FDA Rules for AI Medical Devices: A Founder's Guide to SaMD, CDS, and Model Updates

For health tech founders, navigating FDA regulations for AI medical devices is a critical business function. Understanding the distinction between SaMD and CDS, and planning for AI model evolution with PCCPs, is key to product development and market strategy.

Sofia Rodriguez

October 9, 2026 · 4 min read

For founders of health tech startups, navigating the U.S. Food and Drug Administration's regulatory landscape is a critical business function, not just a late-stage compliance hurdle. The FDA has established specific frameworks to oversee artificial intelligence and machine learning technologies, and understanding them from day one can shape your product roadmap, clinical strategy, and investor conversations. The key is to determine whether your product is a regulated Software as a Medical Device (SaMD) or a potentially exempt Clinical Decision Support (CDS) tool, and to plan for your algorithm's evolution using a Predetermined Change Control Plan (PCCP).

Navigating the FDA Landscape for AI Medical Devices

The FDA’s approach to AI and machine learning has matured significantly. An action plan released in January 2021 outlined the agency's initial framework for regulating AI/ML-based SaMD. Since then, the FDA has provided more clarity, including finalizing its guidance on Predetermined Change Control Plans in August 2025. This allows AI models to be updated after receiving market clearance without requiring a new submission for every iteration. As of September 2026, the agency has authorized over 1,600 AI-enabled medical devices for marketing in the United States.

This evolving environment means that regulatory strategy must be woven into the fabric of a startup's operations. According to an analysis from Promise Legal Insights, this is not merely a legal exercise. For health tech founders, "understanding this regulatory perimeter is not just a legal compliance exercise — it directly shapes your product roadmap, your clinical validation strategy, and what investors will ask during diligence." Integrating this planning early ensures that product development, clinical validation, and regulatory submissions are aligned, preventing costly delays and rework down the line.

FDA Regulatory Decision Framework for AI Medical Devices

For founders and investors, the distinction between regulated SaMD and potentially exempt CDS software has profound implications for development timelines, costs, and market strategy. The following framework compares these two categories and introduces the role of a Predetermined Change Control Plan (PCCP) for managing regulated AI devices.

Comparison of Regulatory Frameworks for AI-Powered Medical Software
Characteristic	Software as a Medical Device (SaMD)	Clinical Decision Support (CDS) Software
Regulatory Status	Regulated by the FDA. Requires premarket review through pathways like 510(k), De Novo, or Premarket Approval (PMA).	Potentially exempt from medical device regulation under the 21st Century Cures Act if specific criteria are met.
Key Criteria	Performs a medical function (e.g., diagnosis, monitoring) and does not meet all criteria for CDS exemption. Classification is risk-based, depending on the healthcare situation.	Must allow healthcare professionals to independently review the basis for its recommendations and cannot be intended to process images or signals.
Implication for AI Updates	Post-market model updates are managed through a Predetermined Change Control Plan (PCCP) that is reviewed and approved by the FDA as part of the initial submission.	If exempt, software updates generally do not require FDA premarket review, though this raises concerns about potential over-reliance on unregulated tools.
Primary FDA Guidance	Governed by the FDA's overall framework for SaMD and specific guidance on AI/ML-based software and PCCPs.	Defined by the FDA's final guidance on Clinical Decision Support Software, issued in September 2022.