CRA knowledge base

Conformity assessment & CE

Modules A/B+C/H, technical documentation, CE marking, declaration of conformity, notified bodies.

← Back to the FAQ overview

All questions in this topic

What is module A (self-assessment) and how does it work?

Under internal module A (Annex VIII Part I) the manufacturer verifies and declares conformity on its own responsibility – without a notified body. Permitted for most default products.

Source: European Commission · FAQ 6.1 Official EU FAQ (original text)

What is module B+C and how does it work?

A notified body examines the design/development phase (EU type-examination, module B); the manufacturer then declares production conformity with the approved type (module C).

Source: European Commission · FAQ 6.2 Official EU FAQ (original text)

What is module H and how does it work?

Module H relies on a full quality management system ensuring conformity in design and production; a notified body assesses and monitors the system.

Source: European Commission · FAQ 6.3 Official EU FAQ (original text)

Must manufacturers ensure conformity of “existing” product types?

The CRA applies to individual units placed on the market from its date of application. Legacy types/models are not exempt once new units are placed on the market after that date.

Source: European Commission · FAQ 6.4 Official EU FAQ (original text)

Which evaluation methodology must a manufacturer apply?

The CRA mandates no specific methodology (incl. testing). Applying relevant harmonised standards or technical specifications is common practice.

Source: European Commission · FAQ 6.5 Official EU FAQ (original text)

What is the technical documentation?

It contains the elements listed in Annex VII and demonstrates conformity. It is not merely internal but can be requested by market surveillance authorities.

Source: European Commission · FAQ 6.6 Official EU FAQ (original text)

What is the CE marking?

A visible self-declaration by the manufacturer that the product complies with all applicable NLF legislation – in particular the CRA. It is addressed to consumers and authorities.

Source: European Commission · FAQ 6.7 Official EU FAQ (original text)

What is the declaration of conformity?

A document in which the manufacturer declares CRA conformity and assumes responsibility for it. It must accompany the product placed on the market.

Source: European Commission · FAQ 6.8 Official EU FAQ (original text)

What are notified bodies?

Private or public bodies that examine products for CRA conformity. Their competence is assessed by Member States’ notifying authorities; the list is on the NANDO system.

Source: European Commission · FAQ 6.9 Official EU FAQ (original text)

When will harmonised standards supporting CRA compliance be ready?

Standardisation request M/606 to CEN, CENELEC and ETSI foresees horizontal (product-agnostic) and vertical (product-specific) standards; these are being developed step by step.

Source: European Commission · FAQ 6.10 Official EU FAQ (original text)

Topic blocks

Summarised and translated from the European Commission’s “FAQs on the Cyber Resilience Act” (v1.2, 16 January 2026), licensed under CC BY 4.0. Simplified by Lehner & Szecsey – the original text prevails. Official EU FAQ (original text).