FAQEU

Annex III EHSR mapping Machinery Regulation FAQ

Annex III of Regulation (EU) 2023/1230 contains the essential health and safety requirements that must be matched to the hazards of the machinery, related product, or partly completed machinery.

This FAQ helps separate Annex III requirement mapping from Annex I high-risk classification, and to connect each hazard decision to technical-file evidence.

Author
Sorena AI
Published
May 9, 2026
Updated
Jul 31, 2026
Questions
6

Structured answer sets in this page tree.

Primary sources
4

Cited legal and guidance references.

Publication metadata
Sorena AI
Published May 9, 2026
Updated Jul 31, 2026
Overview

Annex III EHSR mapping is the exercise of taking the product , identifying which apply, and documenting the design, protective measures, residual risks, instructions, standards, tests, and software evidence used to meet them. It is not the same as Annex I classification: Annex I lists machinery or related product categories that trigger specified conformity-assessment procedures.

Search this module

Find a question or answer quickly

6 of 6 questions
Question 1

What are Annex III EHSRs?

EHSRs are the in Annex III of Regulation (EU) 2023/1230. The general principles require the manufacturer to carry out a , determine which Annex III requirements apply, and then design and construct the machinery or related product to eliminate hazards or minimise the relevant risks.

The mapping should start with the intended use, reasonably foreseeable misuse, product limits, hazardous situations, severity, probability, and required risk reduction. Annex III says the first chapter is general and applies to all machinery or related products, while the other chapters apply where the shows more specific hazards such as mobility, lifting, underground work, lifting persons, or certain product categories.

A does not replace this applicability decision. It can provide a presumption of conformity only for the Annex III requirements it covers, so the EHSR map should record full, partial, or no standards coverage and identify the other technical evidence used for every remaining requirement.

These Regulation-specific Annex III duties apply from 20 January 2027. Products placed on the market before that date remain subject to the Machinery Directive transition in Article 52, so keep the first-placement date and the applicable legal basis with the map instead of retroactively relabelling an earlier file.

  • List each hazard and hazardous situation from the .
  • Mark the Annex III section that corresponds to that hazard, including the general chapter and any specific chapter triggered by the product design or use.
  • Record the protective measure used for each applicable EHSR and identify any residual risk that must be handled through instructions, warnings, maintenance, or other controls.
  • For partly completed machinery, map only the Annex III requirements that are relevant to the partly completed machinery and its intended incorporation.

How should Annex III be mapped under the Machinery Regulation?

Start from the , not from a generic checklist. For each intended use, foreseeable misuse, hazard, and hazardous situation, identify the applicable Annex III requirement, the protective measure chosen, the residual risk, and the evidence that proves the measure works. The same map should connect to drawings, control-system logic, standards or specifications applied, tests, instructions for use, and the EU declaration evidence.

Is Annex III the same as the Annex I high-risk list?

No. Annex III contains the used to design and assess conformity. Annex I is a list of categories of machinery or related products that must use specified conformity-assessment procedures under Article 25. A product can need detailed Annex III EHSR mapping even when it is not in an Annex I category.

Citations
Question 2

How does risk assessment drive the EHSR map?

The Annex III general principles describe an iterative process: determine product limits, identify hazards and hazardous situations, estimate severity and probability, evaluate whether risk reduction is required, then eliminate hazards or reduce risks using protective measures in the required priority order.

That means the EHSR map should be hazard-led. A mechanical movement hazard might point to guards or protective devices; a control-system hazard might point to safety and reliability of control systems; a software or data-integrity hazard might point to protection against corruption; and a mobility hazard might require the mobility chapter in addition to the general chapter.

  • Use the to justify why each Annex III section is applicable, not applicable, or covered by a more specific chapter.
  • Tie each risk-reduction measure to design evidence, test evidence, inspection evidence, or instruction text.
  • Show where harmonised standards, common specifications, or other technical specifications were applied, including any partial application.
  • Keep residual-risk language consistent between the EHSR map, instructions for use, labels or markings, and declaration evidence.
Citations
Recommended next step

Build a traceable Annex III EHSR map

Turn hazards, EHSRs, standards, tests, software evidence, residual risks, and declarations into one reviewable machinery technical-file map.

Question 3

Where do software and cybersecurity fit?

Software belongs in the Annex III map when it affects safety. The Regulation covers safety components as physical or digital components, including software, and Annex III includes specific requirements for protection against accidental or intentional corruption of hardware, software, and data that are critical to compliance with EHSRs.

