Regulatory GuideOctober 21, 2026 · 17 min read · VEMERIX

Colombia's CCAA: Qualify the Device Storage Site Before Registration

Check the Colombian importer, certified warehouse address and handling controls separately from the device registration before appointing a distribution partner.

Regulatory Guide illustration showing a Colombian device importer’s certificate, warehouse address and product file as three separate verification checks.

The distributor decision: which warehouse will handle your devices?

This guide is for foreign manufacturers appointing Colombian distributors and for distributor quality teams preparing to import sterile consumables. Consider a proposed launch of a single-use circumcision device, laser fiber or wound dressing. The prospective partner supplies a product-registration plan and a warehouse brochure. Those documents still leave a practical question unanswered: which certified operation will receive, inspect, store and release the goods?

Treat this as a qualification exercise before signing the logistics schedule. Ask the partner to identify the importer named in the product file, the certificate covering its operation, the actual handling address and the people responsible for quality. A sales office, product certificate or overseas ISO 13485 certificate cannot establish those facts. The CCAA definition and the storage manual make local facilities, resources, quality controls and human resources part of the establishment assessment. 123

The deliverable should be a short evidence file linking legal entity, site and proposed device conditions. The tables below separate published requirements from suggested buyer records. They do not promise a certification outcome or replace INVIMA’s decision on a particular establishment.

Decreto 4725 defines the CCAA as an administrative act issued to medical-device importers. Articles 10 and 11 address storage and conditioning requirements and INVIMA verification; Resolución 4002 supplies the detailed manual. INVIMA’s current FAQ explicitly describes the CCAA as one of the requirements for obtaining a registro sanitario under Articles 16 and 17. 123

For devices outside the controlled-technology equipment route, Articles 16 and 17 distinguish evaluated registration for Classes IIb/III from automatic registration for Classes I/IIa. This guide does not assign a Colombian class to any VEMERIX product. Confirm the exact device and route in the product dossier; an establishment certificate does not determine the device’s classification, approved indication or registration status. 3

Keep the manufacturer’s evidence and the importer’s establishment evidence in separate parts of the launch file. A certificate of free sale verification concerns the exporting-country document. The Colombian CCAA concerns the receiving operation. A similar separation appears in our Thai importer and product-authorization guide, but its country-specific requirements do not transfer to Colombia.

Start with the entity’s actual role

The scope section of Resolución 4002 applies to importing establishments that store and/or condition medical devices for human use. It expressly distinguishes non-importing commercializers and non-importing pharmaceutical wholesale establishments. Do not infer a requirement solely from a company describing itself as a distributor. 12

Proposed rolePublished boundaryBuyer’s next check
Importer storing and/or conditioning devicesThe importer falls within the manual’s scope and seeks INVIMA certification.Obtain the importer’s certificate, verified handling address and proposed activities.
Commercializer buying domestically, without importingThe manual excludes these commercializers from INVIMA CCAA certification; territorial health authorities retain surveillance.Identify the actual importer and how approved goods move to the reseller. Do not demand a CCAA merely because the reseller holds stock.
Pharmaceutical wholesaler or drug depot that does not import devicesThe manual directs these establishments to the pharmacy-services framework.Confirm that the company truly does not import and identify its applicable oversight.
Importer using a logistics contractorThird-party storage is permitted, subject to the manual and certification verification requested by the importer.Match the contractor’s location and contracted activities to the importer’s certification evidence.
CCAA scope checks for a commercial distribution plan

Source: Resolución 4002, Annex II and V.1; INVIMA medical-device FAQ.

