Who it’s for

Complass for importers and distributors

You import products with digital elements into the EU or distribute them. Even without your own development, you have obligations of your own under the Cyber Resilience Act. Complass shows you what they are and documents your checks per product.

Try for free Request a demo

Your obligations under the CRA

The obligations for importers and distributors apply from 11 December 2027. For radio products, comparable obligations already apply today under the Radio Equipment Directive.

Frameworks: CRA · Radio Equipment Directive

Before placing a product on the market, importers check that the manufacturer has carried out the conformity assessment, drawn up the technical documentation and affixed the CE marking Art. 19 CRA
Importers state their name and contact address on the product or its packaging and keep the EU declaration of conformity available for at least ten years Art. 19 CRA
Before making a product available, distributors check the CE marking, the documents and the details of the manufacturer and importer Art. 20 CRA
In case of vulnerabilities or non-conformity, both inform the manufacturer and, where there is a significant risk, the market surveillance authorities

Not sure which frameworks apply to you? Start the applicability check

Costs, effort and time: consultant only, consultant with Complass or in-house with Complass? Open the compliance cost calculator

Authorised representatives. Under the CRA a manufacturer can appoint an authorised representative in the EU by written mandate, who for example keeps the declaration of conformity and the technical documentation available for market surveillance and cooperates with the authorities. Development according to the cybersecurity requirements and drawing up the technical documentation remain with the manufacturer. For medical devices an authorised representative is mandatory if the manufacturer is not established in the EU. Art. 18 CRA Art. 11 MDR

When you count as the manufacturer yourself. If you place a product on the market under your own name or trademark, or modify it substantially, you take on the manufacturer’s obligations (Art. 21 and 22 CRA). This also applies if another company developed the product. Go to the page for manufacturers

General information, not legal advice. This page summarises the legal position in simplified form and does not replace an assessment of your individual case. The wording of the laws and standards is authoritative.

How Complass helps

Obligations for your role

The CRA module asks for your role and shows the obligations for importers or distributors, with tasks and evidence per product.

More about this feature

Request documents from the manufacturer

Request declarations and evidence directly from the manufacturer, review them and ask for more.

More about this feature

Document notifications

Record reports of vulnerabilities and keep track of when you informed the manufacturer and market surveillance.

More about this feature

Clarify your role

The applicability check clarifies in a few minutes whether you are an importer, a distributor or legally the manufacturer.

To the applicability check

What you need at a minimum as an importer or distributor

The first selection covers the obligations in Complass if they apply to you. The free applicability check shows whether they do. To the applicability check

What you need at a minimum

If you are only an importer or distributor under the CRA: this selection covers the resulting obligations in Complass. It is preselected when you start a trial or order.

Portal size Start

Cyber Resilience Act (CRA): Obligations of importers (Art. 19) and distributors (Art. 20): checking conformity and CE marking, informing about vulnerabilities and risks. (Art. 19, 20 CRA (opens in a new tab))
Incident management: included
GDPR, AI Act and Whistleblower protection (HinSchG) (baseline protection): included

Price of the minimum selection
Item	Net price per month
Start S	€179
Cyber Resilience Act (CRA)	included
GDPR, AI Act and Whistleblower protection (HinSchG) (baseline protection)	included
Total	€179 net/month

With annual payment, 12 months minimum term. Monthly payment with a 15 % surcharge. All prices net plus VAT, as of 16 October 2026.

Try free for 14 days Order

Adjust the selection in the price overview: minimum selection importer or distributor

Recommended for more impact Offer, not a duty

Business

More impact with Risk management and Business continuity management (BCM), room for 10 users and 2 frameworks.

€449 net/month, €270 more than the minimum selection.

With annual payment, 12 months minimum term. Monthly payment with a 15 % surcharge. All prices net plus VAT, as of 16 October 2026.

Try with Business

View in the price overview: minimum selection importer or distributor

Good to know: You can also meet the obligations without Complass. Complass supports you with implementation and evidence but does not replace legal advice. Legal information

Frequently asked questions

What is the difference between an importer and a distributor?

Importers place a product from a manufacturer outside the EU on the EU market for the first time. Distributors make available a product that has already been placed on the EU market. Importers therefore check more extensively than distributors.

When do the obligations apply?

Like most CRA obligations, the obligations for importers and distributors apply from 11 December 2027. The manufacturers’ reporting obligations have applied since 11 September 2026. Starting early lets you choose suppliers in good time and request missing documents.

We sell products under our own brand. What changes?

Then you count as the manufacturer under the CRA and take on its obligations, even if another company developed the product. The page for manufacturers shows what lies ahead.

Read on

All audiences at a glance

Try Complass with your own data

Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.

Try for free Request a demo

Complass for importers and distributors

Your obligations under the CRA

How Complass helps

Obligations for your role

Request documents from the manufacturer

Document notifications

Clarify your role

What you need at a minimum as an importer or distributor

What you need at a minimum

Recommended for more impact Offer, not a duty

Frequently asked questions

Read on

Other roles

Manufacturers

Suppliers and service providers

Operators

Try Complass with your own data