For control systems, Annex III requires design and construction that prevent hazardous situations, including attention to faults in hardware or logic, errors in control-system logic, reasonably foreseeable malicious attempts where relevant, and limits of safety functions established through the manufacturer's . Where safety-related software versions or interventions are relevant, the Regulation also grounds tracing-log and source-code or programming-logic evidence in defined circumstances.

  • Identify software and data that are critical to EHSR compliance and record how they are protected against accidental or intentional corruption.
  • Record the installed software needed for safe operation and how the machinery can provide that information in an accessible form.
  • For safety-related software, keep version, intervention, validation, and tracing evidence aligned with the technical documentation.
  • For sensor-fed, remotely driven, autonomous, or self-evolving safety functions, document system capabilities, limitations, data, development, testing, and validation where relevant.
Citations
Regulation (EU) 2023/1230 on machinery

Annex III sections 1.1.9 and 1.2.1 ground protection against corruption, control-system safety, software identification, tracing logs, and autonomous or self-evolving safety-function evidence.

Question 4

Apply the supplementary EHSRs to the actual machinery

Test the against the real product and use. Record why each chapter applies or does not apply, then connect its design duties to drawings, material specifications, calculations, tests, cleaning or maintenance instructions, and residual-risk information.

Food, cosmetics, and pharmaceutical machinery needs evidence for material compatibility, cleanability, drainage or discharge, prevention of contamination, and instructions for cleaning, disinfecting, and rinsing. Lubricants or auxiliary substances that could contact products need a controlled design and maintenance basis. Hand-held and hand-guided machinery needs handling, control, stability, and vibration evidence. Portable fixing and impact machinery and woodworking machinery require their specific protective measures rather than a generic guarding statement.

Plant-protection machinery needs evidence covering operator and environmental exposure, filling and emptying, leakage, drift or unintended dispersion, distribution and calibration, cleaning, servicing, inspection, and the tests and instructions needed for safe adjustment. Mobile machinery needs visibility, operator position, travel control, stability, rollover or falling-object risks, braking, and information on vibration where applicable. Underground machinery, lifting machinery, and machinery lifting persons each require the corresponding strength, stability, control, access, carrier, anchorage, emergency, and marking checks.

  • Record the product feature or operating condition that triggers each supplementary chapter and the affected machinery variants.
  • For hygienic applications, link contact materials, surface finish, joints, drainage, cleaning methods, contamination controls, and maintenance instructions to verification evidence.
  • For mobile, underground, and lifting applications, link load cases, stability and strength calculations, protective structures, travel or lifting controls, access, emergency functions, tests, and markings to the applicable requirements.
  • For plant-protection machinery, retain distribution and calibration results, leakage and drift controls, filling and emptying design, operator exposure controls, cleaning procedures, and adjustment instructions for the supplied configuration.
  • When one product triggers several chapters, keep one integrated EHSR map and identify shared protective measures without deleting the separate requirement decisions.
Citations
Regulation (EU) 2023/1230 on machinery

Annex III Chapters 2 to 6 set supplementary requirements for specified product categories and hazards, including hygiene, portable machinery, plant-protection machinery, mobility, lifting, underground work, and lifting persons.

Question 5

What technical-file evidence should support the EHSR map?

Annex IV requires technical documentation to specify the means used to ensure conformity with applicable Annex III EHSRs. For machinery and related products, that documentation includes a complete product description, risk-assessment documentation, the list of applicable EHSRs, protective measures, residual risks, drawings and schemes, standards or common specifications applied, tests and calculations, instructions for use, declarations, production controls, and selected software or sensor-system evidence where relevant.

A useful EHSR map therefore has one row per applicable requirement or hazard cluster, with cross-references to the , design evidence, verification evidence, instruction text, standards basis, residual-risk treatment, and declaration support. If a or common specification is only partly applied, the record should say which parts were applied and what other technical specifications close the remaining EHSR gap.

  • : product limits, hazards, hazardous situations, applicable EHSRs, protective measures, and residual risks.
  • Design evidence: drawings, circuit schemes, control architecture, software logic descriptions, component data, and manufacturing controls.
  • Verification evidence: design calculations, tests, inspections, examinations, and research on components or fittings.
  • User-facing evidence: instructions for use, residual-risk information, warnings, maintenance criteria, and any declarations or assembly instructions that must travel with the product.
Citations
Question 6

How is Annex III different from Annex I?

Annex III answers the question: which essential safety requirements apply to this product and how were the risks eliminated or reduced? Annex I answers a different question: is the product in a category that must follow one of the specified conformity-assessment procedures under Article 25?

Keep both analyses in the same compliance pack, but do not merge them. Annex I classification may affect whether a notified body route is needed, while Annex III mapping remains the substantive evidence that the applicable health and safety requirements have been addressed.

