FDA Issues New Draft Guidance on Clinical Evaluation of Software as Medical Device

The U.S. Food and Drug Administration released updated guidance on May 13, 2024, that sets new expectations for clinical validation of software functions in medical devices. The document stresses integration of real-world evidence, cybersecurity controls, and ongoing lifecycle monitoring to support premarket submissions. These changes aim to align regulatory standards with rapid advances in digital health technologies while maintaining safety benchmarks.

What this means

The framework directs manufacturers toward greater use of real-world performance data and postmarket surveillance when demonstrating device claims. It also formalizes requirements for cybersecurity documentation and software verification throughout a product's life. Regulators expect transparent reporting that links clinical evidence directly to intended use statements.

Key takeaways

• The FDA now requires manufacturers to integrate real-world performance data and clinical evidence to support device claims, according to the Digital Health Center of Excellence [1].
• Applicants must demonstrate cybersecurity controls and plan for regular security updates, per the December 2023 guidance on premarket submissions for device software functions [2].
• Continuous performance monitoring through real-world data and transparent reporting forms a central part of the updated framework [3].
• Validation processes emphasize software verification and lifecycle controls to sustain device effectiveness and patient safety.
• The guidance applies to submissions involving device software functions and clarifies expectations for leveraging real-world evidence sources.

The FDA's Digital Health Center of Excellence page outlines the policy shift toward these standards. Manufacturers must now document how real-world data supports regulatory decisions for digital health products. Cybersecurity management appears as an explicit validation element in the premarket guidance finalized in late 2023. Real-world evidence expectations draw from separate FDA documents that detail standards for postmarket monitoring.

Limitations

The FDA guidance provides a framework, but some specifics may require interpretation based on device type or intended use. International regulatory requirements may differ. Manufacturers will need to follow up with the FDA for device-specific questions.

This content is for information only.

Last updated: September 3, 2026