An institution importing for its own use is a different assessment from commercial resale. This guide does not establish eligibility for that exception or treat it as a distributor route. Likewise, the certification-visit guide distinguishes standard medical devices from IVD reagents and custom-made categories. Use the requirements for the actual product and activity rather than borrowing an exemption or checklist from another category. 5

Map the handling process to evidence before the visit

INVIMA’s multi-site FAQ describes importation, reception and inspection, conditioning, storage, and approval or release for distribution, including preparation and dispatch. Use that process description to map where decisions occur and which records support each handling control. 1

Control areaWhat the published manual requiresSuggested evidence to request
Import and onward transportPreserve manufacturer-specified conditions during import transport and distribution; assess relevant transport risks.Transport responsibility matrix and a route-specific handling specification.
Reception and inspectionPerform initial inspection and retain evidence; keep manufacturer quality or conformity certificates accessible.A completed receiving record matching model, lot, quantity, label and pack condition to the delivery.
ConditioningProvide appropriate areas and procedures for labeling and secondary packing; protect authorized labeling materials.Approved artwork, controlled label inventory and a completed conditioning record, where the activity applies.
Storage statusIdentify and separate approved, quarantined, withdrawn, returned/rejected and demonstration stock appropriately.A site plan and a demonstration of how the system prevents dispatch of stock awaiting a quality decision.
Environmental conditionsMaintain conditions specified by the manufacturer, with appropriate equipment and contingency arrangements for temperature-chain devices.Applicable storage ranges, monitoring records, calibration evidence and an excursion-response example.
Traceability and dispatchMaintain distribution records that allow lots and recipients to be identified.A trace from one received lot to its dispatched quantities and customer records.
Complaints and withdrawalDocument complaint handling, adverse-incident follow-up and reporting, and an effective withdrawal system.A procedure, responsible contact and a practice reconciliation of distributed and recoverable quantities.
Storage-site requirements translated into a partner-review map

Source: Resolución 4002, Annex IV and V; INVIMA implementation guide. Suggested records are buyer examples.

These requirements come from the manual’s quality-assurance, reception, documentation, traceability, complaints, withdrawal and transport provisions. The record examples above are practical qualification requests; they are not an assertion that INVIMA mandates a document with each suggested English title. 24

Warehouse layout and temperature controls must fit the devices

The manual requires suitable facilities, restricted access and adequate space for operations, cleaning and maintenance. Storage must be arranged physically and functionally according to the device, with quality status identified. Goods must be kept off direct contact with floors and walls, using pallets, shelves or another suitable system. The cited provisions do not specify universal floor or wall clearance distances. 2

For conditioning areas, the manual specifies sound, non-porous, easily washable walls, floors and ceilings. Reception must protect goods and allow prior examination. Approved labeling materials need secure storage, and dispatch needs an appropriate area. Assess the arrangement against the activities the partner will actually perform, rather than treating every product as requiring an identical warehouse design. 2

For a temperature-chain device, the manual requires equipment with adequate capacity, an alternative power supply or contingency plan, and recorded temperature control. It does not establish one refrigeration range for all medical devices. Use the manufacturer’s labeled conditions to decide whether an ambient warehouse, refrigeration or another arrangement is appropriate. The distributor should explain how its monitoring and contingency measures protect those specific conditions. 2

For a sterile single-use line, make the first receiving review concrete: compare the labeled storage conditions with the proposed warehouse and transport specification; check how damaged packs remain segregated; and verify who approves any secondary-label operation. A certificate by itself does not show how the next shipment will be handled.

Verify the technical director’s actual functions

Annex IV.2.1 of Resolución 4002 requires a professional in the relevant area with documented specific experience or specialization and competence for the role. It lists functions a–m. The table paraphrases those functions in their published order; the suggested records are review examples. The manual does not supply an exhaustive list of acceptable university degrees, so a job title alone should not be treated as proof of eligibility. 2

FunctionResponsibility in the manualSuggested record
aAdvise the legal representative on device characteristics and current quality requirements.Documented technical advice or review decisions.
bSupport supplier/distributor selection, imported-device purchasing processes and technical/regulatory advice to third parties.Supplier-selection review.
cEnsure proper storage conditions and the supporting documents and records.Storage-condition review and records.
dApprove storage, conditioning, dispatch and distribution procedures.Approved controlled procedures.
eEnsure ongoing personnel training adapted to needs.Training plan and completed records.
fVerify that storage, conditioning and distribution records are completed at each stage.Review of a completed shipment record.
gEnsure maintenance of storage/conditioning areas and facilities.Maintenance records and follow-up.
hEnsure process checks and instrument/equipment calibrations are performed and recorded, with reports available.Calibration and process-check records.
iEnsure distributed-device traceability for the business and sanitary-authority vigilance programmes.Lot-to-customer trace exercise.
jBe responsible for complaints, market withdrawal, adverse-incident follow-up and reporting.Complaint and withdrawal procedures.
kOversee compliance with the manual.Compliance review and corrective-action follow-up.
lBe responsible for device inspection and/or preparation activities.Inspection/preparation record and responsibilities.
mBe responsible before the sanitary authority for maintaining device quality.Formal role designation and supporting authority within the organization.
The published Director Técnico functions and suggested qualification evidence

