What Documentation Do Factories Need to Export Third-Party Component Products to the EU?

Last month, one of our shipping clients had an entire container of third-party branded components seized at Rotterdam Substances of Very High Concern (SVHC) ¹. The reason? Missing authorization documents and incomplete CE marking paperwork ². That single mistake cost weeks of delay and thousands in storage fees.

Factories exporting third-party component products to the EU need two core documentation pillars: intellectual property authorization files to prevent customs seizure and destruction, and CE/environmental safety compliance documents including technical files, EU Declaration of Conformity, REACH/RoHS proof, and risk assessment documentation to prevent market surveillance recalls.

This guide breaks down every document category step by step. Whether you source components from one supplier or five, you will know exactly what to collect, verify, and present at customs.

How do I determine which specific CE certificates my third-party components need for EU customs?

A buyer we work with recently asked me to ship a mixed container of electronic control boards and mechanical housings to Germany. Each component type fell under a different EU directive, and figuring out the right CE marking path for each one nearly derailed the shipment timeline.

To determine which CE certificates your third-party components need, identify the applicable EU directives by product type, check whether a Notified Body assessment is required, confirm the correct conformity assessment module, and verify that each component carries valid CE marking with a traceable EU Declaration of Conformity.

Start with Product Classification

The first step is always identifying the correct Código del Sistema Armonizado (SA) ³ for each component. The HS code determines which EU import regulations apply and which directives govern the product. Get this wrong, and every downstream document becomes invalid.

When we handle customs declarations for clients, we see errors here more than anywhere else. A motor controller classified as a "general electronic part" instead of under the Low Voltage Directive (LVD) ⁴ or EMC Directive will trigger a red flag at customs.

Match Components to EU Directives

Different component types fall under different directives. Here is a quick reference:

Each directive specifies which conformity assessment procedure the factory must follow. Module A means the manufacturer can self-certify. Module B + C or higher means a Notified Body must review the technical file ⁵ and issue a certificate.

Verify the CE Certificate Itself

Not all CE certificates are equal. I have seen forged certificates, expired certificates, and certificates issued by bodies that lost their Notified Body status. Here is what to check:

• Notified Body number: Cross-reference it on the EU NANDO database. If the body is not listed or its scope does not cover the directive, the certificate is worthless.
• Scope of the certificate: The certificate must name the exact component model, not just a product family.
• Validity dates: Some certificates expire. Others remain valid until the harmonized standards they reference are withdrawn.
• Referenced standards: The certificate should list specific harmonized standards (e.g., EN 60950-1 for IT equipment safety). These standards create a "presumption of conformity" with the directive.

What If the Component Is Not a Finished Product?

This is a critical distinction. Many third-party components are "partly completed machinery" or sub-assemblies. They may not need full CE marking themselves but do require a Declaration of Incorporation under the Machinery Directive, or a manufacturer's declaration stating which essential requirements have been met. The factory assembling the final product then takes responsibility for the remaining requirements.

When we coordinate shipments containing sub-assemblies, we always advise clients to request both the supplier's Declaration of Incorporation and the technical documentation proving partial compliance. Without these, the importer's authorized representative in the EU cannot complete the final conformity assessment.

What technical documentation should I request from my factory to prove component compliance?

During a recent shipment of power supply units bound for the Netherlands, we learned the hard way that having a CE mark on the product label means nothing without the full technical file behind it. The Dutch market surveillance authority requested the file within weeks of arrival, and our client scrambled to get it from the factory.

Request the complete technical file from your factory, including design drawings, risk assessment documentation, test reports against harmonized standards, a bill of materials, manufacturing process descriptions, and the signed EU Declaration of Conformity — all traceable to the specific component model and production batch.

The Technical File Is the Backbone

The technical file (sometimes called a "technical dossier") is the single most important compliance document for EU import. It proves that the factory actually performed the conformity assessment. CE marking without a technical file is like a diploma without attending school — authorities will not accept it.

Here is what a complete technical file must contain:

How Deep Should the Risk Assessment Go?

