FAQEU

Annex III EHSR mapping Machinery Regulation FAQ

Annex III of Regulation (EU) 2023/1230 contains the that must be matched to the hazards of the machinery, related product, or partly completed machinery.

This FAQ helps separate Annex III requirement mapping from Annex I high-risk classification, and to connect each hazard decision to technical-file evidence.

Author
Sorena AI
Published
May 9, 2026
Updated
Oct 15, 2026
Overview

Annex III EHSR mapping is the exercise of taking the product , identifying which apply, and documenting the design, protective measures, residual risks, instructions, standards, tests, and software evidence used to meet them. It is not the same as Annex I classification: Annex I lists machinery or related product categories that trigger specified conformity-assessment procedures.

Search this module

Find a question or answer quickly

6 of 6 questions
Question 1

What are Annex III EHSRs?

EHSRs are the in Annex III of Regulation (EU) 2023/1230. The general principles require the manufacturer to carry out a , determine which Annex III requirements apply, and then design and construct the machinery or related product to eliminate hazards or minimise the relevant risks.

The mapping should start with the intended use, reasonably foreseeable misuse, product limits, hazardous situations, severity, probability, and required risk reduction. Annex III says the first chapter is general and applies to all machinery or related products, while the other chapters apply where the shows more specific hazards such as mobility, lifting, underground work, lifting persons, or certain product categories.

A does not replace this applicability decision. It can provide a presumption of conformity only for the Annex III requirements it covers, so the EHSR map should record full, partial, or no standards coverage and identify the other technical evidence used for every remaining requirement.

These Regulation-specific Annex III duties apply from 20 January 2027. Products placed on the market before that date remain subject to the Machinery Directive transition in Article 52, so keep the first-placement date and the applicable legal basis with the map instead of retroactively relabelling an earlier file.

  • List each hazard and hazardous situation from the .
  • Mark the Annex III section that corresponds to that hazard, including the general chapter and any specific chapter triggered by the product design or use.
  • Record the protective measure used for each applicable EHSR and identify any residual risk that must be handled through instructions, warnings, maintenance, or other controls.
  • For partly completed machinery, map only the Annex III requirements that are relevant to the partly completed machinery and its intended incorporation.

How should Annex III be mapped under the Machinery Regulation?

Start from the , not from a generic checklist. For each intended use, foreseeable misuse, hazard, and hazardous situation, identify the applicable Annex III requirement, the protective measure chosen, the residual risk, and the evidence that proves the measure works. The same map should connect to drawings, control-system logic, standards or specifications applied, tests, instructions for use, and the EU declaration evidence.

Is Annex III the same as the Annex I high-risk list?

No. Annex III contains the used to design and assess conformity. Annex I is a list of categories of machinery or related products that must use specified conformity-assessment procedures under Article 25. A product can need detailed Annex III EHSR mapping even when it is not in an Annex I category.

Question 2

How does risk assessment drive the EHSR map?

The Annex III general principles describe an iterative process: determine product limits, identify hazards and hazardous situations, estimate severity and probability, evaluate whether risk reduction is required, then apply risk reduction in this order: eliminate hazards through design and construction or, where elimination is not possible, minimise risks through design and construction, protect against the risks that remain, then inform users of residual risks, any required training and personal protective equipment.

That means the EHSR map should be hazard-led. A mechanical movement hazard might point to guards or protective devices; a control-system hazard might point to safety and reliability of control systems; a software or data-integrity hazard might point to protection against corruption; and a mobility hazard might require the mobility chapter in addition to the general chapter.

  • Use the to justify why each Annex III section is applicable, not applicable, or covered by a more specific chapter.
  • Tie each risk-reduction measure to design evidence, test evidence, inspection evidence, or instruction text.
  • Show where harmonised standards, common specifications, or other technical specifications were applied, including any partial application.
  • Keep residual-risk language consistent between the EHSR map, instructions for use, labels or markings, and declaration evidence.
Recommended next step

Build a traceable Annex III EHSR map

Turn hazards, EHSRs, standards, tests, software evidence, residual risks, and declarations into one reviewable machinery technical-file map.

