Methodology: how the register is built

The source

Each of the 63 requirement lines — 31 from the Machinery Regulation (EU) 2023/1230, 32 from the Cyber Resilience Act (EU) 2024/2847 — is derived from the text published in the Official Journal and carries its article or annex reference. No line without a source.

The synergies

Where a Machinery Regulation requirement and a CRA requirement pursue the same goal — such as protection against corruption and safe control systems — the register links both lines. The manufacturer demonstrates that one piece of evidence covers both; normakte makes the link visible.

No AI decisions

normakte does not decide automatically whether a requirement is met. The manufacturer sets applicability, status and evidence; every change stays traceable with version and checksum.

Updates

When the legal situation changes — through Commission guidance, a corrigendum or new harmonised standards — the register is updated and the change is recorded here with its date.

Who is behind it

normakte is developed and operated by ITG Suisse Sagl in Lugano, Switzerland. normakte is neither an engineering firm nor a notified body: the register organises the legal requirements, the technical assessment stays with the manufacturer.

Open dataset

The complete register – 63 lines with legal reference, title and typical evidence in five languages, plus the links between the two regulations – is freely available under the CC BY 4.0 licence: requirements.json · requirements.csv · GitHub