https://compliantbook.com/ EU product compliance, explained and documented. en Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-cyber-resilience-act/ https://compliantbook.com/eu-cyber-resilience-act/ What the Cyber Resilience Act requires, who it covers, and what you must produce by 11 December 2027. From the regulation itself. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-cyber-resilience-act/does-it-apply-to-me/ https://compliantbook.com/eu-cyber-resilience-act/does-it-apply-to-me/ The CRA scope test in three questions, the exclusions, and the four edge cases that cause most of the confusion. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-cyber-resilience-act/annex-vii-technical-documentation/ https://compliantbook.com/eu-cyber-resilience-act/annex-vii-technical-documentation/ Annex VII section by section: what each of the eight requirements means, and what an assessor expects to find. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-cyber-resilience-act/commission-guidance-explained/ https://compliantbook.com/eu-cyber-resilience-act/commission-guidance-explained/ The Commission’s first CRA guidance, 27 July 2026: what its 67 examples clarify, and what it deliberately leaves to you. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-cyber-resilience-act/article-14-reporting/ https://compliantbook.com/eu-cyber-resilience-act/article-14-reporting/ CRA reporting started on 11 September 2026. What triggers a report, who you notify, and what each deadline requires. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-cyber-resilience-act/declaration-of-conformity/ https://compliantbook.com/eu-cyber-resilience-act/declaration-of-conformity/ The eight Annex V elements a CRA declaration of conformity must contain, who signs it, and the common mistakes. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-cyber-resilience-act/module-a-self-assessment/ https://compliantbook.com/eu-cyber-resilience-act/module-a-self-assessment/ When you can self-assess under the CRA, when you cannot, and what Module A internal control actually obliges you to do. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-cyber-resilience-act/open-source/ https://compliantbook.com/eu-cyber-resilience-act/open-source/ Non-commercial open source is excluded from the CRA. Where the line falls for maintainers, stewards and vendors. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-cyber-resilience-act/sbom-requirements/ https://compliantbook.com/eu-cyber-resilience-act/sbom-requirements/ What the CRA actually requires of an SBOM: format, depth, who sees it, and how it fits the Annex VII technical file. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-cyber-resilience-act/important-and-critical-products/ https://compliantbook.com/eu-cyber-resilience-act/important-and-critical-products/ The full Annex III Class I and Class II lists and the Annex IV critical products, with the route each one forces. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-cyber-resilience-act/timeline/ https://compliantbook.com/eu-cyber-resilience-act/timeline/ Every CRA date that matters, from entry into force to full application on 11 December 2027, and what to finish by each. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-cyber-resilience-act/penalties/ https://compliantbook.com/eu-cyber-resilience-act/penalties/ The three CRA penalty bands, which breaches fall in each, and the enforcement powers that matter more than fines. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-machinery-regulation/ https://compliantbook.com/eu-machinery-regulation/ Regulation (EU) 2023/1230 replaces the Machinery Directive on 20 January 2027. Scope, what changed, and what to do now. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-machinery-regulation/technical-file/ https://compliantbook.com/eu-machinery-regulation/technical-file/ What Annex IV of Regulation (EU) 2023/1230 requires in a machinery technical file, and how to organise it to survive audit. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-machinery-regulation/declaration-of-conformity/ https://compliantbook.com/eu-machinery-regulation/declaration-of-conformity/ What Annex V requires in a machinery declaration of conformity, and how the declaration of incorporation differs. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-machinery-regulation/high-risk-machinery-annex-i/ https://compliantbook.com/eu-machinery-regulation/high-risk-machinery-annex-i/ The six Annex I Part A categories that force a notified body, and the Part B list where self-assessment survives. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-machinery-regulation/directive-to-regulation-transition/ https://compliantbook.com/eu-machinery-regulation/directive-to-regulation-transition/ Directive 2006/42/EC against Regulation (EU) 2023/1230: what changed, what survives, and what must be rewritten. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/eu-machinery-regulation/risk-assessment/ https://compliantbook.com/eu-machinery-regulation/risk-assessment/ The iterative method, the three-step hierarchy of protective measures, and what the written record has to show. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/technical-file/ https://compliantbook.com/technical-file/ A technical file is the evidence that your product meets EU law. What it is, what goes in it, and how long to keep it. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/technical-file/ce-marking/ https://compliantbook.com/technical-file/ce-marking/ What CE marking legally means, the size and placement rules, who may affix it, and the mistakes that invalidate it. Fri, 11 Sep 2026 13:22:25 GMT https://compliantbook.com/technical-file/authorised-representative/ https://compliantbook.com/technical-file/authorised-representative/ When a non-EU manufacturer needs an authorised representative, what the mandate must cover, and what cannot be delegated. Fri, 11 Sep 2026 13:22:25 GMT