Subject: Request for EU Cyber Resilience Act (CRA) Compliance Documentation — liteECO® INTEGRATED Series
Dear SMELA Sales / Technical Support Team,
We are a supplier to Volkswagen Group and currently use your liteECO® INTEGRATED series linear actuators (integrated motion controller, EtherCAT / CANopen / digital IO variants) in our clamping cylinders for automotive body-in-white applications.
Volkswagen has issued a component compliance questionnaire under the EU Cyber Resilience Act (CRA) (EU) 2024/2847 and the EU Machinery Regulation (MVO) (EU) 2023/1230, together with IEC 62443-4 security levels. To complete this declaration for our integrated product, we kindly request the following documentation and information for the liteECO® INTEGRATED series:
1. CRA applicability & classification
– Confirmation whether the liteECO® INTEGRATED actuator is a "product with digital elements" under CRA Article 3.
– Its CRA classification (default / important / critical) per CRA Annex and Articles 7 & 8.
2. Software Bill of Materials (SBOM)
– SBOM listing firmware and software components (incl. EtherCAT CoE / CiA402 / IEC 61800-7-301 and CANopen CiA 301/305/402 stacks) as required under CRA Annex I.
3. Vulnerability management & security updates
– Confirmation of a vulnerability handling process (e.g., ISO/IEC 30111 / 29147).
– Security update support period (e.g., "security updates provided until 20XX-XX") and how updates are distributed to customers.
4. IEC 62443-4 security level
– The applicable Security Level (SL 1–4) under IEC 62443-4-2 for the actuator, if assessed.
5. EU Declaration of Conformity
– EU Declaration of Conformity for the Machinery Regulation (EU) 2023/1230 and, once available, for the CRA (EU) 2024/2847.
– CE marking status and conformity assessment procedure used (self-assessment or notified body).
6. Technical documentation
– Assembly/incorporation instructions (Einbauerklärung / assembly declaration) for integrating the actuator into our clamping cylinder.
– Any product security guidance or hardening recommendations.
Since Volkswagen requires a response with a defined timeline, we would appreciate receiving the available documents, or a written statement of planned availability dates, by [INSERT DATE].
Thank you very much for your support. Please let us know if you need our specific part numbers or purchase records.
Best regards,
[Your Name]
[Your Company — Magswitch Technology Europe]
[Your Email / Phone]
[Relevant part numbers / order references]
Follow-up:
Dear SMELA Team, following up on our previous request regarding CRA documentation for the liteECO® INTEGRATED series. Our Volkswagen deadline is approaching and any partial information — such as the CRA classification or the planned SBOM availability date — would already help us complete our declaration. Thank you.