Cyber Resilience Act · Regulation (EU) 2024/2847

CRA Compliance Service

Five steps to your CRA documents, from your CODESYS® project.

Most machines with control software fall under the CRA. We turn your PLC project into an SBOM and a cybersecurity risk analysis, signed by DDAS. You remain the manufacturer.

Request a quoteSee prices
CRA Compliance Service · Overview · 3:35 · EN
11 September 2026
Reporting obligations apply
11 December 2027
The CRA applies in full
10 working days
Delivery target from complete data

What you receive

A signed handover package for your technical documentation

Base: SBOM and risk analysis

Every order
  • SBOM with every library of your PLC project, machine‑readable in CycloneDX and SPDX
  • Cybersecurity risk analysis, report in English or German
  • Comparison of your CODESYS components with the security advisories CODESYS publishes
  • Everything in one package, signed by DDAS, with a manifest you can verify

Add‑on: classification and declaration

Optional
  • Classification Wizard: up to 48 questions lead to your classification and product boundary paper
  • The paper travels in the signed handover package
  • DoC Wizard: up to 36 questions lead to your EU Declaration of Conformity, checked against the handover
  • A classification call with a DDAS engineer

How it works

Five steps; classification and declaration stay with you

Preview the wizards →
  1. 01Kick‑offWe clarify your product, the scope and the data we need.
  2. 02 · add‑onClassificationYou answer the Classification Wizard; the paper is yours.
  3. 03ReviewWe check your data for plausibility and completeness.
  4. 04Analysis and handoverYou upload your project; we deliver the signed package.
  5. 05 · add‑onDeclarationYou create the declaration in the DoC Wizard. It takes effect with your signature.
Walkthrough with an example machine · Walkthrough · 6:25 · EN

Prices

Fixed prices per run, for a standard CODESYS PLC program

VariantWhat it includesList price
First run: baseSBOM and risk analysis, signed handover package$2,900
First run: complete packageBase plus classification and declaration add‑on$3,890
Follow‑up runSame product, new software version; with the add‑on already booked, the updated paper is included$750
Follow‑up run with add‑onAdding classification and declaration later$1,740
Beyond a standard PLC programAdditional software, dashboards, backend modules: after a pre‑assessment by DDASOn request

List prices in USD. You order with a quote; payment by bank transfer.

The add‑on is charged once per product and booked together with a run. With the add‑on, complete data includes your finished classification paper.

Full refund before your first upload, or if we decline after the pre‑assessment. No refund once the analysis has started.

Request a quote

You remain the manufacturer

Classification, declaration and placing on the market are your decisions. We provide tools, a defined process and predefined wording with source references. Our checks are plausibility and completeness checks, not an approval. This is not legal advice.

Your data is deleted

Project data is used only for the service and deleted no later than 30 days after delivery. We keep no copy of your package, only an order record. Please archive the package with your technical documentation; we cannot re‑issue it.

Built by PLC engineers

We know CODESYS library structures and typical machine programs. Your team spends hours on it, not workshop days.

Questions and answers

CRA Compliance Service

Does the CRA apply to my machine?

To most machines with control software: the CRA covers products with a data connection to a device or network, and most machine controllers have one. The Classification Wizard works through it with you.

Base or complete package?

The base is enough if you, or your consultant, handle classification and declaration. The complete package adds both wizards and the classification call.

What does the SBOM cover?

Every library of your PLC project. Firmware, operating system and HMI of the controller are not covered.

What happens with a new software version?

Your documents have to be checked and kept up to date. A follow‑up run builds on your previous signed package, so you start from what is already there.

What do I need to provide?

Your CODESYS project and the answers in the wizards. We tell you everything else in the kick‑off.

See it with your own machine.

Tell us about your product, and we send you a quote for your first run.

Contact us