Question 3

Where do software and cybersecurity fit?

Software belongs in the Annex III map when it affects safety. The Regulation covers safety components as physical or digital components, including software, and Annex III includes specific requirements for protection against accidental or intentional corruption of hardware, software, and data that are critical to compliance with EHSRs.

For control systems, Annex III requires design and construction that prevent hazardous situations, including attention to faults in hardware or logic, errors in control-system logic, reasonably foreseeable malicious attempts where relevant, and limits of safety functions established through the manufacturer's . Where safety-related software versions or interventions are relevant, the Regulation also grounds tracing-log and source-code or programming-logic evidence in defined circumstances.

  • Identify software and data that are critical to EHSR compliance and record how they are protected against accidental or intentional corruption.
  • Record the installed software needed for safe operation and how the machinery can provide that information in an accessible form.
  • For safety-related software, keep version, intervention, validation, and tracing evidence aligned with the technical documentation.
  • For sensor-fed, remotely driven, autonomous, or self-evolving safety functions, document system capabilities, limitations, data, development, testing, and validation where relevant.
Question 4

Apply the supplementary EHSRs to the actual machinery

Test the against the real product and use. Record why each chapter applies or does not apply, then connect its design duties to drawings, material specifications, calculations, tests, cleaning or maintenance instructions, and residual-risk information.

Food, cosmetics, and pharmaceutical machinery needs evidence for material compatibility, cleanability, drainage or discharge, prevention of contamination, and instructions for cleaning, disinfecting, and rinsing. Lubricants or auxiliary substances that could contact products need a controlled design and maintenance basis. Hand-held and hand-guided machinery needs handling, control, stability, and vibration evidence. Portable fixing and impact machinery and woodworking machinery require their specific protective measures rather than a generic guarding statement.

Plant-protection machinery needs evidence covering operator and environmental exposure, filling and emptying, leakage, drift or unintended dispersion, distribution and calibration, cleaning, servicing, inspection, and the tests and instructions needed for safe adjustment. Mobile machinery needs visibility, operator position, travel control, stability, rollover or falling-object risks, braking, and information on vibration where applicable. Underground machinery, lifting machinery, and machinery lifting persons each require the corresponding strength, stability, control, access, carrier, anchorage, emergency, and marking checks.

  • Record the product feature or operating condition that triggers each supplementary chapter and the affected machinery variants.
  • For hygienic applications, link contact materials, surface finish, joints, drainage, cleaning methods, contamination controls, and maintenance instructions to verification evidence.
  • For mobile, underground, and lifting applications, link load cases, stability and strength calculations, protective structures, travel or lifting controls, access, emergency functions, tests, and markings to the applicable requirements.
  • For plant-protection machinery, retain distribution and calibration results, leakage and drift controls, filling and emptying design, operator exposure controls, cleaning procedures, and adjustment instructions for the supplied configuration.
  • When one product triggers several chapters, keep one integrated EHSR map and identify shared protective measures without deleting the separate requirement decisions.
Question 5

What technical-file evidence should support the EHSR map?

Annex IV requires technical documentation to specify the means used to ensure conformity with applicable Annex III EHSRs. For machinery and related products, that documentation includes a complete product description, risk-assessment documentation, the list of applicable EHSRs, protective measures, residual risks, drawings and schemes, standards or common specifications applied, tests and calculations, instructions for use, declarations, production controls, and selected software or sensor-system evidence where relevant.

A useful EHSR map therefore has one row per applicable requirement or hazard cluster, with cross-references to the , design evidence, verification evidence, instruction text, standards basis, residual-risk treatment, and declaration support. If a or common specification is only partly applied, the record should say which parts were applied and what other technical specifications close the remaining EHSR gap.

