Skip to main content

CE Marking to Show CRA Compliance

ce-mark-tinified

Manufacturers are to affix a CE marking to each individual product with digital elements to show it meets the requirements set out by CRA.

To get there, you must carry out an official conformity assessment to ensure the requirements are met. If your products fall into the Default Class (which most do), you can self-assess their compliance.

Once assessed, you must add the CE marking to your products and, in addition, draw up an official EU Declaration of Conformity.

EU CRA Reference

Article 28, EU Declaration of Conformity

Manufacturers must draw up an EU declaration of conformity, stating compliance with essential cybersecurity requirements. It must follow a given structure and be kept up-to-update.

Go to the legislation

EU CRA Reference

Article 30, Affixing the CE Marking

The CE marking is to be visibly, legibly and indelibly affixed to products or their packaging before they're placed to the market, following the rules set out in the regulation.

Go to the legislation

EU CRA Reference

Article 32, Conformity Assessment

Manufacturers must perform conformity assessments to ensure products with digital elements meet essential cybersecurity requirements, either as self-assessment or by an external party.

Go to the legislation

How to Complete a CRA Conformity Assessment and Obtain CE Marking

  1. Define the Product and Assessment Route

    Start by clearly defining the product's scope, intended use, and key functionalities. Based on the product type and whether the product's core functionality falls under an important or critical product category, or neither, determine which conformity assessment route applies and what evidence will be required to demonstrate compliance.

  2. Assess Cybersecurity Requirements

    Review the product against the applicable cybersecurity requirements of the Cyber Resilience Act. Identify any gaps, weaknesses, or missing controls, and implement the necessary measures to address them before proceeding.

  3. Compile Evidence

    Gather evidence and prepare the technical documentation showing how the product meets the relevant requirements. This typically includes information about the product design, security measures, testing activities, risk management practices, and other supporting compliance records.

  4. Declare Conformity and Affix the CE Mark

    Once compliance has been demonstrated, prepare and sign the EU Declaration of Conformity. This document confirms that the manufacturer takes responsibility for the product's compliance. The CE mark can then be affixed to the product before it is placed on the EU market.

  5. Maintain Compliance Throughout the Product Lifecycle

    Compliance does not end with CE marking. Manufacturers must continually monitor vulnerabilities, address security issues, maintain documentation, and ensure ongoing compliance as the product evolves through updates and new releases.

Conformity Assessment and CE Marking of Qt Group Products

Qt Group

Qt Group has defined its CRA Conformity Lifecycle process. We intend that all our products will go through the same process to sign the EU Declaration of Conformity and become CRA compliant by December 2027.

Qt Framework

Qt Group has signed the EU Declaration of Conformity for the commercial Qt Framework 6.12. This means the latest Qt Framework release, Qt 6.12 LTS, is now CRA compliant. The product will have its CE Marking when the regulatory implementation guidelines permit.

The information contained on this page and this website does not constitute legal advice. It is provided for informational purposes and discussion of the subject matter only. Content is subject to change and The Qt Group does not guarantee the accuracy or currentness of the contents of this page nor is The Qt Group responsible for the content or operation of any external website that these pages link to—or that may link to—these pages. The information contained here is not, and should not be used as, a substitute for legal advice.