The compliance dossier
Technical documentation, Annex I requirements and the EU declaration of conformity, as you fill them in.
The compliance dossier (Pro and Consultant plans) gathers what the CRA asks you to keep for each product: the technical documentation of Annex VII, how you meet the essential requirements of Annex I, the conformity assessment procedure for its category and a draft EU declaration of conformity.
How it works
- Open the product, then Compliance dossier.
- What Provetry already knows is filled in for you: SBOMs, vulnerability handling, disclosure policy, reporting exercises.
- Answer the rest (intended purpose, environment, architecture, secure development, update distribution, risk assessment…). A checklist ticks itself as you type, with a progress bar, and every answer is saved as you go.
- When nothing is left to complete, the documents are generated and sent to a certified security expert for review, then you can download them as PDF.
Viewers can read the dossier but not change it. The dossier is a strong base, not legal advice: the declaration of conformity is yours to sign.
Still stuck? Write to us at hello@provetry.com.