  • : product limits, hazards, hazardous situations, applicable EHSRs, protective measures, and residual risks.
  • Design evidence: drawings, circuit schemes, control architecture, software logic descriptions, component data, and manufacturing controls.
  • Verification evidence: design calculations, tests, inspections, examinations, and research on components or fittings.
  • User-facing evidence: instructions for use, residual-risk information, warnings, maintenance criteria, and any declarations or assembly instructions that must travel with the product.
Question 6

How is Annex III different from Annex I?

Annex III answers the question: which essential safety requirements apply to this product and how were the risks eliminated or reduced? Annex I answers a different question: is the product in a category that must follow one of the specified conformity-assessment procedures under Article 25?

Keep both analyses in the same compliance pack, but do not merge them. Annex I classification may affect whether a notified body route is needed, while Annex III mapping remains the substantive evidence that the applicable health and safety requirements have been addressed.

  • Use Annex I to classify listed machinery or related product categories such as certain saws, presses, lifts, protective devices, logic units, or self-evolving safety-function systems.
  • Use Annex III to map hazards to requirements and evidence for every in-scope machinery or related product.
  • Where Annex I triggers a third-party route, the notified-body file still needs the Annex III EHSR map, , standards basis, tests, and technical documentation.
  • Do not treat absence from Annex I as proof that the product has no Annex III obligations.
Primary sources

References and citations

eur-lex.europa.eu7 citations
Referenced sections
  • Primary legal source for Annex III EHSRs, risk assessment, Annex I categories, software/control-system requirements, and Annex IV technical documentation.
  • Annex III sets the EHSR mapping method; Articles 52 and 54 establish the pre-20 January 2027 transition and the Regulation's application date.
  • Annex III general principles define the iterative risk-assessment and risk-reduction sequence used to select applicable EHSRs.
Show 4 more
  • Annex III sections 1.1.9 and 1.2.1 ground protection against corruption, control-system safety, software identification, tracing logs, and autonomous or self-evolving safety-function evidence.
  • Annex III Chapters 2 to 6 set supplementary requirements for specified product categories and hazards, including hygiene, portable machinery, plant-protection machinery, mobility, lifting, underground work, and lifting persons.
  • Annex IV lists the technical documentation elements that must demonstrate conformity with applicable Annex III EHSRs.
  • Annex I lists categories tied to Article 25 conformity-assessment procedures, while Annex III contains the EHSRs used to assess product safety.
"essential health and safety requirements"
More quoted passages
"determine the essential health and safety requirements which apply"
"identify the hazards that may be generated"
"Software and data that are critical"
"a list of the essential health and safety requirements"
"CATEGORIES OF MACHINERY OR RELATED PRODUCTS"
iso.org3 citations
Referenced sections
  • Source for machinery risk-assessment and risk-reduction terminology used to structure the EHSR mapping workflow.
  • ISO source support identifies ISO 12100 as the machinery-safety standard for design, risk assessment, and risk reduction terminology.
  • ISO cited sources support risk-assessment and risk-reduction terminology used when structuring hazard-to-EHSR evidence.
"Risk assessment and risk reduction"
More quoted passages
"Safety of machinery"
single-market-economy.ec.europa.eu2 citations
Referenced sections
  • Commission source listing standards references published for Directive 2006/42/EC. It does not establish citation under Regulation (EU) 2023/1230.
  • Lists standards references published for Directive 2006/42/EC. It does not establish that those standards are cited under Regulation (EU) 2023/1230 for Article 20 or Article 25.
"harmonised standards for machinery"
iso.org2 citations
Referenced sections
  • Source for machinery manufacturers considering IT-security and cybersecurity aspects related to ISO 12100.
  • ISO source support identifies ISO/TR 22100-4 as guidance for machinery manufacturers considering related IT-security and cybersecurity aspects in relation to ISO 12100.
"IT-security (cyber security) aspects"

Declaration of Conformity vs Declaration of Incorporation | Machinery Regulation FAQ

FAQ on when machinery needs an EU Declaration of Conformity and when partly completed machinery needs an EU Declaration of Incorporation under Regulation (EU) 2023/1230.

Machinery Regulation and EU AI Act overlap for AI-enabled safety functions

FAQ on Machinery Regulation overlap with the EU AI Act for self-evolving or machine-learning safety functions, Annex I categories, standards work, and technical documentation boundaries.

