Under Article 10(1) of the RED and Annex V, the manufacturer must ensure the equipment is designed and manufactured to meet the applicable essential requirements and must hold technical documentation that includes an adequate analysis and assessment of the risks. For this Regulation that means a documented decision, for each product, on whether it is internet-connected radio equipment, a childcare device, a toy or a wearable, whether it can process personal, traffic or location data, and whether it enables transfers of money or virtual currency, and therefore which of points (d), (e) and (f) apply. The analysis must then describe the product in enough detail for an assessor to test it: how it operates, how it connects, whether a password protects it, how it updates and authenticates, what can be controlled remotely and through which app or interface. It must state which standard or specification is applied and which clauses were judged applicable. Where one test report is used to cover variants, the file must justify why the tested model is representative.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.