Regulation (EU) 2024/2847 · Chapter

Article 31 — Technical documentation

Technical documentation: the file the conformity work rests on.

LAW Official text — verbatim from the Official Journal snapshot; only the Official Journal is authentic.

1.1. The technical documentation shall contain all relevant data or details of the means used by the manufacturer to ensure that the product with digital elements and the processes put in place by the manufacturer comply with the essential cybersecurity requirements set out in Annex I. It shall at least contain the elements set out in Annex VII.

2.2. The technical documentation shall be drawn up before the product with digital elements is placed on the market and shall be continuously updated, where appropriate, at least during the support period.

3.3. For products with digital elements as referred to in Article 12, which are also subject to other Union legal acts which provide for technical documentation, a single set of technical documentation shall be drawn up containing the information referred to in Annex VII and the information required by those Union legal acts.

4.4. The technical documentation and correspondence relating to any conformity assessment procedure shall be drawn up in an official language of the Member State in which the notified body is established or in a language acceptable to that body.

5.5. The Commission is empowered to adopt delegated acts in accordance with Article 61 to supplement this Regulation by adding elements to be included in the technical documentation set out in Annex VII to take account of technological developments, as well as developments encountered in the implementation process of this Regulation. To that end, the Commission shall strive to ensure that the administrative burden on microenterprises and small and medium-sized enterprises is proportionate.

BINDING Source: Regulation (EU) 2024/2847 (Cyber Resilience Act) · publisher European Union · captured 2026-09-16 · snapshot sha256:27b7c6c64c773001… · CELEX 32024R2847

What this article does

Article 31 requires technical documentation drawn up before placing on the market and kept up to date, with contents per Annex VII F-016 F-022. Separately, under Article 13(18), the Annex II user information is kept at the disposal of users and authorities for at least ten years after placing on the market or the length of the support period, whichever is longer F-049.

The practical reading

This is the file the rest of the conformity work rests on. Build it as you go — risk assessment, design decisions, test evidence, and the software bill of materials F-019 — rather than reconstructing it at release time.

Verified facts this page relies on

F-016 Technical documentation (Annex VII) is drawn up before placing on the market and kept, with the EU declaration of conformity, for at least ten years after placing on the market or the support period, whichever is longer. Art. 13(12)–(13), Art. 31
F-022 Technical documentation contents (Annex VII). Annex VII, Art. 31
F-049 Manufacturers keep the user information and instructions (Annex II) at the disposal of users and authorities for at least ten years after placing on the market or for the support period, whichever is longer; a notification is displayed when the support period ends where technically feasible. Art. 13(18)–(19)
F-019 Manufacturers identify and document vulnerabilities and components, including by drawing up a software bill of materials in a commonly used machine-readable format covering at the very least the top-level dependencies. Annex I Part II(1), Art. 13(8), (24)

Facts are maintained and human-verified in the CEMarque Facts Table (v2026.09.4, verified 2026-09-10).

Editorial review: Claude (AI reviewer, delegated by the editor), 2026-10-08. Methodology and correction process: how this site works.

Related in the reference

Ready to work through your obligations? Get your CE readiness verdict on CEMarque.