Who it’s for
You plan, build, extend or maintain plants for your customers, connecting machinery, controllers and networks from different vendors. Operators expect a security programme under IEC 62443 from you. And as soon as you link machines into a plant or modify them substantially, you can become the manufacturer yourself. Complass shows what applies then and keeps the documents per customer plant.
Components from many vendors, customer specifications and existing plants: the security concept is created anew for every project.
Anyone who connects machines into an assembly or substantially rebuilds a plant takes on manufacturer duties up to CE marking.
Remote maintenance and remote commissioning are practical, but also a way in. Operators want to see how you secure access.
As a service provider you mainly meet your customers’ requirements. As the manufacturer of an assembly of machinery or after a substantial modification, statutory obligations apply to you:
Frameworks: IEC 62443 for integrators and service providers · Machinery Regulation · CRA · IEC 62443 · In preparation: Complete CE file covering all requirements of the Machinery Regulation
Not sure which frameworks apply to you? Start the applicability check
Costs, effort and time: consultant only, consultant with Complass or in-house with Complass? Open the compliance cost calculator
When you become the manufacturer. A modification is substantial if the manufacturer did not foresee it and it affects safety because a new hazard arises or an existing risk increases. The risk assessment shows whether this is the case. The page for manufacturers shows what manufacturers then have to meet. Go to the page for manufacturers
General information, not legal advice. This page summarises the legal position in simplified form and does not replace an assessment of your individual case. The wording of the laws and standards is authoritative.
Control, process control and network technology for manufacturing and process industry.
Lines and assemblies of machinery from different vendors, with CE marking of the assembly.
New controllers, networking and remote access for existing plants; this is where the question of substantial modification arises.
Remote maintenance, updates and troubleshooting according to the operators’ requirements.
A framework of its own for integrators: from scope of services and staff to hardening, remote access and patch management up to FAT, SAT and handover to the asset owner.
Divide the plant into zones and conduits, set security levels and document remote access as conduits, in a project of its own per customer plant.
More about this featureWith the Machinery Regulation framework you assess a modification and draw up the risk assessment, technical documentation and declarations with a focus on the cybersecurity of the control system.
More about this featureFind known vulnerabilities of the components you install and provide your customers with recommendations.
More about this feature
The industry template preselects IEC 62443 and the Machinery Regulation; the Manufacturers template adds the CRA for products you place on the market yourself.
available
from €526 per month plus VAT in the Start package, size S, annual payment
available
from €427 per month plus VAT in the Start package, size S, annual payment
All prices are for businesses, not for consumers. They are net plus VAT with annual payment; monthly payment carries a surcharge of 15 %. As of 16 October 2026. Enterprise and groups of companies on request.
If the manufacturer did not foresee it and it affects safety, for example because new protective devices or a changed safety control system become necessary. Under the Machinery Regulation this explicitly also covers digital modifications, such as new software or new networking. The result of the risk assessment is decisive.
IEC 62443-2-4 concerns your organisation as a service provider, that is processes, staff and approach in integration and maintenance. IEC 62443-3-3 concerns the technical system you deliver, with requirements per security level. Complass covers both in one framework for integrators.
Yes, each plant as a project of its own with its own zones, tasks and documents. With the partner portal you can also look after your customers’ accounts from one overview.
Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.
