Draw up an EU Declaration of Conformity containing all required information
- Applies to
- Manufacturer
- Source citations
- Art. 28Art. 13(12)Art. 13(20)Annex VAnnex VI
- Product classes
- DefaultImportant — Class IImportant — Class IICritical
The EU Declaration of Conformity is the formal legal document in which you, as manufacturer, declare that your product meets all applicable CRA requirements. It must follow the Annex V template, include the product ID, your name and address, the standards or specifications you relied on, and notified body details if applicable. You must make it available to authorities for at least 10 years. You can provide a shorter summary (Annex VI) in the product box if you link to the full document online.
Legal text
Article 28(1) of Regulation (EU) 2024/2847:
The EU declaration of conformity shall be drawn up by manufacturers in accordance with Article 13(12) and state that the fulfilment of the applicable essential cybersecurity requirements set out in Annex I has been demonstrated.
Article 28(2):
The EU declaration of conformity shall have the model structure set out in Annex V and shall contain the elements specified in the relevant conformity assessment procedures set out in Annex VIII. Such a declaration shall be updated as appropriate. It shall be made available in the languages required by the Member State in which the product is placed on or made available on the market.
Article 28(4):
By drawing up the EU declaration of conformity, the manufacturer assumes responsibility for the compliance of the product with digital elements.
Required content — Annex V
The EU DoC must contain all of the following:
| # | Element |
|---|---|
| 1 | Name, type, and identification information for the product |
| 2 | Name and address of the manufacturer or authorised representative |
| 3 | Statement that the EU DoC is issued under the sole responsibility of the manufacturer |
| 4 | Object of the declaration (identification allowing traceability, photograph if appropriate) |
| 5 | Statement that the product is in conformity with the relevant Union harmonisation legislation |
| 6 | References to harmonised standards, common specifications, or cybersecurity certification relied upon |
| 7 | Where a notified body was involved: its name, number, description of procedure performed, and certificate issued |
| 8 | Signed for and on behalf of: place, date, name, function, signature |
Simplified EU DoC (Annex VI)
Where a manufacturer provides a simplified EU DoC alongside the product (Art. 13(20)), it must:
- State: "Hereby, [manufacturer name] declares that the product with digital elements type [designation] is in compliance with Regulation (EU) 2024/2847"
- Include the exact internet address at which the full EU DoC can be accessed
Multi-legislation products
Where a product is subject to more than one Union legal act requiring an EU DoC (e.g. also covered by the Radio Equipment Directive), a single EU DoC may cover all legal acts. The DoC must identify all applicable legal acts and their publication references.
Storage obligation
The manufacturer must keep the EU DoC available to market surveillance authorities for at least 10 years after the product has been placed on the market or for the support period, whichever is longer (Art. 13(13)).
Authorised representatives
An authorised representative may keep the EU DoC at the disposal of market surveillance authorities on behalf of the manufacturer (Art. 18(3)(a)).