Complass
Machinery Regulation: cybersecurity becomes part of machine safety
A line ordered in autumn 2026, delivered in February 2027 – and suddenly new rules apply to remote maintenance, control systems and software. What the Machinery Regulation requires from manufacturers.
The Machinery Regulation (EU) 2023/1230 replaces the Machinery Directive from 20 January 2027 and applies directly in all member states. For the first time it makes cybersecurity an explicit part of machine safety: protection against corruption (Annex III section 1.1.9) and control systems that also withstand reasonably foreseeable malicious attempts by third parties (section 1.2.1).
The whitepaper is aimed at manufacturers of machinery, related products and partly completed machinery. It explains scope and substantial modification, the new cyber requirements including the traceability log and software identification, the route to CE marking under Annex I and Article 25 including the presumption of conformity via cybersecurity certificates, post-market obligations and the interplay with the Cyber Resilience Act and IEC 62443, with a 10-step plan and two practice examples.
Each obligation chapter includes a short "Implementation in Complass" box with a platform screenshot (decision W11); only features already live are named.
16 pages · Version 1.1 · as of 07.10.2026 · Author Marc Linden, Complass GmbH i. G.
Try Complass with your own data
Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.