Cyber Resilience Act Response Center Request a demoDemo

Glossary Last updated

EU declaration of conformity

The EU declaration of conformity is the document with which the manufacturer assumes responsibility for conformity. It accompanies the product and must be kept for at least ten years.

The EU declaration of conformity is the declaration, signed by the manufacturer, that a product meets the requirements of the Regulation. With it, the manufacturer assumes sole responsibility for conformity.

Definition in the Regulation

Article 28 of Regulation (EU) 2024/2847 governs the declaration, and Annex V sets out its content. This includes the name and type of the product, the name and address of the manufacturer or authorised representative, a statement of sole responsibility and the object of the declaration. It also includes conformity with the relevant legislation, references to harmonised standards, common specifications or certifications applied, where applicable the name and number of the notified body, and the signature with place, date, name and function. Under Article 28(3), a single declaration of conformity must be drawn up where several EU legal acts apply. Article 13(12) requires the declaration once the conformity assessment has been completed, and paragraph 13 requires it to be kept for at least ten years after placing on the market or for the support period, whichever is longer. Paragraph 20 requires a copy, or a simplified declaration under Annex VI giving the internet address of the full version, to be provided with the product.

What it means for manufacturers

Machinery manufacturers know the declaration from the Machinery Regulation; under Article 28(3), the CRA is added to it rather than producing a second declaration. The declaration must accompany the product, not just be available on request (Article 13(20)). Importers and distributors check that it exists before selling (Article 19(2) and Article 20(2)). An authorised representative can keep it at the disposal of market surveillance authorities (Article 18(3)), but it must be drawn up by the manufacturer. The obligation applies to products placed on the market from 11 December 2027.

Free templatesCRA Reporting KitReporting playbook, awareness record, notification templates for the ENISA platform, call chain and deadline calculator. Six Word templates, two Excel workbooks and a handbook, free by e-mail.Request the kit

Learn more

The reporting obligation already applies. Who answers at night at your company?

CRA Response Center monitors your security mailbox, recognises important reports using AI hosted in Germany (your e-mails never go to OpenAI, Anthropic or Google) and alerts your people by SMS and e-mail. EUR 190 per month per domain including VAT. Try it free for 30 days.

Try it free for 30 days