Source: Resolución 4002, Annex IV.2.1(a–m). English paraphrases; evidence examples are editorial recommendations.

For due diligence, establish whether the director is appointed, competent, available for the operation and able to carry out the defined functions. INVIMA’s implementation guide also addresses keeping the role filled and documenting temporary cover during leave; those operational arrangements matter beyond the certification visit. 24

Contracted storage, relocation and additional sites

The manual permits a third party to store and/or condition the devices, but requires the importer to request INVIMA verification of those conditions. It places direct responsibility on the importer’s legal representative. Section V.9.1 retains the importer’s technical director’s responsibility for quality, follow-up and control, and provides for contractor audits and the importer’s communication of storage specifications. 2

Request the actual logistics contract and identify who controls reception, quarantine, release, records, complaints and recalls. Then match the contractor’s working address to the certification evidence. A generic statement that a logistics company handles medical products is insufficient to establish that the proposed importer and operation are covered.

INVIMA’s current public FAQ states that relocation to new facilities, whether the importer’s own or a logistics operator’s, requires new verification and certification. Plan a warehouse move as an establishment change, with the partner confirming the required filing and authorization before relying on the new address. Do not assume a corporate address update transfers the site assessment. 1

For multiple sites, the FAQ requires certification at each location performing the full described process. It also says that “bodega satélite” is not a defined certifiable establishment type and cannot be used to bypass activities required at a certified warehouse. This is not a basis for saying every domestic stockroom must hold its own CCAA: the same manual exempts non-importing commercializers. An official INVIMA research-site version of the FAQ additionally distinguishes transient storage of already approved goods from full-process sites. Because the published versions differ, obtain written INVIMA confirmation of a proposed satellite or transient-storage arrangement rather than assuming either blanket coverage or a blanket prohibition. 12 7

Prepare the application using the current INVIMA checklist

The February 2025 certification-visit guide directs applicants to the applicable document checklist, the signed request form, the current tariff and filing through INVIMA’s virtual office. It requires both establishment details and the visit location; where a logistics operator is used, its name belongs in the visit information. It lists importer storage/conditioning certification under tariff code 4023-3. Confirm the code and amount against the current schedule before payment. 5

  • Confirm the requested activity: standard medical-device importation, the actual site and any conditioning operations.
  • Use the current checklist: obtain it through the official device page. Reconcile legal-entity information, site details and any third-party arrangement; do not rely on an old consultant’s attachment list.
  • Assemble site-readiness evidence: a layout, responsibilities, device list, technical-direction competence and applicable handling procedures are useful preparation. The current official checklist determines what must be filed.
  • Retain filing evidence: distinguish the submission ID, the formal radicado, payment evidence and the authority’s replies. Assign someone to monitor the registered email.
  • Track the result: the guide describes a favorable concept leading to a signed certificate, a refusal resolution, or a pending concept with requirements to address.

The guide gives up to one month from the communication to complete missing documentation and describes withdrawal of the application if the requested material is not received in time. Follow the deadline and response instructions in the actual notice and confirm the applicable administrative procedure with the local regulatory lead. A pending visit concept can involve requirements to meet within sixty business days and a further visit requested by the applicant. Those outcomes are distinct from certification. 5

Avoid building a launch promise around an estimated audit queue or a generic product-registration timeline. Ask the importer for its current filing status and supporting correspondence. Site preparation and product-dossier preparation can run in parallel, but the required establishment evidence must be available when the relevant registration requirements are assessed. 15

