Skip to main content

Simplified EU Declaration of Conformity (Annex VI) for Software

The Cyber Resilience Act (CRA) recognizes that providing a full, multi-page EU Declaration of Conformity (DoC) directly with every copy of your app or game might be cumbersome. That's why it offers the option of a Simplified EU Declaration of Conformity.

Purpose of the Simplified DoC​

Article 13, Paragraph 20, allows manufacturers to provide this abridged version with their product instead of the full DoC. Its main purpose is to give users and authorities an immediate, concise statement of compliance and, crucially, direct them to where the complete information can be found.

What Must It Contain? (Annex VI)​

Annex VI of the CRA provides the model structure for the simplified DoC. It's very straightforward. For your software, it should state:

"Hereby, … [name of manufacturer] declares that the product with digital elements type … [designation of type of product with digital element, e.g., your app name and version] is in compliance with Regulation (EU) 2024/2847. The full text of the EU declaration of conformity is available at the following internet address: … [your exact website link to the full DoC]".

Key Requirements​

  • Manufacturer's Name: Clearly identify who is making the declaration.
  • Product Identification: Unambiguously identify the specific software product and version it refers to.
  • Statement of Compliance with CRA: Explicitly state compliance with "Regulation (EU) 2024/2847".
  • The Crucial Link: You must provide the exact internet address (URL) where the full EU Declaration of Conformity can be accessed. This link needs to be stable and lead directly to the complete DoC.

Language​

Just like the full DoC, the simplified version must be available in the languages required by the Member State where your software is made available (Article 28, Paragraph 2, applies to the DoC in general).

Key Takeway​

The simplified DoC (Annex VI) is a concise way to declare your software's CRA compliance with the product itself. It must include your name, product details, a compliance statement, and a direct, working link to your full EU DoC.