  • Use Annex I to classify listed machinery or related product categories such as certain saws, presses, lifts, protective devices, logic units, or self-evolving safety-function systems.
  • Use Annex III to map hazards to requirements and evidence for every in-scope machinery or related product.
  • Where Annex I triggers a third-party route, the notified-body file still needs the Annex III EHSR map, , standards basis, tests, and technical documentation.
  • Do not treat absence from Annex I as proof that the product has no Annex III obligations.
Citations
Primary sources

References and citations

iso.org
Referenced sections
  • ISO cited sources support risk-assessment and risk-reduction terminology used when structuring hazard-to-EHSR evidence.
"Risk assessment and risk reduction"
eur-lex.europa.eu
Referenced sections
  • Annex I lists categories tied to Article 25 conformity-assessment procedures, while Annex III contains the EHSRs used to assess product safety.
"CATEGORIES OF MACHINERY OR RELATED PRODUCTS"
Related guides

Explore more topics

Declaration of Conformity vs Declaration of Incorporation | Machinery Regulation FAQ
FAQ on when machinery needs an EU Declaration of Conformity and when partly completed machinery needs an EU Declaration of Incorporation under Regulation (EU) 2023/1230.
Directive 2006/42/EC to Machinery Regulation transition
Transition guide for moving EU machinery files from Directive 2006/42/EC to Regulation (EU) 2023/1230, focused on the 20 January 2027 changeover, pipeline products, declarations, standards, technical documentation, software, cybersecurity, and digital instructions.
EU Machinery Regulation Applicability Test
Test whether a product is machinery, a related product, partly completed machinery, a safety component, substantially modified, excluded, or covered by overlapping EU product laws.
EU Machinery Regulation compliance
Machinery Regulation compliance checklist covering scope, EHSR risk assessment, technical documentation, instructions, conformity assessment, EU declarations, CE marking, software, transition, and market surveillance.
EU Machinery Regulation compliance checklist
Checklist for Regulation (EU) 2023/1230 covering scope, EHSR risk assessment, technical documentation, instructions, conformity assessment, EU declarations, CE marking, digital duties, transition, and market surveillance.
EU Machinery Regulation deadlines and compliance calendar
Calendar for Regulation (EU) 2023/1230 dates, Directive 2006/42/EC transition, release documentation gates, standards monitoring, and substantial-modification reviews.
EU Machinery Regulation FAQ
Answers to Machinery Regulation questions on scope, partly completed machinery, Annex I categories, Article 25 conformity assessment, digital instructions, software, cybersecurity, transition, CE files, and overlap with other EU product laws.
EU Machinery Regulation Partly Completed Machinery
What counts as partly completed machinery under Regulation (EU) 2023/1230, what documents travel with it, and where the final assembler takes over.
EU Machinery Regulation requirements
Requirements under Regulation (EU) 2023/1230: machinery scope, EHSR risk assessment, technical documentation, instructions, conformity assessment, EU declaration, CE marking, software evidence, transition, and surveillance.
EU Machinery Regulation Safety Components
Definition, scope, conformity assessment, technical documentation, declaration, CE marking, and cited examples for safety components under Regulation (EU) 2023/1230.
EU Machinery Regulation scope and machine categories
Scope guide for Regulation (EU) 2023/1230 covering machinery, related products, partly completed machinery, Annex I categories, exclusions, substantial modification, and category evidence.
EU Machinery Regulation substantial modification decision workflow
Workflow for assessing substantial modification under Regulation (EU) 2023/1230: change facts, hazard and risk impact, manufacturer obligations, conformity assessment, CE marking, and evidence.
EU Machinery Regulation vs LVD
Compare the EU Machinery Regulation and Low Voltage Directive boundary for machinery EHSRs, electrical risks, excluded electrical products, CE documentation, and evidence reuse.
EU Machinery Regulation vs Market Surveillance Regulation: compliance comparison
Compare Machinery Regulation product compliance duties with EU MSR market surveillance duties, authority requests, online sales, corrective action and evidence records.
EU Machinery Regulation: autonomous mobile and collaborative machinery
Official source guide to Regulation (EU) 2023/1230 requirements for autonomous mobile machinery, human-machine interaction, controls, software, cybersecurity, risk assessment, technical documentation, and conformity routes.
EU Machinery Regulation: when does a modification constitute substantial modification?
Guide to substantial modification under Regulation (EU) 2023/1230: change triggers, risk assessment, EHSRs, technical documentation, conformity assessment, CE marking, and records.
EU Machinery Risk Assessment Method
How to document an EU Machinery Regulation risk assessment: ISO 12100 hazard identification, EHSR mapping, risk reduction, residual risk, software, cybersecurity, and technical-file evidence.
Machinery CE documentation template for Regulation (EU) 2023/1230
