Home New EU Regulations: What They Mean for Allgon Customers

New EU Regulations: What They Mean for Allgon Customers

The regulatory landscape

Three EU regulations now shape how connected products from the Allgon brands must be designed, documented, and secured — each one building on the last, broadening in scope from wireless equipment specifically to machinery, and finally to any product with a software element.

RED

2014/53/EU

MR

(EU)2023/1230

CRA

(EU)2024/2847

Radio Equipment Directive (RED)

What it is

Directive 2014/53/EU, with cybersecurity provisions (Article 3(3)) that became mandatory on 1 August 2025.

Goes in effect
Cybersecurity requirements already apply today.

What it covers
Radio equipment placed on the EU market. Within the portfolios of Allgon Group’s brands, this applies to applicable products.

What it means for our customers

The relevant Allgon companies alread holds a Declaration of Conformity and is RED-compliant on cybersecurity for applicable products. Only the technical requirements apply on the production side.

Radio Equipment Directive

Machinery Regulation (MR)

What it is

Regulation (EU) 2023/1230, replacing the current Machinery Directive (2006/42/EC) — moving from a directive to a directly applicable regulation.

Goes in effect
Applies across all EU member states from 20 January 2027.

What it covers

The complete machine placed on the EU market. Largely builds on existing requirements, with some additions — including, for the first time, cybersecurity. Requirements apply both to production and to Allgon’s ways of working, and cover existing and new products alike.

What it means for our customers

OEMs remain responsible for the risk assessment and CE-marking of the finished machine, and must now account for cybersecurity risks, including those introduced by connected components such as wireless remote controls, as part of that process.

Machine Regulation

Cyber Resilience Act (CRA)

What it is

Regulation (EU) 2024/2847, the EU’s first horizontal cybersecurity law for products with digital elements — broader in scope than the Machinery Regulation.

Goes in effect

Main obligations apply from 11 December 2027; vulnerability and incident reporting requirements begin 11 September 2026.

What it covers

Any product with a software element — not limited to wireless equipment (RED) or machinery (MR).

What it means for our customers

Allgon’s CRA readiness work is in progress across the Allgon Group. Manufacturers of connected components must show that products are securely developed and maintained throughout their lifecycle, with clear processes for handling vulnerabilities and issuing updates.

Cyber Resilience Act

Looking for more information? Read our frequently asked questions.

Read more

Allgon’s position on the Machinery Regulation

Regulation (EU) 2023/1230 replaces the Machinery Directive 2006/42/EC and becomes applicable on 20 January 2027. Allgon follows regulatory developments closely and treats compliance as a core part of our product commitment.

Our position

The Panther, Tiger, Puma, Remotus and our new generation product families hold EC type-examination certificates today and remain fully compliant with the legislation currently in force. Allgon has an active, group-coordinated project running to update these certificates so that these product families meet the requirements of Regulation (EU) 2023/1230 within the applicable timeframe.

The project covers the full scope of what the new regulation introduces:

Functional safety – revalidation and, where required, retesting against the applicable standards
EMC – extended testing across the product families
Software and cybersecurity – aligned with the digital and security requirements of the new framework
Technical documentation – updated technical files, instructions and declarations of conformity
Internal processes – conformity assessment and lifecycle procedures updated across the Allgon Group

What this means for you

Panther, Puma, Tiger, Remotus and our new generation products remain central to Allgon’s product portfolio. They are products we intend to keep active and selling for years to come, which is precisely why we are investing in bringing them into conformity with the new regulation rather than phasing them out.

Existing installations placed on the market before the transition date are not affected retroactively by the new regulation. For new installations, updated documentation and declarations of conformity will be issued before Janurary 2027.

What This Means for OEMs Working with Allgon

The two regulations don’t just apply to the finished machine – they touch different points along its life. Here’s how that plays out in practice.

Before a design is finalized

Retrofitting cybersecurity into a control architecture that’s already locked in is far harder than accounting for it upfront. Wireless communication, authentication, and software integrity are worth revisiting early in the design process, rather than patched in later to meet a deadline.

When you prepare for CE marking

The paperwork behind CE marking is getting heavier. Risk assessments, design justifications, and lifecycle plans will carry more weight than before — and that applies to the components you integrate, not just the machine as a whole. Expect to lean on documentation from suppliers like Allgon as part of your own compliance file.

Once the machine is in the field

None of these regulations treat compliance as a one-time milestone. Manufacturers are expected to keep watching for vulnerabilities, ship updates when needed, and support products for as long as they remain in service.

Sorting out who’s responsible for what

None of this works in isolation. OEMs depend on suppliers for the components that make up the machine, and Allgon depends on clear agreements with its own partners in turn. Working out where Allgon’s, or our brand’s, responsibility ends and yours begins — and documenting it — makes everything else in this list easier.

Where does your business stand today?

Not every OEM is affected the same way, and not every affected OEM needs to act immediately. A few signals are worth checking before deciding how urgent this is for your business.

It’s likely relevant if:

  • You place machinery on the EU market, now or in the next few years
  • Your machines rely on wireless remote control or other connected components
  • Any part of your product line will still be sold or serviced after January 2027

And it’s worth prioritizing soon if, on top of that:

  • Cybersecurity hasn’t yet been built into your control system architecture
  • It’s unclear who – you or your suppliers – owns which part of the compliance work
  • You don’t yet have a process for tracking vulnerabilities or pushing updates once a machine is in the field

The more of these that sound familiar, the more value there is in looking at this now rather than closer to the deadlines.

Not sure where you stand?

Talk to our team, we’re happy to walk through what applies to your specific setup.

"*" indicates required fields

This field is for validation purposes and should be left unchanged.
Instemming