IN BRIEF
The manufacturer draws up technical documentation before market placement and keeps it available to market surveillance authorities. Annex VII describes its minimum elements.
01 / 02
Connect claims to evidence
Link the product description and intended purpose to cybersecurity risk assessment, design decisions, measures taken for Annex I, test results and conformity information.
- Product and version identification
- Risk assessment and mitigations
- Design, development and verification evidence
- User information and support-period details
- Conformity assessment and declaration records
02 / 02
Maintain the record
Keep evidence usable as components change, vulnerabilities are resolved and updates are released. Consult Annex VII for the precise required elements.
REFERENCE DESK
Official sources
Read the full legal text and Commission material for precise wording, qualifications and updates.
Editorial review: 26 September 2026. Regulatory material can change; follow the official sources for current guidance.