S
Solvetronix
Deutsch DE

← Back to CRA overview

Connect product category assessment route and evidence

Your product's core functionality determines which CRA category needs to be assessed. Use in critical infrastructure alone does not make a device a critical product under Annex IV. An integrated security function also does not automatically result in the same classification as a separately marketed security product.

Plan your conformity route and evidence

Base classification on actual functionality

Important products are listed in Annex III and critical products in Annex IV. Implementing Regulation (EU) 2025/2392 provides the technical descriptions. Routers, firewalls and specific smart meter gateways therefore need separate assessment. A blanket classification of all PLCs, safety controllers or industrial gateways is not reliable.

Internal control is generally available for products outside the important and critical categories. For Class I, this option depends on the conditions in Article 32(2). Class II and critical products require stricter procedures. Available certification schemes, their applicability and any required independent involvement need product-specific assessment.

Documentation needs to support the product version

Risk assessment, security measures, component versions, tests and approvals belong together. Suitable IEC 62443 evidence can support this work. Whether a standard provides a CRA presumption of conformity depends, among other things, on its relevant citation in the EU Official Journal. Its current status needs to be checked at the time of assessment.

What Solvetronix helps you establish

  • Regulatory product classification and assessment planning by Solvetronix, based on the technical product analysis.
  • A mapping of CRA requirements to measures and evidence.
  • Documentation supporting the manufacturer's decision and any external assessment.
Responsibility for the EU declaration of conformity and CE marking remains with the manufacturer. Any required assessment by a notified body is a separate service.
Plan your conformity route and evidence

Related topics

Scope and rolesSBOM and supply chain CRA and product security

Legal basis and sources

General information and technical guidance. The specific assessment depends on the product, role and use. Reviewed 22 October 2026.