Why this matters
Importers and distributors are often the first EU-side party to discover that a supplier has an SBOM but no documented reporting process, a long field life but a short security-support promise, or a product whose core functionality changes the classification path.
The goal is not to perform the manufacturer’s engineering work for them. It is to establish what evidence exists, what remains unverified, and which questions must be resolved before the commercial relationship becomes a compliance problem.
Supplier Evidence Review
Who supplies, brands and places the product on the EU market; where white-label/OEM routes change the role analysis.
Risk assessment, SBOM, vulnerability handling, update/remediation capability, support period and Article 14 readiness.
Identify product categories where core functionality warrants a closer Annex III/IV review rather than accepting the supplier’s label at face value.
A concise list of missing documents, decisions and evidence to request from the US manufacturer.
Best fit
DACH/EU importers and distributors carrying industrial electronics, embedded controllers, gateways, instrumentation, machine vision, building automation or related connected products from US suppliers.