The risk assessment is not a generic checklist. Under the Machinery Directive, for example, it must follow EN ISO 12100 methodology ⁸: identify hazards, estimate risk, evaluate risk, and document risk reduction measures. For electrical components under LVD, the product safety standards referenced in the harmonized standards effectively serve as the risk assessment framework.

I always tell our clients to ask the factory for the actual risk assessment document — not just a statement that one was performed. If the factory cannot produce it, that is a red flag.

Test Reports: In-House vs. Third-Party Lab

Factories sometimes provide in-house test reports. While this is technically allowed under Module A self-certification, EU market surveillance authorities give far more weight to reports from accredited third-party labs (ISO/IEC 17025 accredited). If the component is high-value or high-risk, invest in third-party testing. It can save you from a costly recall later.

Keep Everything for Ten Years

EU regulations require that technical documentation be available for at least ten years after the last unit is placed on the market. If your factory closes or changes ownership, you lose access. I recommend that importers keep their own copies of the full technical file, stored digitally with clear version control.

Can I rely on my supplier's Declaration of Conformity for parts they sourced from outside vendors?

One trade-off we weigh constantly in our logistics operations is speed versus verification. A client once handed us a Declaration of Conformity from their Tier 1 supplier, assuming it covered sub-components sourced from three different Tier 2 factories in Guangdong. It did not. The DoC only covered final assembly, and the sub-components had zero compliance documentation.

You cannot blindly rely on your supplier's Declaration of Conformity for parts sourced from outside vendors. The DoC only covers what the signing entity manufactured or assembled. You must independently verify that each sub-component meets EU product safety standards, has its own compliance evidence, and is traceable through a complete authorization chain.

Understanding the Legal Weight of a DoC

The EU Declaration of Conformity is a legal document. The entity that signs it accepts full legal responsibility for the product's compliance. When a supplier signs a DoC, they declare that their product meets the applicable directives. But here is the catch: if their product contains third-party sub-components, the DoC does not automatically certify those sub-components individually.

Think of it this way. A power supply manufacturer signs a DoC for their finished power supply. Inside, there is a capacitor from Vendor A and a transformer from Vendor B. The DoC covers the finished power supply as a whole — including those parts — but only in the context of how they function within that specific assembly. If you pull out that capacitor and sell it separately in the EU, it needs its own compliance path.

The Intellectual Property Layer Most People Miss

This is where our experience handling customs clearance across dozens of EU-bound shipments becomes critical. Beyond CE and safety compliance, there is a major intellectual property dimension that many exporters overlook.

If your product contains third-party branded components, EU customs officers check for trademark authorization first. Here is the authorization chain you need:

• Original brand authorization letter: Issued by the component brand owner, specifying the authorized party, the EU trademark registration number (EUTM), permitted use scope, validity period, allowed quantities, and matching model numbers. This should be an English original with the brand's official stamp.
• Sub-authorization chain: If the factory did not buy directly from the brand owner, every intermediary (trading company, contract manufacturer) needs a stamped authorization letter. A broken chain means customs can seize and destroy the goods as counterfeit.

Practical Verification Steps

Here is what I recommend to every client before we book their shipment:

1. Request the DoC and read it carefully. Check the signatory, the product model listed, and the directives referenced.
2. Ask for the BOM. Identify which sub-components come from outside vendors.
3. For each outside vendor component, request: test reports, material declarations, and any applicable certifications.
4. Verify brand authorization. If any sub-component carries a third-party trademark, get the full authorization chain.
5. Cross-check EORI numbers. The importer's EORI number must be valid and linked to the customs declaration. Without it, goods cannot clear EU customs at all.

How do I ensure my third-party component paperwork satisfies EU REACH and RoHS requirements?

A lesson we learned early in our logistics business: CE marking and REACH/RoHS compliance are separate tracks, and passing one does not mean you pass the other. We once coordinated a shipment of LED driver modules that had perfect CE documentation but were flagged at the German border because the factory could not provide a REACH SVHC declaration for a specific plasticizer in the housing material.

To satisfy EU REACH and RoHS requirements, collect Substances of Very High Concern (SVHC) declarations, full material composition data, RoHS test reports from accredited labs, and SCIP database notifications for each third-party component — then verify that all restricted substance concentrations fall below regulatory thresholds.

