Certification and Approval

Certification and approval are central to regulation and quality assurance, and each has a specific role. Notification and accreditation matter in this context too, because they define what testing and certification organizations are allowed and able to do. This page explains the four terms and how they differ and relate to each other.

Contents
  1. Certification and approval
  2. Notification and accreditation
  3. The role of testing organizations

Certification and approval

Certification is the process in which an independent body (the certification body) confirms that a product, service, or system meets specific requirements, usually set out in standards or regulations. The confirmation is usually documented in a certificate.

Approval is a procedure, often carried out by a government or regulatory authority, that is required before a product or service can be placed on the market or put into service. Approval ensures that the product or service meets the legal requirements and often focuses on safety-critical aspects.

Notification and accreditation

Notification is the process in which a national authority designates an organization and authorizes it to carry out specific tasks under a legal act. These tasks usually include the conformity assessment of products or systems. A notified body is selected for its proven competence and reliability in a specific field.

Accreditation is a formal procedure that confirms that a body is technically competent and able to carry out specific tasks reliably. This often concerns conformity assessment activities such as testing, inspection, and certification. Accreditation is granted by national or international accreditation bodies, which ensure that organizations meet internationally defined standards and requirements.

The distinction matters because notification and accreditation concern different aspects of an organization's competence and responsibility in the regulatory process. Notification is a specific mandate from a government authority. Accreditation is a broader recognition of an organization's technical competence, independent of any specific regulatory task.

The role of testing organizations

In Germany and many other countries, testing, inspection, and certification organizations such as the TÜV companies (Technischer Überwachungsverein, technical inspection associations) play a key role in approval and certification procedures. They often act as notified bodies for a wide range of products and services, including vehicles, medical devices, and industrial equipment. They offer testing, certification, and technical services to ensure that products and installations meet the relevant safety and quality standards.

Certification, approval, notification, and accreditation are building blocks of many European regulatory frameworks, from CE marking and the CRA to sector-specific rules. If you want to understand which procedures apply to your products or organization, we can sort this out with you in a no-obligation call.

Book a call

Choosing a CRA consultant? Here is how to find the right one.

Get the guide

Book a call

Send us your request. Together we will look at where your company stands, which questions are still open, and what the sensible next steps are.

For information on how we process your data, see our privacy policy.

Guide: How to choose the right CRA consultant

CRA consulting offers are hard to compare. One provider delivers only a gap analysis, another also supports the technical implementation, and both call themselves “CRA consultants.” If you ask the wrong questions, you end up paying for services you don't need, or you find out halfway through the project that key expertise is missing.

Our guide shows manufacturers what really matters when choosing a provider, from the expertise you need to the right pricing model and the 20 questions you should ask every provider.

What the guide covers:

  • the seven areas of expertise a complete CRA implementation requires
  • four support models depending on your in-house capacity and expertise
  • 20 specific questions for your next provider meeting
  • a red flag card for spotting warning signs quickly
  • a scoring sheet with rating guidance for a structured comparison of providers

Download it for free

Newsletter

For information on how we process your data, see our privacy policy.

Free templates: CRA reporting process

Prepare your company for the reporting obligations under the Cyber Resilience Act. You get process descriptions and templates tested in practice for:

  • reporting actively exploited vulnerabilities
  • reporting severe incidents
  • the required early warning notifications, notifications, and final reports
  • clear responsibilities, escalation paths, and deadlines

Enter your contact details and we will email you the files.

Newsletter

For information on how we process your data, see our privacy policy.

Free template: Risk assessment according to EN 50742

We use this template in our consulting projects for systematic threat assessment. You get an Excel template with:

  • a structured threat assessment for your machinery
  • a systematic way to determine safety-related security levels (SRSL)
  • documentation of vulnerabilities and protective measures

Enter your contact details and you will receive the template within minutes.

Newsletter

For information on how we process your data, see our privacy policy.

Free template: SBOM

We use this template in our consulting projects to meet the CRA requirements for the software bill of materials.

Enter your contact details and you will receive the template within minutes.

Newsletter

For information on how we process your data, see our privacy policy.

Free template: Vulnerability disclosure policy

We use this template in our consulting projects to meet the CRA requirements for vulnerability handling. You get a Word template with:

  • a structure based on EN 40000-1-3
  • predefined sections for reporting channels, response times, and responsibilities
  • safe harbor clauses for security researchers

Enter your contact details and you will receive the template within minutes.

Newsletter

For information on how we process your data, see our privacy policy.