The Definition of SaMD under Australian Law

The Therapeutic Goods Act 1989 provides the core criteria for what constitutes a medical device. Software that provides simple lifestyle tracking, such as a step counter or a general calorie log, is generally not regulated. Problems arise when software begins to offer clinical decision support. If your algorithm provides specific diagnostic recommendations or suggests treatment paths to a clinician, it likely falls within the TGA remit. The agency evaluates the intended purpose stated in your marketing materials and technical documentation. If you claim your software can detect a condition, you are making a therapeutic claim that requires evidence and formal registration.

Identifying Exclusions and Exemptions

Not every piece of health software requires full ARTG inclusion. The TGA provides specific exclusions for certain low-risk products, such as software used solely for managing laboratory records or providing general health information that does not result in a specific diagnosis. You should consult the Australian Register of Therapeutic Goods (ARTG) to see how similar products are listed. This research provides a baseline for your own regulatory strategy. For example, if a competitor with a similar feature set is listed as a Class IIa device, you should expect similar scrutiny. Dreamoro's investment thesis prioritises founders who have mapped these precedents early, as this foresight de-risks the commercialisation journey and builds confidence with potential investors. Risk classification determines the depth of clinical evidence you must produce and the frequency of your regulatory obligations. The Therapeutic Goods Administration (TGA) operates a multi-tiered framework where regulatory oversight scales with the potential for patient harm. Navigating tga regulations for digital health requires a precise understanding of these tiers; Class I, IIa, IIb, and III. Each step up the hierarchy increases your compliance costs and lengthens your time to market. For the 2026-27 financial year, the TGA proposed fee increases of up to 4.8%, making an accurate initial classification essential for maintaining capital efficiency. Your classification dictates whether you can self-declare compliance or if you require a mandatory audit by the regulator. Higher classifications demand a more robust Quality Management System (QMS) and extensive clinical data. This level of rigour is a core component of venture capital due diligence because it proves you understand the structural defensibility of your product. By February 2026, new guidance specifically for AI-enabled software clarified how these risk tiers apply to evolving algorithms, reinforcing the need for early classification strategy.

Class I to Class III: Assessing Potential Harm

Class I software usually provides non-serious diagnostic information or simple monitoring. It carries the lowest evidentiary burden and is often the entry point for wellness-adjacent tools. Class IIa and IIb are the middle ground where most clinical decision support tools reside. These products influence treatment decisions for non-critical conditions. Class III is reserved for high-stakes environments. If your software provides information used in critical clinical situations where an error could lead to death or permanent disability, you face the highest level of scrutiny. The TGA implemented a 3.2% fee increase in the 2025-26 period, and further increases in 2026-27 mean that misclassifying a product at a higher level than necessary creates a permanent drag on your margins.

The Impact of Intended Purpose on Classification

Your classification is not just a result of your technology; it is a result of your claims. The intended purpose is the formal statement of what your software is meant to do. Sophisticated founders draft this document with surgical precision. Changing a single word from "tracks" to "identifies" can shift a product from Class I to Class IIa. This shift triggers mandatory audits and higher application fees. You must align your clinical claims with your current evidence base to avoid over-classifying your product too early. We often see founders struggle with this balance. Ensuring your product is classified correctly today prevents regulatory debt from devaluing your company during future funding rounds. Regulatory compliance is often misunderstood as a bureaucratic box-ticking exercise. In reality, it is a sophisticated commercial strategy. For the 1,005 healthtech companies currently operating in the Australian ecosystem, successfully navigating tga regulations for digital health is a signal of operational maturity. Regulatory approval acts as a defensible moat that protects your market share from competitors who lack the discipline to meet clinical standards. This structural defensibility is why regulatory clarity remains a central pillar of the Dreamoro investment thesis. Investors view inclusion on the Australian Register of Therapeutic Goods (ARTG) as a primary de-risking milestone. It validates your technical architecture and confirms that your product meets the safety requirements of the TGA regulations for digital health. When a startup can demonstrate a clear, costed pathway to compliance, it removes a significant layer of uncertainty from the valuation model. This is particularly relevant given the TGA's cost-recovery model, where 73% of its funding is derived from industry fees. A founder who has not factored these costs into their burn rate is a risk that sophisticated venture capital firms often avoid.

Why Investors Prioritise Regulatory Clarity

Your regulatory status directly dictates your go-to-market strategy and revenue potential. Without ARTG inclusion, you cannot legally market a medical device in Australia, which effectively caps your commercial reach. Uncertainty regarding your TGA status is a common red flag during the due diligence process. Founders who present a documented regulatory roadmap are more likely to secure pre-seed and seed funding because they demonstrate a deep understanding of the healthcare full value chain. This foresight proves you are building for scale, not just for a pilot phase.

