Being established outside the European Union does not, by itself, remove a manufacturer from the CRA. Manufacturer obligations can apply when an in-scope product with digital elements is made available on the Union market. A non-EU manufacturer in scope is subject to Article 14 reporting and follows the non-EU routing order in Article 14(7).

The operational question is therefore product-by-product market access, not the location printed on the parent company’s headquarters page.

For each product, record the entity that develops or has the product developed and markets it under its name or trademark. Link that entity to product names, versions, brands, and channel agreements. Do not assign reporting ownership only at group level when several subsidiaries play different roles.

Flag private-label, contract-manufacturing, and substantial-modification arrangements for legal review. The party described commercially as a reseller may have a different role under the Regulation.

Build a reporting-ready entity packet

For the selected manufacturer, retain legal name, jurisdiction, product ownership evidence, Union establishments if any, authorised representative, importers, distributors, product contacts, and the people who can make and submit the Article 14 decision. Keep group headquarters and trading brands as references rather than substitutes for the legal entity.

Test whether contracts that delegate incident support also transfer any legal role. Record the conclusion and source; do not treat operational assistance as proof that another party owns the manufacturer’s reporting duty.

Prove Union-market availability

Map direct sales, software downloads, app distribution, licences, importers, distributors, and bundled-product channels. Retain the period and product versions covered by each record. Separate an accessible website from evidence that a product was supplied for distribution, consumption, or use on the Union market.

Give uncertain channels an owner rather than treating them as absent. The goal is a controlled territorial decision with evidence, not the widest possible unsupported assertion.

Join each market record to product version and period. A current Union channel may not prove that an older release was made available there, while a discontinued sales route may still matter to the affected product history. Preserve both the evidence and its time boundary.

Assign the reporting route

Once a non-EU manufacturer is in scope, resolve the Article 14(7) coordinating-CSIRT cascade and name the people authorised to assess and submit. Align the portfolio, routing, and Member State availability records so they do not contradict one another during a case.

Review the analysis after product launches, branding changes, new channel partners, acquisitions, or changes to the authorised representative. A global policy can set the method, but the legal manufacturer and product evidence must remain visible in each case.

During a live event, freeze the entity, market, and routing records used for the decision. If any is disputed, name the reviewer and next evidence source while keeping the reporting clock open. The result should let the reporter explain why the non-EU entity is in scope and how the destination was selected without relying on a group-level assumption.

Continue this workflow with the non-EU routing cascade and the manufacturer register.