DiGA development header background

DiGA development: from the idea to the BfArM directory

The BfArM fast track assesses the application. Listing in the DiGA directory is the institute’s decision, not the vendor’s.

3 monthsreview after a complete application
I, IIa, IIbclasses that can be listed
€0.84daily threshold from 1 Oct 2026
Nolisting by us

What a DiGA is, and what it is not

img

A DiGA is a medical device that insured people use to detect, monitor, treat, or alleviate a disease. Section 33a of the German Social Code, Book V, defines it, and the DiGAV sets the assessment. Reimbursement by the sickness fund starts only when the application is listed in the BfArM DiGA directory. A wellness app without a medical purpose, software used only by the practice, and a class III device are not a DiGA.

DiGA development here means building the application and preparing the technical file. The manufacturer files the application. The BfArM decides. The guide, dated 10 December 2025, version 3.6, is published by the BfArM. The requirements are in the DiGAV.

Requirements for listing

Four conditions have to be in place before the application. If one is missing, the BfArM three-month clock does not start.

CEbefore filing

Medical device

The application needs a completed conformity assessment. Classes I, IIa, and IIb can be a DiGA. Class III cannot. Classes IIa and IIb involve a notified body.

Useris the patient

Used by insured people

The DiGA supports the insured person, alone or together with the treating provider. Software that only serves the practice or the hospital does not meet this condition.

Effectshown or planned

Positive care effect

A positive care effect is a medical benefit or a patient-relevant improvement in structure and process. Permanent listing needs the proof. Provisional listing for the lower classes needs an evaluation concept.

DiGAVsections 3 to 6

Product properties

Privacy, data security, and interoperability must be evidenced with the application. Those duties do not fall away because the care effect will be shown only during the trial period.

A project from our work

Connect with students for live 1-on-1 college insights and tours

img

EXPERTISE

Education

TECHNOLOGIES

React

Redux

Redux-Saga

Express

PostgreSQL

InversifyJS

Braintree

Amazon Web Service

Paypal

After listing: price negotiation and operation

Price in the first year

Price in the first year

In the first year the manufacturer sets the price. Group caps and the threshold published by the National Association of Statutory Health Insurance Funds limit it. From 1 October 2026 the threshold is €0.84 per calendar day including VAT, in force until 31 March 2027.

Price in the first year

Price in the first year

In the first year the manufacturer sets the price. Group caps and the threshold published by the National Association of Statutory Health Insurance Funds limit it. From 1 October 2026 the threshold is €0.84 per calendar day including VAT, in force until 31 March 2027.

Agreed price after that

Agreed price after that

After the first year the manufacturer and the association agree a reimbursement amount. If they do not agree, the arbitration board sets it. The published caps fall after more than 2,000 and after more than 10,000 redeemed activation codes.

Changes are notified

Changes are notified

The manufacturer notifies the BfArM of significant changes to a listed application. The risk class remains an MDR question. That classification is covered on software as a medical device.

The app itself

The app itself

We build the application, accounts, history, and activation in the project. That scope is custom mHealth app development. Listing does not replace the build.

Not every therapy app

Not every therapy app

Digital therapeutics without the German reimbursement path are not a DiGA. That wider scope is digital therapeutics development.

Operation without a listing promise

Operation without a listing promise

We do not promise a listing and we do not lower the evidence requirements. Interfaces to the record are a separate topic. The German page planned for that scope is Interoperabilität im Gesundheitswesen.

The BfArM fast track, step by step

Each line names the step, the deadline in the BfArM guide of 10 December 2025, and who is responsible. The deadlines are not a promise of listing.

Step 01

Set the intended purpose

Before filing, the manufacturer defines which disease the application addresses and which class applies. Classes I, IIa, and IIb can be a DiGA. Class III cannot.

WhoManufacturer

Step 01

Set the intended purpose

Before filing, the manufacturer defines which disease the application addresses and which class applies. Classes I, IIa, and IIb can be a DiGA. Class III cannot.

WhoManufacturer

Step 02

Finish CE marking

Conformity assessment must be complete before the application arrives. For classes IIa and IIb a notified body assesses it. Section 3 of the DiGAV treats the CE mark as proof of safety and performance.

WhoManufacturer

Step 03

Evidence the properties

Privacy, BSI security requirements, and interoperability are filed with the application. From 1 January 2025 a BSI certificate shows data security. The BfArM has set the privacy test criteria since 1 August 2024.

WhoManufacturer

Step 04

Effect or concept

Permanent listing needs proof of a positive care effect. Provisional listing for the lower classes needs an evaluation concept. Class IIb needs the medical benefit with the application.

WhoManufacturer

Step 05

File the application

The manufacturer files in the portal and chooses permanent or provisional listing. The BfArM runs the procedure under section 139e of the Social Code, Book V. An incomplete first filing does not start the review clock.