Validity, complete renewal, transfer and cancellation

Article 15 of Decreto 4725 states five years from issuance. INVIMA’s current FAQ, February 2025 procedure guide and April 2025 implementation guide explain counting from administrative finality (ejecutoría). Use the certificate’s recorded validity and finality evidence in the launch file; if dates differ, resolve the discrepancy with INVIMA before scheduling a shipment. The April 2025 implementation guide updates the older 2023 version still linked from the main device page. 1345

EventPublished rule or conditionBuyer action
RenewalThe February 2025 guide conditions continuity on complete documentation filed at least five business days before expiry. Renewal follows a new visit process. 5Check completeness and the acknowledged filing date, not only the payment date. Set an earlier internal planning date as a commercial precaution.
Transfer (cesión)The FAQ allows transfer during validity without a new verification visit if the certified conditions are maintained. INVIMA reviews and approves or denies the request. 1Request the assignment agreement, the transferee’s maintenance undertaking and the authority’s outcome.
Certificate in the transferee’s nameAfter approved transfer, the FAQ directs issuance of the certificate in the new holder’s name, referring to tariff code 4026. 1Obtain the reissued certificate; a private business-transfer contract does not itself complete the regulatory change.
Relocation or changed logistics operationA new handling location requires verification and certification; the implementation guide also addresses changes or termination of logistics arrangements. 14Obtain a transition plan and the required authority correspondence before changing the delivery destination.
Voluntary cancellationThe April 2025 guide addresses ending the CCAA and resolving associated registrations or removing the importer from them. The FAQ describes product-record procedures first. 14Confirm the filing sequence with INVIMA and reconcile every affected product file before treating the closure as complete.
Lifecycle decisions to document before the next shipment

Source: INVIMA FAQ and February 2025 certification-visit guide, sections 3.2–3.3; April 2025 implementation guide, sections 8–9.

Timely renewal is not a guarantee against later adverse findings. The procedure guide explains that an unresolved concept during a renewal visit can lead to applicable sanitary measures. Similarly, the implementation guide describes loss of CCAA validity leading to official review of associated registrations, which may be suspended or cancelled. Review the authority’s actual correspondence to determine the effect on the establishment and associated product files. 45

Use the public list as a cross-check, then reconcile the documents

On 21 October 2026, INVIMA’s current device page linked a CCAA establishment list dated 2 October 2026. Its PDF includes establishment name, NIT, activity address, municipality, concept, concept date, expiry date and product/activity information. These fields provide a concrete starting point for a partner check. The list is a dated publication; request subsequent acts or clarification if the partner’s evidence differs. 16

Field to reconcileEvidence to compareQuestion to resolve before accepting the file
Legal identityContract, NIT, business record, CCAA and public-list entryIs the entity proposed as importer the same entity named in the evidence?
Handling locationCertificate, visit evidence, site plan and proposed delivery addressWill reception and release occur at the verified address? Which subsequent sites handle approved stock?
Current validityRecorded expiry, finality evidence, renewal filing and later authority actsDoes the record support continued activity across the planned shipment dates?
Devices and conditionsCertificate/concept scope, list description, manufacturer labeling and storage proceduresCan the operation maintain the conditions of this exact sterile-device line?
Outsourced activitiesLogistics contract, responsibility matrix and certification evidenceWho controls each step, and where is it performed?
Product-file connectionRegistration and importer details supplied by the local regulatory leadIs the intended importer properly connected to the device’s current authorization?
Colombian importer evidence worksheet

Source: Editorial qualification worksheet based on INVIMA’s published fields, FAQ and storage manual.

For example, if the public list identifies an ambient-storage operation but the proposed product has a controlled-temperature requirement, the mismatch needs investigation before shipping. Do not infer suitability from the establishment name alone. Conversely, absence from an older list is not proof that a newly certified importer is unauthorized: request the later act and verify it with INVIMA. Record the version and date of every document checked.

