Declaration, documentation, CE: the formal part of the CRA

The EU declaration of conformity

It names the product, the manufacturer, the requirements met, the standards or specifications applied and, where relevant, the notified body. If further EU law applies to the product, a single declaration is drawn up for all acts. A simplified declaration referring to the full version is possible.

The technical documentation

Description of the product and its development, the cybersecurity risk assessment, the SBOM, information on vulnerability handling, test reports and the support period set. Retention: at least ten years or the support period, whichever is longer.

The CE marking

Visible on the product or, where that is not possible, on the packaging and in the declaration; for software in the declaration or on the accompanying website. With the notified body's number if one is involved.