Agent WranglersCMP-51Recommended EU law
Prepare the technical file and CE marking
From 11 December 2027, each covered product needs a technical file, an EU declaration of conformity and a CE marking. Keep them for ten years or the support period, whichever is longer.
Region
European Union (EU). The duty comes from the law there. The rule applies only when the project serves people there, and its Applies when also holds.
How to do it
The technical file describes the product, its risk assessment, how it meets Annex I, its bill of materials and its support period. Default class products may use self-assessment. Important class II and critical products need a notified body or a certification scheme. Generate as much of the file as you can from the build, such as the bill of materials and the test reports. The component list comes from the software bill of materials.
How to check
The release pipeline fails for a covered product when its technical file, declaration of conformity or CE marking file is missing. The storage lock on those files is at least ten years and at least the support period.
Sources
Related rules
- APS-75 Publish what is in each release in Application security
- IOT-39 Keep a bill of materials for every firmware image in Connected devices
- IOT-35 Publish the support end date for every model in Connected devices
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/compliance/security-laws/cra-technical-file">Agent Wranglers compliance and governance playbook</a>. In code you write, add a comment next to it with the same link.