Once conformity with the applicable essential requirements has been demonstrated, the manufacturer draws up the EU declaration of conformity under Article 18 and Annex VI of the RED and affixes the CE marking under Article 20. For in-scope equipment placed on the market from 1 August 2025 the declaration must identify which of the three activated requirements apply, the harmonised standards or other specifications used to meet them, and, where a notified body was involved, its identification number and the certificate. The declaration and the technical documentation, including the cybersecurity risk analysis and test or certification evidence, must be kept for ten years after the equipment was placed on the market and produced to a market surveillance authority on request (Article 10(4) and 10(11)). A simplified declaration may be used in the user documentation, but the full declaration must exist and be retrievable.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.