How to obtain the CE marking
The CE marking signals that a product with digital elements meets the requirements of the Cyber Resilience Act. Here is the route from essential requirements to a marked, declared product.
Determine class & routeArt. 6–7
Establish the product class first; it sets the conformity route and everything that follows. Most products are default and may self-assess. The important categories are named in Annex III (Class I and II) and the critical categories in Annex IV; if your product is listed there, a stricter route applies.
Check whether your product is named in Annex III (important) or Annex IV (critical). If it appears in neither, it is a default product and may self-assess; the CRA Fast Check walks you through this.
Meet the essential requirementsAnnex I
Design and build the product to satisfy the Annex I security properties and operate a vulnerability-handling process. Map and tick off every requirement in the compliance matrix.
Compile technical documentationAnnex VII
Assemble the technical file; product description, risk assessment, design information and applied standards; and keep it for ten years.
Carry out the conformity assessmentArt. 32
Run the procedure for your class: internal control for default products, standards or a notified body for important products, certification for critical ones.
Draw up the EU declaration of conformityAnnex V
Complete and sign the declaration stating that the product meets the requirements. Keep it with the technical documentation.
Affix the CE markingArt. 30
Apply the CE marking before placing the product on the market. Where a notified body was involved, follow it with the body's identification number.
The CE marking must be visible, legible and indelible. Where this is not possible due to the nature of the product, it may be placed on the packaging and in the accompanying documents.
Get the groundwork in place
Confirm your class
Run the CRA Fast Check to establish scope and class before choosing a route.
Track the requirements
Use the compliance matrix to map and tick off every Annex I requirement.
Estimate the cost
See an indicative figure for reaching compliance for your class.