Building Defensibility Through Clinical Evidence

Clinical validation proves your product works as intended and delivers measurable patient outcomes. Strong clinical data does more than satisfy the regulator; it supports premium pricing and accelerates adoption by healthcare providers who require evidence before changing clinical workflows. You should integrate clinical evidence collection into your early product development cycles. This proactive approach ensures that by the time you seek venture capital funding, you already possess the data required to defend your market position. Evidence-based startups are inherently more capital-efficient because they face fewer hurdles during the sales cycle and command higher trust from clinical stakeholders. A Quality Management System (QMS) is more than a collection of folders; it is a structured framework that governs every aspect of your product development lifecycle. When navigating tga regulations for digital health, your QMS serves as the primary evidence of your organisation's ability to produce safe and effective software. The TGA generally recognises ISO 13485 as the benchmark for medical device quality management. This standard requires you to maintain control over design, development, and production processes. Documentation is the bedrock of this system. If a process or test result is not documented, the regulator assumes it did not happen. This level of rigour is essential for building a company that can withstand the scrutiny of both regulators and institutional investors. Your QMS must cover the entire lifecycle of the software. This starts at the initial design phase and continues through to post-market monitoring. For founders, the goal is to create a system that ensures repeatability and safety without creating unnecessary bureaucracy. A well-implemented QMS protects your intellectual property and ensures that your technical team is building on a foundation of verified requirements. This discipline reduces the risk of expensive late-stage re-engineering that can derail funding rounds or market entry.

ISO 13485 Standards in Digital Health

ISO 13485 provides the necessary framework for risk management and product safety. For many healthtech startups, the challenge is implementing a QMS that satisfies regulators without stalling technical velocity. You should focus on a lean QMS that prioritises essential design controls, document control, and corrective and preventive actions (CAPA). This approach ensures your engineering team remains agile while building a compliant foundation. High-performing teams integrate these controls directly into their development pipelines to automate as much of the compliance burden as possible. If you are scaling a product and need to bake compliance into your technical stack, Dreamoro Studio provides AI-first product engineering services to help you meet these rigorous standards.

Post-Market Oversight and Software Updates

Regulatory obligations do not end with ARTG inclusion. You must establish rigorous processes for monitoring real-world performance and reporting adverse events. Commencing in March 2026, it became mandatory for healthcare facilities to report adverse events related to medical devices to the TGA. As a manufacturer, your post-market surveillance system must be capable of ingesting this data and triggering the necessary clinical or technical responses. Significant software updates, particularly those that change the intended purpose or the clinical output of an algorithm, may require a new TGA notification or application. Maintaining a disciplined QMS allows you to manage these updates and maintain your regulatory standing without disrupting your commercial operations. Building a compliant healthtech product is an engineering challenge as much as a legal one. Dreamoro Studio provides the technical and strategic support needed to transform complex regulatory requirements into functional, scalable code. Our AI-first product engineering services ensure that compliance is baked into your architecture from the first commit. This approach prevents the technical debt that accumulates when founders treat regulation as a separate workstream. By integrating regulatory logic into your development lifecycle, you ensure that every feature release maintains your standing on the Australian Register of Therapeutic Goods (ARTG). Accessing the Dreamoro ecosystem connects you with a specialised network of regulatory consultants and clinical partners. We have mapped 1,005 healthtech companies; this research provides us with deep market intelligence on the specific hurdles that delay market entry. We help you align your regulatory strategy with your broader commercialisation goals, ensuring your technical milestones directly support your valuation. Navigating tga regulations for digital health requires more than just following rules; it requires a disciplined engineering culture that values documentation as much as performance.

Engineering Compliant Products from Day One

Retrofitting compliance into a finished product is significantly more expensive than building it in early. We have seen startups spend six figures on remedial engineering because their initial architecture lacked the necessary design controls or traceability. You should use our managed development operations to maintain high standards of documentation from the pre-seed stage. This discipline is essential for navigating tga regulations for digital health without sacrificing your development velocity. For more on our engineering capabilities and how we support technical founders, visit the Dreamoro Studio page.