WhoManufacturer to BfArM

Step 06

Make the file complete

If documents are missing, the BfArM asks for them. The deadline for that is up to three months. Only the complete application starts the review period.

WhoBfArM and manufacturer

Step 07

Assess the application

The BfArM assesses a complete application in three months. In justified cases it can extend the period by up to three further months. The extension is the institute’s decision.

WhoBfArM

Step 08

Decision and trial

The decision is permanent listing, provisional listing, or rejection. The trial lasts at most twelve months and can be extended once, twenty-four months in total. The manufacturer requests the extension at least three months before the period ends.

WhoBfArM, then manufacturer

The BfArM clock starts only when the application is complete.Review the file

What the BfArM checks

The left column is the DiGAV requirement, the middle is the evidence, the right is who supplies it. The table follows the guide. It is not a decision.

Requirement
EvidenceCheck
Who supplies it
Safety and performance
CE marking under the MDR, assessment completed
Manufacturer, with a notified body for IIa and IIb
Privacy
GDPR, consent, purpose limitation, BfArM test criteria
Manufacturer, with the application
BSI security requirements
Data security under section 139e (10) SGB V, BSI certificate
Manufacturer; the BSI issues the certificate
Interoperability
Export in interoperable formats and into the electronic patient record
Manufacturer under DiGAV sections 5, 6, and 6a
Positive care effect
Comparative study or, for a trial listing, an evaluation concept
Manufacturer, study under a protocol
Medical benefit
For class IIb, already with the application, not only during the trial
Manufacturer
Structure and process improvement
Patient-relevant alternative to benefit; for IIb only in addition
Manufacturer
DiGA directory
Decision on permanent or provisional listing
BfArM
  • No ranking, only the requirement that is checked
  • Evidence under the DiGAV, not a score
  • Without the evidence there is no listing decision
A missing requirement stops the application, even if the app already runs.Map the requirements

Timeline and cost

The periods come from the BfArM guide of 10 December 2025. The amount is the published threshold of the statutory-fund association, not a quote from WTT and not a development budget.

BfArM guide

Review

3 months

after a complete application

  • Supplements: up to three months
  • Extension: up to three further months
  • The clock starts only when the file is complete
  • Version 3.6 of 10 December 2025
  • No price list for listing
Place the deadline

Trial

12 months

provisional listing

  • Extendable once by up to twelve months
  • Cap of 24 months including the review
  • Extension request at least three months prior
  • Class IIb: this path does not apply
  • Class IIa: a concept can be enough
Choose the path

Threshold

€0.84

per day, 1 Oct 2026 to 31 Mar 2027

  • Published by the fund association
  • Including VAT
  • First year: manufacturer price within the caps
  • Then an agreed reimbursement amount
  • Not the development budget
Read the price path

What clients say

INDUSTRY RECOGNITION

USA
carousel-img
Lia AranUSAUSA

Luklabs

Acting CEO

The team is smart, creative, nice, calm, and professional, and they are problem solvers.
WTT Solutions paid attention to details. Most of their first iterations were very close to our intended designs. Consequentially, we didn’t have to do a ton of revisions in the QA phase.
I greatly enjoyed working with them.

Requirements for privacy, security, and interoperability

Sections 4 to 6 of the DiGAV apply in addition to the CE mark. From 1 January 2025 the BSI security requirements replace the earlier data-security annex. The source is the DiGAV.

Privacy

Privacy

Personal health data need consent under GDPR Article 9(2)(a) and a narrow purpose limitation. The BfArM has set the test criteria for this since 1 August 2024.

BSI security requirements

BSI security requirements

The manufacturer shows data security with a certificate from the Federal Office for Information Security. We do not issue that certificate.

Interoperability

Interoperability

The application must export processed data in interoperable formats. The benchmark is the specification for the electronic patient record. Until that exists, recognised open standards apply.

Export into the record

Export into the record

Section 6a of the DiGAV requires export into the electronic patient record, in a human-readable form and under the current semantic and syntactic specification.

The duties stay

The duties stay

We do not lower the requirements for privacy, security, and interoperability. If a piece of evidence is missing, the application stays incomplete.

Proof of positive care effects

01

Two kinds of effect

Two kinds of effect

Section 8 of the DiGAV recognises medical benefit and a patient-relevant improvement in structure and process. Either can carry the positive care effect. For class IIb the benefit has to be included.

02

Comparative study

Comparative study

For the medical benefit of a higher class, the DiGAV requires a prospective comparative study. Where suitable comparative data do not exist, the same applies to the care effect more broadly.

03

A 90-day example

A 90-day example

An example of the design, not a completed study: class IIa, two arms, DiGA plus usual care versus usual care alone, 90 days of use, endpoint on day 90.

