU/US — monitored. Data from the South African clinical evaluation may be used in CE/FDA submissions. The EU AI Act applies to manufacturing partners on the European market regardless of the platform’s own deployment geography.