Strategic Guidance for Global Market Entry

TGA approval is often a springboard to FDA or CE Mark certification. Because the TGA's February 2026 guidelines for AI-enabled software align with international standards, your Australian compliance efforts provide a foundation for global expansion. We assist in mapping out a global regulatory pathway that maximises capital efficiency and reduces time to market in major jurisdictions. You can review our investment thesis to see how we view regulatory defensibility as a core driver of exit value. Our goal is to ensure your regulatory strategy serves your long-term commercial potential, rather than acting as a perpetual cost centre. Success in the Australian healthtech market requires moving beyond a reactive stance on compliance. By identifying your SaMD classification early and implementing a lean QMS based on ISO 13485, you create a foundation for global scale. Navigating tga regulations for digital health is not merely a cost of doing business; it's a mechanism for increasing your company's valuation and securing interest from specialist investors. The February 2026 AI guidance and March 2026 adverse event reporting mandates have raised the bar for operational excellence, making early strategic alignment essential. Dreamoro operates as a specialist healthtech venture capital firm with an integrated product engineering studio. We have mapped 1,005 companies in the sector and possess a deep understanding of the Australian healthcare ecosystem. Our team helps you bake regulatory requirements into your code while aligning your clinical roadmap with your funding strategy. To ensure your technical architecture is built for the rigours of Medicine 3.0, partner with Dreamoro to build and fund your regulated healthtech startup. The path to market is complex, but with the right framework, your regulatory strategy becomes your most defensible asset.

Is my mobile health app considered a medical device by the TGA?

Your app is a medical device if its intended purpose matches the definition in the Therapeutic Goods Act 1989. Software that provides lifestyle tracking or general wellness information is typically excluded. However, if the app diagnoses, monitors, or suggests treatment for a specific condition, it is regulated as Software as a Medical Device (SaMD). The TGA's February 2026 guidance clarifies that apps using AI for clinical recommendations fall under strict regulatory supervision.

How much does it cost to get TGA approval for a digital health product?

Costs depend on the risk classification of your software and the complexity of the audit required. For the 2025-26 fiscal year, the TGA implemented a 3.2% fee increase across most categories. Proposed increases for 2026-27 include a 4.3% to 4.8% rise for all fees, reflecting the agency's cost-recovery model where 73% of funding is derived from industry charges. These costs must be factored into your seed stage burn rate to maintain capital efficiency.

How long does the TGA approval process take for software?

Timelines vary based on the classification level and the quality of your technical documentation. Class I software can often be listed quickly through a self-declaration process. Class IIa and higher require a mandatory audit of your clinical evidence and Quality Management System, which can extend the process by several months. Navigating tga regulations for digital health effectively requires preparing these documents well in advance of your desired market entry date.

Do I need a Quality Management System if my software is Class I?

You must maintain a Quality Management System regardless of your software's risk class. While Class I products have a lower evidentiary burden, manufacturers are still responsible for post-market monitoring and maintaining a technical file. Implementing a lean QMS based on ISO 13485 ensures your organisation can scale into higher risk classes without rebuilding its operational foundation. This discipline is a key indicator of maturity for venture capital investors.

Can I use clinical data from overseas for my TGA application?

Overseas clinical data is acceptable if it demonstrates the safety and performance of the device in a way that is applicable to the Australian population. The TGA often recognises evidence used for FDA or CE Mark certification to streamline the process. However, you must still map this data to specific Australian requirements. This alignment is critical when navigating tga regulations for digital health to ensure your international evidence supports a successful ARTG inclusion.

What happens if I sell a digital health product without TGA approval?

Supplying an unapproved medical device is a breach of federal law and carries significant civil and criminal penalties. The TGA has identified software as a medical device as a priority focus area for enforcement in 2026-2027. Beyond legal fines, selling an unapproved product prevents you from securing institutional funding and blocks your path to the public healthcare system; effectively devaluing your intellectual property.

Do software updates require a new TGA submission?

Minor bug fixes and security patches typically do not require a new submission. However, significant updates that alter the intended purpose, clinical algorithm, or risk profile necessitate a formal notification or a new application. The February 2026 guidance on AI-enabled software highlights that changes to autonomous decision-making logic are considered substantial modifications. You must track these changes within your Quality Management System to ensure continuous compliance.

What is the difference between an exclusion and an exemption under TGA rules?

Excluded products are completely outside the TGA's regulatory remit because they do not meet the definition of a therapeutic good. Exempt products are still considered medical devices but are not required to be listed on the ARTG, often because they are low-risk or used in specific clinical trials. Understanding this distinction allows you to accurately map your regulatory pathway and avoid unnecessary compliance costs during the pre-seed stage.

Back to BlogARTICLE

Navigating TGA Regulations for Digital Health: A Strategic Framework for Founders

Learn how navigating TGA regulations for digital health can de-risk your startup. Our strategic framework helps founders boost valuation and secure VC funding.

Klaus Bartosch · 8 May 2026 · 16 min read

Frequently Asked Questions

Klaus Bartosch

CEO, Founder & Managing Partner