Machinery Regulation cybersecurity evidence FAQ

What cybersecurity evidence connected or software-enabled machinery should keep for protection against corruption, safety-related control systems, and machinery risk assessment.

What counts as machinery under Regulation (EU) 2023/1230?

FAQ on the Machinery Regulation definition of machinery, including assemblies, drive systems, missing components, software, related products, partly completed machinery, safety components, and exclusions.

When can a software update affect Machinery Regulation compliance?

FAQ on when machinery software updates can trigger Machinery Regulation review, including safety functions, substantial modification, corruption protection, instructions, and CE technical-file evidence.

When does used or modified machinery need a new conformity assessment? | Machinery Regulation FAQ

FAQ on used and modified machinery under Regulation (EU) 2023/1230, including substantial modification, first EU use, technical documentation, and market surveillance evidence.

Show all related guides (40)

When is a notified body needed under the EU Machinery Regulation?

FAQ on when Machinery Regulation Annex I products need a notified body, how to find designated bodies, and what manufacturers still own.

Which Article 25 conformity assessment module applies? | EU Machinery Regulation FAQ

FAQ on Article 25 of Regulation (EU) 2023/1230: Module A, Module B plus C, Module H, Module G, Annex I triggers, notified body involvement, and technical file evidence.

Directive 2006/42/EC to Machinery Regulation transition

Transition guide for moving EU machinery files from Directive 2006/42/EC to Regulation (EU) 2023/1230, focused on the 20 January 2027 changeover, pipeline products, declarations, standards, technical documentation, software, cybersecurity, and digital instructions.

EU Machinery Regulation Applicability Test

Test whether a product is machinery, a related product, partly completed machinery, a safety component, substantially modified, excluded, or covered by overlapping EU product laws.

EU Machinery Regulation compliance

Machinery Regulation compliance checklist covering scope, EHSR risk assessment, technical documentation, instructions, conformity assessment, EU declarations, CE marking, software, transition, and market surveillance.

EU Machinery Regulation compliance checklist

Checklist for Regulation (EU) 2023/1230 covering scope, EHSR risk assessment, technical documentation, instructions, conformity assessment, EU declarations, CE marking, digital duties, transition, and market surveillance.

EU Machinery Regulation deadlines and compliance calendar

Calendar for Regulation (EU) 2023/1230 dates, Directive 2006/42/EC transition, release documentation gates, standards monitoring, and substantial-modification reviews.

EU Machinery Regulation FAQ

Answers to Machinery Regulation questions on scope, partly completed machinery, Annex I categories, Article 25 conformity assessment, digital instructions, software, cybersecurity, transition, CE files, and overlap with other EU product laws.

EU Machinery Regulation Partly Completed Machinery

What counts as partly completed machinery under Regulation (EU) 2023/1230, what documents travel with it, and where the final assembler takes over.

EU Machinery Regulation requirements

Requirements under Regulation (EU) 2023/1230: machinery scope, EHSR risk assessment, technical documentation, instructions, conformity assessment, EU declaration, CE marking, software evidence, transition, and surveillance.

EU Machinery Regulation Safety Components

Definition, scope, conformity assessment, technical documentation, declaration, CE marking, and cited examples for safety components under Regulation (EU) 2023/1230.

EU Machinery Regulation scope and machine categories

Scope guide for Regulation (EU) 2023/1230 covering machinery, related products, partly completed machinery, Annex I categories, exclusions, substantial modification, and category evidence.

EU Machinery Regulation substantial modification decision workflow

Workflow for assessing substantial modification under Regulation (EU) 2023/1230: change facts, hazard and risk impact, manufacturer obligations, conformity assessment, CE marking, and evidence.

EU Machinery Regulation vs LVD

Compare the EU Machinery Regulation and Low Voltage Directive boundary for machinery EHSRs, electrical risks, excluded electrical products, CE documentation, and evidence reuse.

