Machinery Regulation 2023/1230: what changes from 2027 and why Certiblok QRCube is the answer

From 20 January 2027, EU Machinery Regulation 2023/1230 becomes mandatory, definitively repealing Directive 2006/42/EC.

This is not a routine update: it is a paradigm shift that redefines how machines are designed, documented, and managed throughout their entire lifecycle.

For the first time in the history of European legislation, instructions for use and the EU Declaration of Conformity can be provided exclusively in digital format. And the legal form chosen — a Regulation, not a Directive — means direct and uniform application across all 27 Member States: same deadline, same text, no local derogations. Companies that are not yet ready are already behind.

The 4 most impactful changes for manufacturers

Regulation 2023/1230 brings changes on multiple levels.

The most immediate concerns documentation: digital instructions must be accessible via a QR Code or URL indicated on the machine, available for at least 10 years after placing on the market, and downloadable and printable at any time. Simply uploading a PDF to a server is not enough: a structured system is required, with permanent URLs, certified versioning, and an audit trail.

Then there is cybersecurity — for the first time an Essential Health and Safety Requirement (EHSR): a connected machine not designed to withstand unauthorised access is non-compliant.

Artificial intelligence: machines with self-evolving systems based on machine learning require more rigorous conformity assessment procedures and the mandatory involvement of a Notified Body.

Finally, the redefined substantial modification: any physical or digital intervention not foreseen by the manufacturer — including a software update that alters safety functions — automatically transfers responsibilities from the manufacturer to the party carrying it out.

⚠️ The Software Update Paradox

A company internally installs a firmware update that modifies the emergency stop logic of a CNC machine. The result: it has just assumed the legal responsibility of a manufacturer, with the obligation to carry out a new risk assessment, prepare a new technical file, and — if the modification concerns safety functions — undergo a new conformity procedure. From 20 January 2027, there is no more ambiguity.

The Documentation Revolution: QR Codes, Permanent Links, and 10 Years of Availability

The documentation requirement of Machinery Regulation 2023/1230 is far more demanding than it appears. The QR Code applied to the machine cannot point to a URL that changes: if the server is migrated or the company domain is modified, that physical code engraved on the frame becomes useless, with no possibility of remote correction.

Dynamic QR Codes are needed, manageable independently from the physical file. The system must retain all previous versions of the document, with timestamps, to demonstrate which version accompanied the machine at the time of placing on the market.

It must be resilient — it cannot go offline — and must record every access in a certifiable manner. The EU Declaration of Conformity must be verifiable as authentic and unaltered, with a qualified digital signature. Anyone still managing manuals via email and shared folders is structurally non-compliant with the requirements of the new Regulation 2023/1230.

How Certiblok QRCube Meets Every Requirement of the Regulation

Certiblok is the only platform natively designed for the documentation requirements of Machinery Regulation 2023/1230. Its key tool for machine manufacturers is QRCube: a dynamic QR Code system specifically designed to be physically applied to products and guarantee permanent access to the associated documentation, without ever needing to replace the physical code.

The principle is simple yet decisive: the QR Code on the machine does not point to a file, but to a permanent digital container managed by Certiblok. When the manual is updated, the manufacturer uploads the new version: the physical code remains identical, but anyone scanning it automatically sees the current version.

All previous versions are retained with an immutable timestamp, ready to answer the most dreaded question during an inspection: “Which version of the instructions accompanied this machine on the delivery date?”

Every access is recorded in the audit trail: who scanned the code, when, from which device, and which version was viewed. The cloud architecture with AES-256 encryption and geo-redundant infrastructure ensures continuous availability for the 10 years required by the regulation, even in the event of ransomware attacks or infrastructure failures. The recipients — operators, maintenance technicians, inspectors — access the document from any smartphone, with no app, no credentials, and no friction.

🔄 Traditional vs Certiblok QRCube

Email+PDF method: a PDF is sent upon delivery. If the manual is updated 6 months later, the manufacturer must track down all customers, send a new email, and hope it gets read. No certainty, no audit trail.

Certiblok QRCube: the manufacturer uploads the new version, and all QRCube holders automatically see the updated document at the next scan. Operational time: from days to minutes. Compliance: guaranteed.

Proactive Compliance as a Competitive Advantage

In the main European markets — Germany, France, the Netherlands — SDS inspections have intensified.

The German BGs and the French Direction Générale du Travail can carry out inspections that include verifying the accuracy and version of the SDSs in use.

A company using outdated safety data sheets, even if provided by a third party, can be held jointly responsible for failing to adopt preventive measures. Proactive compliance — the ability to demonstrate at any time that all SDSs in circulation are up to date, in the correct language, and made available to all mandatory recipients — is not just about legal compliance: it is a concrete competitive advantage.

Companies certified under ISO 14001 or EMAS, and those participating in public tenders with environmental requirements, find in digital SDS management a verifiable advantage.

FAQ — Frequently Asked Questions

What changes concretely from 20 January 2027? Directive 2006/42/EC is repealed and Regulation 2023/1230 becomes mandatory across all 27 EU Member States. Compliance with the old Directive is no longer sufficient: the technical file, Declaration of Conformity, and instructions must meet the new requirements, including the digital ones.

Who is affected besides the manufacturer? The Regulation involves the entire supply chain: importers and distributors have specific obligations that are personally enforceable. Anyone importing machines from non-EU countries must verify that the entire technical documentation complies with the new standards, assuming in certain cases the responsibilities of a manufacturer.

Can a software update really make me a ‘manufacturer’? Yes. Any digital modification not foreseen by the original manufacturer that affects safety functions constitutes a substantial modification. Whoever carries it out automatically assumes the obligations of a manufacturer: new risk assessment, new technical file, new CE marking.

Why Certiblok’s QRCube and not a static QR Code? A static QR Code points directly to a fixed URL: if the document is moved or the domain changes, the code engraved on the machine becomes useless. Certiblok’s QRCube points to a permanent digital container, updatable without ever touching the physical code, with certified versioning and audit trail.

Book your personal call today: we will show you how to strengthen confidentiality, speed up processing times, and increase document control, with a platform designed for security and collaboration. You can contact us directly at commerciale@certiblok.com or fill in the contact form to book a slot.

You can also discover all the platform’s advantages directly on the Certiblok features page or explore practical examples and case studies on our official blog.

Gianluigi Michelotto Co Founder Certiblok
Prova Certiblok Gratis

Compila il form qui sotto per richiedere il Piano FREE o il Piano BUSINESS completo per 30 giorni


CERTIBLOK, LA PIATTAFORMA DRM® Document Relationship Management,

che rivoluziona il modo di gestire e condividere i documenti, anche quelli più riservati. Semplifica il lavoro in team, gestisce le scadenze, ti collega con clienti, fornitori, consulenti ed enti ispettivi, garantendo la massima protezione del tuo patrimonio documentale attraverso il cloud decentralizzato e la tecnologia Blockchain.

Distributore per la Svizzera

Certificati ISO 27001

Membro di