Draft a product's user information
This page reflects our reading of Cyber Resilience Act, Article 13(18) and Annex II as of . It is not legal advice. Review process.
A product must be accompanied by the information and instructions in Annex II, in a language users easily understand, and kept available for at least ten years or for the support period, whichever is longer. Declara drafts that document from what it already holds about the product, and leaves every item it cannot fill visible.
The draft is in English. There is no machine translation. If you need another language, export the structured fields and have a translator, or another tool you trust, work from those.
Before you start
- The Readiness Pack, or a plan that includes it. Without it the page shows the items but does not let you edit or draft.
- The owner or an admin role.
- A support period recorded, so the item that states it has something to quote.
Steps
- Open the product, then User information.
- Read The items. Each shows the requirement, its article, and a Source line: where the current text came from. Items marked To complete have nothing yet.
- Edit an item to replace the suggestion with your own text. What you enter wins over the suggestion until you clear it.
- Under The document, press Draft the document. Draft again after changes; each draft is a new version.
- Download PDF, JSON or CSV.
What fills itself from the Trust Center
Two items now fill from your Trust Center when it is live:
- Annex II(6), the address of the declaration of conformity, from the declaration you uploaded or linked and confirmed. A draft generated by Declara is never used.
- Annex II(9), where the SBOM can be had, from SBOM sharing. It names your legal
name and a contact address, and the source line says it came from SBOM sharing. Where
the legal name or the contact is missing, that part of the text carries a
[to be completed]placeholder. It needs the Trust Center published, the disclosure page published and a Growth or Partner plan.
If the Trust Center is not published, or the plan lacks the feature, those items stay To complete as before. They fill only while the page can actually be reached.
What you should see
The document shows its version, when it was drafted, and how many fields are still to
complete. Placeholders stay in the text as [to be completed] rather than being filled
with a guess.
JSON and CSV carry the same items as separate fields, each with its identifier, label, article and text, so a translator or another tool can work from them and you can re-import the result into your own documentation. They are downloads of the stored version, not a fresh draft.
Primary source
Regulation (EU) 2024/2847 on EUR-Lex, checked 2026-10-10:
- Article 13(18): the product is accompanied by the Annex II information, in a language users and market surveillance authorities easily understand, kept available for at least ten years or the support period, whichever is longer.
- Annex II: the nine points, with point 8 in six parts (a) to (f).