The implementation guide says a current CCAA may cover added product categories when the company fully adapts its conditions and notifies INVIMA clearly and promptly with the proposed device list. It adds particular support requirements for expansion into controlled-technology equipment. Therefore, “broad coverage” should not become “no further action”: reconcile the new device’s conditions and the required notification before extending the portfolio. 4

Where VEMERIX fits—and where due diligence still begins

VEMERIX is the international brand of Weihai Medison Medical Equipment Co., Ltd., positioned as a Minimally Invasive Surgery Total Solution Platform serving urology, vascular surgery and perioperative care.

For a proposed Colombian distribution discussion, identify the exact product, model range, local importer and storage conditions first. Review the VEMERIX quality information and use the distributor enquiry channel to ask which manufacturer documents are available for that product and target market. Ask specifically about labeling, storage instructions and supporting quality evidence; availability and local acceptance must be confirmed for the actual file.

This article does not establish a Colombian authorization, warehouse capability or registration status for VEMERIX or any partner. The Colombian importer must supply and verify its own establishment evidence. Manufacturer documentation and the local CCAA should remain separate review items, with responsibilities agreed before commercial dispatch.

Frequently asked questions

Does a distributor need a CCAA merely because it stores devices?
No. The manual expressly distinguishes commercializers that do not import, which are outside INVIMA CCAA certification and under territorial surveillance. Identify whether the company is actually the importer and which activities it performs. 12

Can an importer use a third-party warehouse?
Yes. The contractor must meet the manual, and the importer requests certification verification of those conditions. The contract does not remove the importer’s legal representative’s or technical director’s defined responsibilities. 2

Is a renewal payment enough to continue operating?
No. The procedure guide requires complete documentation at least five business days before expiry. Keep evidence of the complete filing and the authority’s responses; unresolved renewal-visit findings can affect continuity. 5

Does changing the warehouse require a new assessment?
INVIMA’s current FAQ says relocation to new own or logistics-operator facilities requires new verification and certification. Confirm the transition before sending goods to a changed address. 1

Can the distributor open sterile pouches as secondary conditioning?
The manual treats primary packing (envase) and sterilization as production operations assessed under manufacturing requirements, while its conditioning provisions address labeling and secondary packing. A CCAA is not evidence of authority to alter a sterile barrier or re-sterilize a device. Escalate such a proposal to the manufacturer and local regulatory lead. 2

What should a buyer do with conflicting certificate dates or satellite-site advice?
Retain the conflicting documents, identify the activity and site in question, and obtain written clarification from INVIMA. Do not resolve a legal ambiguity by selecting whichever date or FAQ version permits the shipment. The practical goal is an auditable decision tied to the actual operation.

Recheck the official device page, current procedure guide, storage manual and certificate status before filing or shipment, and whenever the site, contractor, technical director or product conditions change. This is a source-based qualification guide, not a substitute for Colombian regulatory or legal advice.

Sources

  1. Instituto Nacional de Vigilancia de Medicamentos y Alimentos (INVIMA). Dispositivos médicos y equipos biomédicos - Preguntas frecuentes (CCAA block).
  2. Ministerio de la Protección Social / INVIMA. Resolución 4002 de 2007: Manual de Requisitos de Capacidad de Almacenamiento y/o Acondicionamiento para Dispositivos Médicos. Diario Oficial No. 46.806.
  3. República de Colombia. Decreto 4725 de 2005: Régimen de registros sanitarios, permiso de comercialización y vigilancia sanitaria de los dispositivos médicos para uso humano (artículos 8-11, 15-17).
  4. INVIMA. Implementation guide for storage and conditioning requirements for medical-device and biomedical-equipment importers, April 2025, version 2; site controls, contracted storage and certificate changes.
  5. INVIMA. Guide for certification-visit procedures, version 2, February 2025; application, visit outcomes, validity and renewal.
  6. INVIMA. Establishments certified in CCAA for medical devices, list dated 2 October 2026; download linked from the current medical-devices page.
  7. INVIMA research-site medical-device FAQ; satellite-storage answer differs from the main public FAQ. Used to identify a published interpretation difference, not as automatic permission for a proposed site.

Talk to VEMERIX

VEMERIX is the international brand of Weihai Medison Medical Equipment Co., Ltd., positioned as a Minimally Invasive Surgery Total Solution Platform serving urology, vascular surgery and perioperative care.