Skip to content
AuCRA SecurityHub
Menu

Declaration of conformity drafter

This is a draft. You may not draw up the declaration until the conformity assessment has shown that your product meets the essential requirements in Annex I.

Preview

Annex V does not require one.

1Product identification

A batch or serial number, a software version, or anything else needed to identify the product uniquely.

2Manufacturer and authorised representative

An importer selling under its own name or trademark, or an importer or distributor that substantially modifies a product, is treated as the manufacturer.

A manufacturer may appoint an authorised representative established in the EU by written mandate, but does not have to. Fill these in only if you have one.

3Responsibility statement

This EU declaration of conformity is issued under the sole responsibility of the provider.

4Object of the declaration

Describe the product so that it can be traced. This tool cannot add a photograph; add one to your own copy where appropriate.

5Conformity statement

The object of the declaration described above is in conformity with the relevant Union harmonisation legislation: Regulation (EU) 2024/2847 (OJ L, 2024/2847, 20.11.2024). The fulfilment of the applicable essential cybersecurity requirements set out in Annex I to that Regulation has been demonstrated.

If another EU law also requires an EU declaration of conformity for this product, one declaration covers them all. List each law with its publication reference.

6Standards, common specifications and certification

List only what you applied, with full references. Every part of EN 40000 is still a draft, so none can be listed here as a harmonised standard.

Name the European cybersecurity certificate you rely on here.

7Notified body and procedure
Conformity assessment procedure used

Your product's class decides which procedures it can use. The product class finder shows the route for each class.

  • No notified body involved.

  • Starts with EU-type examination by a notified body.

  • Involves a notified body.

  • Where one is available and applicable. Name the certificate under item 6.

Its number or other identification.

8Additional information and signature

The company the signatory acts for.

Before you use the draft

  • Add the elements that your conformity assessment procedure requires under Annex VIII.
  • Update it as appropriate, and keep it, with the technical documentation, available to market surveillance authorities for at least 10 years after placing on the market or for the support period, whichever is longer. Support period planner

Sources: CRA Art. 28(2); CRA Art. 13(13); CRA Annex VIII

Simplified declaration and CE marking

With the product, you may supply either a copy of the full declaration or a simplified EU declaration of conformity in the form set out in Annex VI, which must give the exact internet address of the full declaration. This tool drafts only the full declaration.

Sources: CRA Art. 13(20); CRA Annex VI

Affix the CE marking before placing the product on the market, once the conformity assessment has shown conformity. Hardware carries it visibly, legibly and indelibly on the product, or on its packaging and this declaration where the product's nature makes that impossible or unwarranted; software carries it on this declaration or on its accompanying website. Under module H, the notified body's identification number follows it. This tool does not issue a CE marking or a certificate.

Sources: CRA Art. 13(12); CRA Art. 30

About this tool

Fill in the fields in order. Fields marked optional can stay empty; any other empty field prints as a blank line.

By drawing up the declaration, the manufacturer takes responsibility for the product's compliance.

Sources: CRA Art. 13(12); CRA Art. 28(1) and (4)

The declaration is drafted in English. You must make it available in the languages required by the Member State where the product is placed or made available on the market.

Sources: CRA Art. 28(2)

This tool runs in your browser. Nothing you enter is sent anywhere. Your entries are saved in this browser only.

  1. Annex V, item 1: Name and type and any additional information enabling the unique identification of the product with digital elements

  2. Annex V, item 2: Name and address of the manufacturer or its authorised representative

    Sources: CRA Art. 18(1)

  3. Annex V, item 3: A statement that the EU declaration of conformity is issued under the sole responsibility of the provider

  4. Annex V, item 4: Object of the declaration (identification of the product with digital elements allowing traceability, which may include a photograph, where appropriate)

  5. Annex V, item 5: A statement that the object of the declaration described above is in conformity with the relevant Union harmonisation legislation

    Sources: CRA Annex V; CRA Art. 28(1) and (3)

  6. Annex V, item 6: References to any relevant harmonised standards used or any other common specification or cybersecurity certification in relation to which conformity is declared

  7. Annex V, item 7: Where applicable, the name and number of the notified body, a description of the conformity assessment procedure performed and identification of the certificate issued

    Sources: CRA Art. 32; CRA Art. 30(4)

  8. Annex V, item 8: Additional information: / Signed for and on behalf of: / (place and date of issue): / (name, function) (signature):