Article 31 requires the manufacturer to draw up the technical documentation for the PDE before it is placed on the market and to keep it up to date during the support period. The technical documentation contains the items in Annex VII: general description, design and manufacturing of the product including risk assessment, system architecture, list of harmonised standards applied, copy of the EU declaration of conformity, vulnerability-handling process, software bill of materials where appropriate, support-period documentation. The technical documentation must be kept available for 10 years after placing on the market. Annex VI permits simplified technical documentation for microenterprises and small enterprises.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.