EU Machinery Regulation vs Market Surveillance Regulation: compliance comparison

Compare Machinery Regulation product compliance duties with EU MSR market surveillance duties, authority requests, online sales, corrective action and evidence records.

EU Machinery Regulation: autonomous mobile and collaborative machinery

Source-based guide to Regulation (EU) 2023/1230 requirements for autonomous mobile machinery, human-machine interaction, controls, software, cybersecurity, risk assessment, technical documentation, and conformity routes.

EU Machinery Regulation: when does a modification constitute substantial modification?

Guide to substantial modification under Regulation (EU) 2023/1230: change triggers, risk assessment, EHSRs, technical documentation, conformity assessment, CE marking, and records.

EU Machinery Risk Assessment Method

How to document an EU Machinery Regulation risk assessment: ISO 12100 hazard identification, EHSR mapping, risk reduction, residual risk, software, cybersecurity, and technical-file evidence.

Machinery CE documentation template for Regulation (EU) 2023/1230

Template fields for Machinery Regulation CE documentation: product identity, scope, EHSR risk assessment, standards, tests, instructions, EU declaration, CE marking, notified body route, software, cyber, and substantial modification checks.

Machinery Regulation Annex I conformity route workflow

Classify machinery against Annex I Part A and Part B, choose the Article 25 conformity assessment route, and assemble the technical evidence file.

Machinery Regulation Annex I high-risk categories

Explain what Annex I does under Regulation (EU) 2023/1230, which listed machinery categories trigger special conformity routes, and what evidence to keep.

Machinery Regulation category and scope checks

Check whether a product is machinery, a related product, partly completed machinery, a safety component, excluded from scope, or listed in Annex I under Regulation (EU) 2023/1230.

Machinery Regulation conformity assessment and CE marking

EU Machinery Regulation guide to Article 25 conformity assessment routes, Annex I machinery categories, technical documentation, EU declarations, CE marking, and instructions.

Machinery Regulation digital instructions

EU Machinery Regulation guide to digital instructions for use: access marking, print and download access, paper copies, non-professional safety information, languages, and records.

Machinery Regulation penalties and enforcement

EU Machinery Regulation enforcement guide covering Member State penalty rules, corrective action, market surveillance powers, and cross-border authority cooperation.

Machinery Regulation related products scope guide

Classify EU Machinery Regulation related products, including interchangeable equipment, safety components, lifting accessories, lifting chains, ropes, webbing, and removable transmission devices.

Machinery Regulation software and cybersecurity considerations

How Regulation (EU) 2023/1230 treats safety-related software, control systems, corruption protection, technical documentation, and cyber-safety risk evidence.

Machinery Regulation Technical Documentation and Technical File

What to keep in the EU Machinery Regulation technical file: product identification, risk assessment, EHSR mapping, standards, tests, instructions, declarations, software evidence, retention, and notified-body records.

Machinery Regulation technical file acceptance workflow

Release-gate workflow for accepting an EU Machinery Regulation technical file: scope, EHSR risk evidence, standards, tests, declarations, notified-body records, software, cyber, and signoff.

Machinery Regulation Timeline and Transition: practical guide

EU Machinery Regulation timeline covering corrected application dates, the Directive 2006/42/EC changeover, certificate continuity, product placement decisions, and transition evidence.

Machinery Regulation vs EMC Directive

Compare EU machinery safety duties with EMC duties for equipment, CE documentation, harmonised standards, declarations, and combined technical files.

Machinery Regulation vs EU AI Act: machinery safety overlap

A cited-source comparison of the EU Machinery Regulation and EU AI Act for machinery with AI-enabled safety functions, software, cyber-safety and technical documentation overlap.

Machinery Regulation vs Machinery Directive

Official source comparison of Regulation (EU) 2023/1230 and Directive 2006/42/EC across legal form, timing, scope, digital instructions, cybersecurity, conformity assessment, documentation, and CE marking.

Machinery vs RED comparison

Compare EU Machinery Regulation and Radio Equipment Directive boundaries for machinery safety, radio equipment scope, CE documentation, and shared evidence.