> For the complete documentation index, see [llms.txt](https://www.mica.wtf/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.mica.wtf/cra/chapter-iii-conformity-of-the-product-with-digital-elements-art.-27-34/32.md). # Art. 32 — Conformity assessment procedures for products with digital elements CRA Article 32 — Conformity assessment procedures for products with digital elements. Regulation (EU) 2024/2847, Chapter III — Conformity of the product with digital elements. 1. The [manufacturer](https://headlesslaw.com/definitions/cra/manufacturer/) shall perform a [conformity assessment](https://headlesslaw.com/definitions/cra/conformity-assessment/) of the [product with digital elements](https://headlesslaw.com/definitions/cra/product-with-digital-elements/) and the processes put in place by the manufacturer to determine whether the essential [cybersecurity](https://headlesslaw.com/definitions/cra/cybersecurity/) requirements set out in Annex I are met. The manufacturer shall demonstrate conformity with the essential cybersecurity requirements by using any of the following procedures: 1. the internal control procedure (based on module A) set out in Annex VIII; 2. the EU-type examination procedure (based on module B) set out in Annex VIII followed by conformity to EU-type based on internal production control (based on module C) set out in Annex VIII; 3. a conformity assessment based on full quality assurance (based on module H) set out in Annex VIII; or 4. where available and applicable, a European cybersecurity certification scheme pursuant to [Article 27(9)](/cra/chapter-iii-conformity-of-the-product-with-digital-elements-art.-27-34/27.md). 2. Where, in assessing the compliance of an important product with digital elements that falls under class I as set out in Annex III and the processes put in place by its manufacturer with the essential cybersecurity requirements set out in Annex I, the manufacturer has not applied or has applied only in part harmonised standards, common specifications or European cybersecurity certification schemes at assurance level at least substantial as referred to in [Article 27](/cra/chapter-iii-conformity-of-the-product-with-digital-elements-art.-27-34/27.md), or where such harmonised standards, common specifications or European cybersecurity certification schemes do not exist, the product with digital elements concerned and the processes put in place by the manufacturer shall be submitted with regard to those essential cybersecurity requirements to either of the following procedures: 1. the EU-type examination procedure (based on module B) set out in Annex VIII followed by conformity to EU-type based on internal production control (based on module C) set out in Annex VIII; or 2. a conformity assessment based on full quality assurance (based on module H) set out in Annex VIII. 3. Where the product is an important product with digital elements that falls under class II as set out in Annex III, the manufacturer shall demonstrate conformity with the essential cybersecurity requirements set out in Annex I by using any of the following procedures: 1. EU-type examination procedure (based on module B) set out in Annex VIII followed by conformity to EU-type based on internal production control (based on module C) set out in Annex VIII; 2. a conformity assessment based on full quality assurance (based on module H) set out in Annex VIII; or 3. where available and applicable, a European cybersecurity certification scheme pursuant to [Article 27(9)](/cra/chapter-iii-conformity-of-the-product-with-digital-elements-art.-27-34/27.md) of this Regulation at assurance level at least substantial pursuant to Regulation (EU) 2019/881. 4. Critical products with digital elements listed in Annex IV shall demonstrate conformity with the essential cybersecurity requirements set out in Annex I by using one of the following procedures: 1. a European cybersecurity certification scheme in accordance with [Article 8(1)](/cra/chapter-ii-obligations-of-economic-operators-and-provisions-in-relation-to-free-and-open-source-soft/8.md); or 2. where the conditions in [Article 8(1)](/cra/chapter-ii-obligations-of-economic-operators-and-provisions-in-relation-to-free-and-open-source-soft/8.md) are not met, any of the procedures referred to in paragraph 3 of this Article. 5. Manufacturers of products with digital elements qualifying as [free and open-source software](https://headlesslaw.com/definitions/cra/free-and-open-source-software/), which fall under the categories set out in Annex III, shall be able to demonstrate conformity with the essential cybersecurity requirements set out in Annex I by using one of the procedures referred to in paragraph 1 of this Article, provided that the technical documentation referred to in [Article 31](/cra/chapter-iii-conformity-of-the-product-with-digital-elements-art.-27-34/31.md) is made available to the public at the time of the [placing on the market](https://headlesslaw.com/definitions/cra/placing-on-the-market/) of those products. 6. The specific interests and needs of microenterprises and small and medium-sized enterprises, including start-ups, shall be taken into account when setting the fees for conformity assessment procedures and those fees shall be reduced proportionately to their specific interests and needs. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://www.mica.wtf/cra/chapter-iii-conformity-of-the-product-with-digital-elements-art.-27-34/32.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.