Compliant Book

CRA Annex VII technical file template

The complete Annex VII structure, so the only work left is describing your product.

€149  ·  DOCX, XLSX, Markdown and a PDF guide

Releasing soon — join the list below for launch pricing

What is inside

  • Annex VII master document (DOCX) — all eight required sections in order, each with a guidance note explaining what an assessor is looking for and what a thin answer looks like.
  • Annex I requirement-to-evidence index (XLSX) — every Part I essential requirement and every Part II vulnerability handling requirement as a row, with columns for the evidence, the responsible owner, the status and a not-applicable justification.
  • Cybersecurity risk assessment template — threat identification keyed to intended and reasonably foreseeable use, risk estimation, and the mapping from risk to the requirement it drives.
  • Support period determination worksheet — the factors to weigh, with space for the reasoning behind the period chosen. Annex VII requires the information taken into account; this is where it lives.
  • Vulnerability handling process description — SBOM policy, coordinated disclosure policy, secure update mechanism description and the contact address evidence.
  • Standards and specifications register — dated references mapped to requirements.
  • Worked example — a fictional connected device, completed end to end, so you can see the level of detail expected rather than guessing at it.
  • Markdown version of the whole set, for teams that keep documentation in a repository alongside the code.

Who it is for

Manufacturers of products with digital elements preparing for 11 December 2027 — particularly software vendors and connected-hardware companies self-assessing under Module A, who have no notified body to tell them whether the file is adequate.

What it does not do

This is a document template, not advice and not a certificate. It does not perform your conformity assessment, carry out your risk assessment, or test your product. Compliance remains the responsibility of the manufacturer. Full disclaimer →

Licence

One organisation, unlimited internal use, unlimited products, perpetual, adaptable. No resale, redistribution or publication; no use to produce documentation as a service for third parties without a consultancy licence. Full terms →

Format and delivery

DOCX, XLSX, Markdown and a PDF guide. Delivered as an immediate download link after payment, with a second copy by email. No account to create, no login, nothing to install. Updates for twelve months are included and are sent to the email address used at purchase.