Data Room for Medical Device Deals and Clinical Trials in Canada (2026)

How it works in Canada

Canada sorts medical devices into four risk classes. Class I devices need no device licence, but the manufacturer, importer or distributor usually needs a Medical Device Establishment Licence (MDEL). Class II to IV devices need a Medical Device Licence (MDL) from Health Canada before sale, and the evidence required rises with the class. A buyer of a Canadian device company will check every licence, its device class, any amendments and whether the quality system certificate behind it is current.

Device companies in Canada are often small and engineering-led, spun out of hospitals in Toronto, Montreal, Vancouver or Calgary. Their deals tend to be acquisitions by a larger US or European device group, a strategic investment tied to distribution, or a licence of the technology. The room is reviewed by regulatory consultants, quality auditors, clinical reviewers and engineers who want design history files, risk management files and complaint logs.

Clinical trial work adds a second use. Sponsors and contract research organizations use a room to share protocols, investigator files and ethics approvals across Canadian sites, and to keep an audit trail of what each site received. Research ethics boards at hospitals and universities review each study, and Health Canada must authorize investigational testing for Class II to IV devices before patients are enrolled.

Best data rooms for medical devices

Our five criteria, re-weighted for this use case, plus a small bonus for providers built around it.

1 Ellty ~C$211/mo
9.3 Visit Ellty
2 iDeals Quote
8.9
3 Datasite Quote
8.7
4 Intralinks Quote
8.7
5 Ansarada Quote
8.6
6 Firmex Quote
8.4
7 Drooms Quote
8.4
8 SmartRoom Quote
8.3
9 Box ~C$21/user/mo
8.0
10 DealRoom Quote
8.0

Privacy 28%Workflow 21%Control 24%Usability 14%Cost 14%

What goes in the data room

Medical devices: index

01
Licences and establishment licences
Every Medical Device Licence with class and amendments, the MDEL, and the Health Canada device listing records.
02
Quality management system
ISO 13485 certificate under MDSAP, audit reports, nonconformities and corrective actions with closure dates.
03
Design history and technical files
Design inputs and outputs, verification and validation, software documentation; restricted to named engineers.
04
Risk management
ISO 14971 risk files, hazard analyses and residual risk sign-offs for each device family.
05
Clinical evidence
Clinical evaluation reports, published studies, investigational testing authorizations and study results.
06
Ethics approvals and site files
Research ethics board approvals, consent form versions, site agreements and investigator CVs for each trial site.
07
Post-market surveillance
Complaint logs, mandatory problem reports to Health Canada, recalls and field safety notices.
08
Foreign approvals
FDA 510(k) or PMA files, EU MDR certificates and notified body reports if the device is sold abroad.
09
Reimbursement and customers
Hospital group purchasing contracts, provincial procurement awards and distribution agreements.
10
Intellectual property
Patents, design registrations, software copyright and inventor assignments from hospital clinicians.

Canadian rules that apply

Medical Devices Regulations

The regulations under the Food and Drugs Act set the four risk classes, the licence requirements for Class II to IV devices, establishment licences, mandatory problem reporting and recall duties. Buyers check each licence against the devices actually sold.

Quality system under MDSAP

Health Canada requires an ISO 13485 quality management system certificate issued under the Medical Device Single Audit Program for Class II to IV licences. An expired or suspended certificate puts every licence that relies on it at risk.

Investigational testing and ethics review

Clinical studies of Class II to IV devices need Health Canada authorization for investigational testing, plus approval from a research ethics board. Boards in Canada follow the Tri-Council Policy Statement (TCPS 2) for research involving humans.

Features to insist on

Data room	Activity log	Dynamic watermarks	Q&A module	In-room redaction
Ellty	Yes	Yes	Yes	No
iDeals	Yes	Yes	Yes	Yes
Datasite	Yes	Yes	Yes	Yes
Intralinks	Yes	Yes	Yes	Yes
Ansarada	Yes	Yes	Yes	No
Firmex	Yes	Yes	Yes	Yes
Drooms	Yes	Yes	Yes	Yes
SmartRoom	Yes	Yes	Yes	Yes

Activity log. Per-user history of opens, prints and downloads with timestamps, which you can export for the closing binder.
Dynamic watermarks. The reader's identity and the date are printed across every page, which discourages screenshots and identifies the source of a leak.
Q&A module. Bidders post questions inside the room; counsel or the CFO drafts the reply, someone approves it, and every exchange stays on file.
In-room redaction. Hide social insurance numbers, pay figures or client names on the platform itself, without keeping two versions of the file.

How to set it up

1
List devices against licences
Build a simple table of every device sold in Canada, its class, licence number and the quality certificate it relies on. Upload it at the top of the regulatory folder so the buyer can match each product to its authorization.
2
Restrict the design files
Design history files and source code are the core value of a device company. Limit them to named engineers on the buyer side, disable downloads and watermark every page so any leak can be traced to one account.
3
Clean clinical records
Strip patient names, health card numbers and dates of birth from clinical files and complaint records before upload. Keep re-identification keys with the sponsor and out of the room at all times.
4
Show the complaint history
Upload complaint logs, mandatory problem reports and recall records for at least the last five years. A buyer who finds a recall on its own will trust the rest of the room less.
5
Set up a trial site room
For a multi-site study, give each site its own folder with protocol versions, ethics approvals and site agreements. The audit trail then shows which version each site received and when.

Common mistakes

Selling a device under a licence for a different model or configuration, which surfaces quickly when the buyer checks listings.
Letting the MDSAP certificate lapse during the sale process.
Uploading complaint files that still name patients or clinicians.
Treating ethics board approvals as optional paperwork and losing the approval history for older studies.

FAQ

Does a Class I device company need a licence?

Class I devices do not need a Medical Device Licence, but the company that manufactures, imports or distributes them usually needs a Medical Device Establishment Licence. Some manufacturers that sell only through licensed importers or distributors are exempt. Put the MDEL, its annual review records and your distribution model in the room so a buyer can confirm which rule applies.

Can a data room be used to run a multi-site trial in Canada?

Yes, for document control. A room gives each site the current protocol, consent forms and ethics approvals, and the audit trail records who received each version. It does not replace an electronic data capture system for case report forms. Keep patient-level data in the validated trial system and use the room for the regulatory binder.

What do device buyers ask about most?

Licence coverage, quality system audit findings, complaint and recall history, and ownership of the technology. Hospital-based inventors are a frequent issue: if a clinician helped design the device, the buyer will ask whether the hospital or university has a claim under its IP policy. Upload the assignments and any hospital licence early.

Data room for medical device deals and clinical trials in Canada