Nine documents in Word. Nothing invented.
Regulus writes the technical file from what you recorded, in editable Word. Where information is missing the documents say so, as pending, and list it, so nothing goes out that you have not decided.
Three steps, no calls.
- 01
Fill in the product
Classification, requirements, risks, SBOM and policies, each in its own screen.
- 02
Generate the documents
Nine documents, one by one or as a single pack, with every pending item listed.
- 03
Review and sign
Edit in Word, ask for an expert review if you want one, and sign the declaration.
Technical file in Regulus.
Technical documentation (Annex VII)
The structure Annex VII sets out, filled with your product's answers.
EU declaration of conformity
The Annex V content, ready to sign.
SBOM in CycloneDX
The components you imported, in the format Annex VII expects.
Policies and user information
Coordinated disclosure policy and the Annex II information for users.
Read more about it.
Our guides on the Cyber Resilience Act, written against the adopted text.
Questions about technical file.
Which documents does the CRA technical file need?
Annex VII lists them: a description of the product, its design and development, the cybersecurity risk assessment, how each essential requirement is met, the SBOM, test reports, the vulnerability handling process and the EU declaration of conformity.
How long must the technical documentation be kept?
At least ten years after the product is placed on the market, or for the support period if that is longer (Article 13).
Are the documents editable?
Yes. They are Word files you can edit, file and sign. Pending items are marked so you can see what is still missing.
One file, start to finish.
Scope. Check whether the Cyber Resilience Act applies to your product.
Classification. Classify your product under the Cyber Resilience Act by its core function.
Annex I requirements. Track every Cyber Resilience Act essential requirement of Annex I.
Risk assessment. Build the cybersecurity risk assessment the Cyber Resilience Act requires.
Article 14 reporting. Meet the Cyber Resilience Act reporting obligations of Article 14.
Start with your own product.
Free for manufacturers. An expert is one click away when you want one.