REACH and RoHS Are Different Regulations

Many people confuse REACH and RoHS ⁹. They overlap in some areas but serve different purposes and have different requirements.

REACH (Registration, Evaluation, Authorisation and Restriction of Chemicals) applies to virtually all products containing chemical substances sold in the EU. The key obligation for component exporters is Article 33: if any component contains a Substance of Very High Concern (SVHC) above 0.1% weight by weight, you must communicate this information down the supply chain and notify the SCIP database maintained by the European Chemicals Agency (ECHA).

RoHS (Restriction of Hazardous Substances) targets specific substances in electrical and electronic equipment. It restricts lead, mercury, cadmium, hexavalent chromium, PBB, and PBDE to strict maximum concentration values.

What Documents to Collect

For every third-party component in your product, gather the following:

• REACH SVHC Declaration: A written statement from the component manufacturer confirming whether any SVHC on the current Candidate List is present above 0.1% w/w. The Candidate List is updated twice a year, so declarations must reference the most recent version.
• Full Material Disclosure (FMD): Some industries require a complete breakdown of material composition. This is especially important for components with complex chemistries — coatings, plastics, solder alloys.
• RoHS Test Report: Issued by an accredited testing laboratory (e.g., SGS, TÜV, Bureau Veritas). The report must test for all ten restricted substances under RoHS Directive 2011/65/EU as amended by Delegated Directive (EU) 2015/863.
• SCIP Notification Confirmation: If any SVHC is present above 0.1%, the supplier or importer must submit a SCIP notification to ECHA before the product is placed on the EU market.

Errores comunes

From our experience coordinating hundreds of EU-bound shipments, these are the mistakes we see most often:

1. Outdated SVHC declarations. The Candidate List grows regularly. A declaration from 2021 may miss substances added in 2023 or 2024.
2. RoHS exemptions misapplied. Some components qualify for RoHS exemptions (e.g., lead in certain solder alloys for servers). But the exemption must be explicitly cited and documented — you cannot assume it applies.
3. No lab testing, only supplier self-declarations. While self-declarations are common, EU market surveillance authorities can request actual XRF or wet chemistry test results. If you cannot produce them, enforcement action follows.
4. Ignoring packaging materials. EU regulations extend to packaging. Under the Packaging and Packaging Waste Regulation (PPWR), packaging must meet its own compliance standards, including heavy metal concentration limits.

Digital Product Passport: The Emerging Requirement

For electronics and battery components, the EU is rolling out Digital Product Passport (DPP) ¹⁰ requirements. This means factories will need to collect and digitally link detailed material composition data, recycling information, and environmental impact metrics for each component. While full enforcement is still phased in, forward-thinking factories are already building these data systems. If your components include batteries or complex electronics, start asking your factory about DPP readiness now.

The broader trend is clear: the EU is moving toward full supply chain transparency. Risk assessment documentation, environmental compliance data, and ESG due diligence are no longer optional extras — they are becoming baseline requirements for market access.

Conclusión

Exporting third-party component products to the EU demands rigorous documentation across intellectual property authorization, CE conformity assessment, technical files, and REACH/RoHS compliance — get every link right to keep your goods moving through customs smoothly.

Footnotes

1. Provides access to the official and regularly updated list of Substances of Very High Concern by ECHA. ↩︎

2. Provides official information on CE marking, its purpose, and requirements for products in the EU. ↩︎

3. Explains the international system for classifying goods and its use in EU customs. ↩︎

4. Links to the official legal text of the EU's Low Voltage Directive. ↩︎

5. Replaced with the official 'Your Europe' portal from the European Union, providing comprehensive information on technical documentation for CE marking. ↩︎

6. Explains the legal responsibility of manufacturers for issuing the Declaration of Conformity. ↩︎

7. Provides access to the official EU database for identifying Notified Bodies. ↩︎

8. Links to the official ISO standard for risk assessment and reduction in machinery design. ↩︎

9. Provides official information on the REACH regulation, its scope, and purpose in the EU. ↩︎

10. Introduces the EU's initiative for digital product passports to enhance transparency and sustainability. ↩︎