04

Registration and publication

Registration and publication

The study is registered before the first enrolment and published in full. The BfArM receives the design and the results. This page does not set a sample size. The protocol does.

05

Class IIb has no trial listing

Class IIb has no trial listing

Provisional listing is not provided for class IIb. The study of medical benefit is already attached to the application. The BfArM states this in its DigiG questions.

06

A concept is not a waiver

A concept is not a waiver

The evaluation concept for provisional listing describes how the proof will be produced. It does not cancel the study. If the effect is not shown, the listing ends.

MDR classification of a DiGA

Since the Digital Act, classes I, IIa, and IIb can be a DiGA. Class III cannot. This summary follows the BfArM questions on class IIb and can change.

class i

Class I

The lower class. Provisional listing for a trial remains possible when the other requirements are met and an evaluation concept is sufficient.

class iia

Class IIa

A notified body completes the conformity assessment before the application is filed. Provisional listing can still be open here.

class iib

Class IIb

Medical benefit must be shown with the application. A patient-relevant improvement in structure and process can be added. It does not replace the benefit.

class iii

Class III

The DiGA directory does not list class III devices. Naming another class in the application does not change the intended purpose.

ce first

CE first

For IIa and IIb the conformity assessment must be finished at filing, and the product must be able to be placed on the market.

notified body

Notified body

Classes IIa and IIb go through a notified body. That body does not grant the listing in the DiGA directory.

intended purpose

Intended purpose

The class follows from the intended purpose under the MDR. It is not chosen because one class makes the fast track look shorter.

the manufacturer stays the manufacturer

The manufacturer stays the manufacturer

We build the software. The manufacturer under the MDR, and the applicant at the BfArM, remains the company that places the product on the market.

DIGITAL

ceo
img

Unleash the power of intelligent data and deliver personalized and omnichannel experiences to your customers through digital platform development services

Example of a comparative study

An example of the design, not a completed study and not a result: a class IIa DiGA, a prospective comparative study with two arms, DiGA plus usual care versus usual care alone, use over 90 days, a patient-relevant endpoint on day 90, registration before the first enrolment. That is how section 10 of the DiGAV describes the proof. The protocol sets the sample size. The guide is published by the BfArM, and the caps by the statutory-fund association.

AI & ML
OpenAIOpenAI
Google GeminiGoogle Gemini
Anthropic ClaudeAnthropic Claude
LangChainLangChain
LlamaIndexLlamaIndex
Perplexity APIPerplexity API
RAG / Pinecone / QdrantRAG / Pinecone / Qdrant
Frontend
ReactReact
Next.jsNext.js
TypeScriptTypeScript
VueVue
Nuxt.jsNuxt.js
SvelteSvelte
Tailwind CSSTailwind CSS
Backend
Node.jsNode.js
PythonPython
.NET.NET
NestJSNestJS
FastAPIFastAPI
ExpressExpress
DjangoDjango
Data & Storage
PostgreSQLPostgreSQL
MySQLMySQL
MongoDBMongoDB
RedisRedis
DevOps & Infrastructure
DockerDocker
KubernetesKubernetes
TerraformTerraform
GitHub ActionsGitHub Actions
Mobile & Desktop
React NativeReact Native
FlutterFlutter
ExpoExpo
PythonPython
WPFWPF
img
img

Hi, I’m Serge!
CEO & Co-founder at WTT Solutions
Do you have a new project? Or want to say "Hello"...

Here’s how you can get in touch

Questions on DiGA development

+

How long does it take to list a DiGA?

The BfArM assesses a complete application in three months. In justified cases it can extend that period by up to three months. Incomplete documents must be supplemented within up to three months. Provisional listing for a trial lasts at most twelve months and can be extended once, twenty-four months in total. The period is the guide, not a promise.
+

What evidence does the BfArM require?

The BfArM checks safety, performance, privacy, data security, and interoperability under the DiGAV. Permanent listing also needs proof of a positive care effect: medical benefit or a patient-relevant improvement in structure and process. For class IIb the medical benefit must already be with the application. Provisional listing rests on an evaluation concept. That does not remove the proof.
+

What does it cost to develop a DiGA?

There is no list price for the development. The effort follows from the risk class, the documentation, and the comparative study. That study is the largest block and sits with the manufacturer. Reimbursement by the sickness fund is the manufacturer’s price in the directory, not the development budget. Since 1 October 2026 the threshold is €0.84 per calendar day.
+

Is every health app a DiGA?

No. A DiGA is a medical device that insured people use to detect, monitor, treat, or alleviate a disease. A wellness app without a medical purpose is not a DiGA. Neither is practice software that only serves the organisation. Class III is excluded. Reimbursement by the sickness fund starts only after listing in the BfArM DiGA directory.