Kilde › Guides › CRA › The CRA's paperwork layer: which annex…
Current to 26 August 2026 · updates land in the changelog.
By full application, every in-scope product carries a document set — and the CRA's annexes map it precisely. Knowing which annex holds what turns “CRA documentation” from a fog into a checklist of four artifacts.
| Artifact | Where | What it is |
|---|---|---|
| Technical documentation | Annex VII | The evidence file behind the product: design, development, vulnerability handling, risk assessment — the thing assessments and authorities actually read. |
| EU declaration of conformity | Annex V | The formal claim of compliance, drawn up per product. |
| Simplified DoC | Annex VI | The short form that can accompany the product, pointing to the full declaration. |
| Assessment modules | Annex VIII | The conformity procedures (Module A internal control; B+C; H) that your class selects among. |
Notified bodies can stand up from 11 December 2026 (the conformity-assessment-body chapter), and the full obligation set — documentation, assessment, CE marking — applies from 11 December 2027. With Class I's self-assessment route closed until harmonised standards are cited, documentation quality is what determines whether a third-party engagement runs in weeks or quarters.
Two absences worth planning around, both tracked in our updates feed: the Article 33(5) simplified technical-documentation form for SMEs is provided for but not adopted — when it ships, it will reshape how small manufacturers structure the Annex VII file — and SMEs already have a statutory softener in proportionately reduced conformity-assessment fees (Article 32(6)). Documentation built now against the Annex VII headings ports cleanly into whatever the SME form looks like; documentation deferred until 2027 does not.
The CRA Reporting-Ready Pack: the staged 24h / 72h / final-report runbook and templates, vulnerability-vs-incident triage worksheet, CSIRT-routing and main-establishment worksheet, platform registration runbook, CVD policy and evidence log — built from the regulation and the ENISA platform guides, with pinpoint citations.
Get the pack — US$390 Free 4-page sample (PDF)Instant download · 14-day unconditional refund · single-organisation licence · full product page
General information only — not legal advice, and never a conformity assessment. Whether a specific product falls in a listed category is decided against the binding technical descriptions in Implementing Regulation (EU) 2025/2392, and reporting-platform mechanics are ENISA-published material marked subject to change. Sources are Regulation (EU) 2024/2847 (CELEX 32024R2847; Annex III/IV item texts read verbatim from EUR-Lex) and our audited kit research. © 2026 Kilde.
Built by Kilde's founder, a practising attorney admitted to a US state bar (not an EU or Hong Kong admission). About · Verification log · Refunds · Terms · Privacy · esau@trykilde.com