Template fields for Machinery Regulation CE documentation: product identity, scope, EHSR risk assessment, standards, tests, instructions, EU declaration, CE marking, notified body route, software, cyber, and substantial modification checks.
Machinery Regulation and EU AI Act overlap for AI-enabled safety functions
FAQ on Machinery Regulation overlap with the EU AI Act for self-evolving or machine-learning safety functions, Annex I categories, standards work, and technical documentation boundaries.
Machinery Regulation Annex I conformity route workflow
Classify machinery against Annex I Part A and Part B, choose the Article 25 conformity assessment route, and assemble the technical evidence file.
Machinery Regulation Annex I high-risk categories
Explain what Annex I does under Regulation (EU) 2023/1230, which listed machinery categories trigger special conformity routes, and what evidence to keep.
Machinery Regulation category and scope checks
Check whether a product is machinery, a related product, partly completed machinery, a safety component, excluded from scope, or listed in Annex I under Regulation (EU) 2023/1230.
Machinery Regulation conformity assessment and CE marking
EU Machinery Regulation guide to Article 25 conformity assessment routes, Annex I machinery categories, technical documentation, EU declarations, CE marking, and instructions.
Machinery Regulation cybersecurity evidence FAQ
What cybersecurity evidence connected or software-enabled machinery should keep for protection against corruption, safety-related control systems, and machinery risk assessment.
Machinery Regulation digital instructions
EU Machinery Regulation guide to digital instructions for use: access marking, print and download access, paper copies, non-professional safety information, languages, and records.
Machinery Regulation penalties and enforcement
EU Machinery Regulation enforcement guide covering Member State penalty rules, corrective action, market surveillance powers, and cross-border authority cooperation.
Machinery Regulation related products scope guide
Classify EU Machinery Regulation related products, including interchangeable equipment, safety components, lifting accessories, lifting chains, ropes, webbing, and removable transmission devices.
Machinery Regulation software and cybersecurity considerations
How Regulation (EU) 2023/1230 treats safety-related software, control systems, corruption protection, technical documentation, and cyber-safety risk evidence.
Machinery Regulation Technical Documentation and Technical File
What to keep in the EU Machinery Regulation technical file: product identification, risk assessment, EHSR mapping, standards, tests, instructions, declarations, software evidence, retention, and notified-body records.
Machinery Regulation technical file acceptance workflow
Release-gate workflow for accepting an EU Machinery Regulation technical file: scope, EHSR risk evidence, standards, tests, declarations, notified-body records, software, cyber, and signoff.
Machinery Regulation Timeline and Transition: practical guide
EU Machinery Regulation timeline covering corrected application dates, the Directive 2006/42/EC changeover, certificate continuity, product placement decisions, and transition evidence.
Machinery Regulation vs EMC Directive
Compare EU machinery safety duties with EMC duties for equipment, CE documentation, harmonised standards, declarations, and combined technical files.
Machinery Regulation vs EU AI Act: machinery safety overlap
A cited-source comparison of the EU Machinery Regulation and EU AI Act for machinery with AI-enabled safety functions, software, cyber-safety and technical documentation overlap.
Machinery Regulation vs Machinery Directive
Official source comparison of Regulation (EU) 2023/1230 and Directive 2006/42/EC across legal form, timing, scope, digital instructions, cybersecurity, conformity assessment, documentation, and CE marking.
Machinery vs RED comparison
Compare EU Machinery Regulation and Radio Equipment Directive boundaries for machinery safety, radio equipment scope, CE documentation, and shared evidence.
What counts as machinery under Regulation (EU) 2023/1230?
FAQ on the Machinery Regulation definition of machinery, including assemblies, drive systems, missing components, software, related products, partly completed machinery, safety components, and exclusions.
When can a software update affect Machinery Regulation compliance?
FAQ on when machinery software updates can trigger Machinery Regulation review, including safety functions, substantial modification, corruption protection, instructions, and CE technical-file evidence.
When does used or modified machinery need a new conformity assessment? | Machinery Regulation FAQ
FAQ on used and modified machinery under Regulation (EU) 2023/1230, including substantial modification, first EU use, technical documentation, and market surveillance evidence.
When is a notified body needed under the EU Machinery Regulation?
FAQ on when Machinery Regulation Annex I products need a notified body, how to find designated bodies, and what manufacturers still own.
Which Article 25 conformity assessment module applies? | EU Machinery Regulation FAQ
FAQ on Article 25 of Regulation (EU) 2023/1230: Module A, Module B plus C, Module H, Module G, Annex I triggers, notified body involvement, and technical file evidence.