Annex I IMPORTANT PRODUCTS WITH DIGITAL ELEMENTS

Identity management systems are products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that provide mechanisms for authentication or authorisation and that may also provide mechanisms for the lifecycle management of identity credentials of natural persons, legal persons, devices or systems, such as identity registration, provisioning, maintenance, deregistration. These systems include access management systems that control access of natural persons, legal persons, devices or systems to digital resources or physical locations.

Privileged access management softwaremeans the part of an electronic information system which consists of computer code; is an access management system that controls and monitors access rights to IT or OT systems and sensitive information within an organisation, including systems enforcing differentiated access control policies for privileged users.

This category includes but is not limited to authentication and access control readers, biometric readers, single sign-on softwaremeans the part of an electronic information system which consists of computer code;, federated identity management softwaremeans the part of an electronic information system which consists of computer code;, one-time password softwaremeans the part of an electronic information system which consists of computer code;, hardwaremeans a physical electronic information system, or parts thereof capable of processing, storing or transmitting digital data; authentication devices such as transaction authentication number (TAN) generators, authentication softwaremeans the part of an electronic information system which consists of computer code; and multi-factor authentication softwaremeans the part of an electronic information system which consists of computer code;.

Softwaremeans the part of an electronic information system which consists of computer code; products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that enable end users to access, render, and interact with web content and services hosted on servers that are connected to networks such as the Internet. They typically include a browser engine for interpreting and displaying content written in markup language (e.g. HTML), support for web protocols (e.g. HTTP, HTTPS), the ability to execute scripts and manage user inputs as well as storage of temporary or persistent data from websites (cookies).

This category includes but is not limited to standalone applications that fulfil the functions of browsers, embedded browsers intended for integration into another system or application as well as browsers with AI agent integration.

Products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that store passwords, locally on a device or on a remote server, including activities such as generation of passwords as well as password sharing and integration with local or third-party applications for usage of passwords.

This category includes but is not limited to local password managers, password managers provided as browser extensions, enterprise password managers as well as hardware-based password managers.

Softwaremeans the part of an electronic information system which consists of computer code; products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately;, typically referred to as antivirus or antimalware, that detect or search for malicious softwaremeans the part of an electronic information system which consists of computer code; or code on devices, or remove or quarantine such softwaremeans the part of an electronic information system which consists of computer code; or code, in order to maintain the integrity, confidentiality, or availability of such devices.

In the context of this category of products, malicious softwaremeans the part of an electronic information system which consists of computer code; means softwaremeans the part of an electronic information system which consists of computer code; containing malicious features or capabilities that can cause harm directly or indirectly to the user and/or the computer system, such as viruses, worms, ransomware, spyware and trojans.

This category includes but is not limited to softwaremeans the part of an electronic information system which consists of computer code; that detects or searches for malicious softwaremeans the part of an electronic information system which consists of computer code; in real-time or manually, rootkit detection and rescue disks with the core functionality of searching, removing or quarantining malicious softwaremeans the part of an electronic information system which consists of computer code;.

Products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that establish an encrypted logical tunnel that is constructed from the system resources of a physical or virtual network.

This category includes but is not limited to virtual private network clients, virtual private network servers and virtual private network gateways.

Products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that manage connected network elements, such as servers, routers, switches, workstations, printers or mobile devices, by monitoring them and controlling their network operations and configuration.

This category includes but is not limited to end-to-end management systems and dedicated configuration management systems, such as controllers for software-defined networking.

Softwaremeans the part of an electronic information system which consists of computer code; products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that manage the process of initial system startup after power on/restart by initialising hardwaremeans a physical electronic information system, or parts thereof capable of processing, storing or transmitting digital data;, loading or transferring control to the operating system environment or system resources, and selecting boot options.

This category includes but is not limited to UEFI firmware, single-stage and multi-stage boot loaders.

Products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; used as part of a public key infrastructure (PKI) that manage the validation, creation, issuance, distribution, status publication, renewal or revocation of digital certificates, or the generation, storage, escrow, exchange, destruction or rotation of cryptographic keys associated with such digital certificates.

This category includes but is not limited to key management systems, digital certificate management systems, online certificate status protocol responders and all-in-one PKI solutions.

Physical network interfaces are products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that directly connect a device to a network via an application programming interface (API) provided by the interface drivers, typically operating at the data link layer, and that feature hardwaremeans a physical electronic information system, or parts thereof capable of processing, storing or transmitting digital data; adapters to transmission media with corresponding firmware, typically operating at the physical and data link layer.

Virtual network interfaces are products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that directly or indirectly connect a device to a network via an API that emulates that of drivers of physical network interfaces, typically operating at the data link layer.

This category includes but is not limited to wired and wireless network interface cards, controllers and adapters, such as for Wi-Fi, Ethernet, IrDA, USB, Bluetooth, NearLink, Zigbee, or Fieldbus, as well as purely virtual standalone products, such as virtual network interface cards, container network interfaces and VPN interfaces.

Softwaremeans the part of an electronic information system which consists of computer code; products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that provide an abstract interface of the underlying hardwaremeans a physical electronic information system, or parts thereof capable of processing, storing or transmitting digital data; and control the execution of softwaremeans the part of an electronic information system which consists of computer code;, and that may provide services such as computing resource management and configuration, scheduling, input-output control, managing data, and providing an interface through which applications interact with system resources and peripherals.

This category includes but is not limited to real-time operating systems, general-purpose and special-purpose operating systems.

Routers are products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that establish and control the flow of data between different networks by selecting paths or routes using routing protocol mechanisms and algorithms, typically operating at the network layer.

This category includes but is not limited to wired and wireless routers, virtual routers and routers with or without modems.

Modems intended for the connection to the Internet are hardwaremeans a physical electronic information system, or parts thereof capable of processing, storing or transmitting digital data; products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that use digital modulation and demodulation techniques to convert analogue signals from and to digital signals for IP-based communication.

This category includes but is not limited to fibre modems, Digital Subscriber Line (DSL) modems, cable (DOCSIS) modems, satellite modems and cellular modems.

Switches are products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that provide connectivity between networked devices through packet forwarding mechanisms and that have a management plane, typically implemented at the data link or network layer.

This category includes but is not limited to managed switches, smart switches, multilayer switches, virtual security switches, programmable switches for software-defined networking and bridges such as wireless access points.

Products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that communicate on the public Internet, whether directly or via other equipment, that process demands, tasks or questions based on natural language prompts, such as through audio or written input, and that, based on those demands, tasks or questions, provide access to other services or control the functions of connected devices in residential settings.

This category includes but is not limited to smart speakers with an integrated virtual assistant, and standalone virtual assistants that meet this description.

Products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that protect the physical security of consumersmeans a natural person who acts for purposes which are outside that person’s trade, business, craft or profession; in a residential setting and which can be controlled or managed remotely from other systems, as well as hardwaremeans a physical electronic information system, or parts thereof capable of processing, storing or transmitting digital data; and softwaremeans the part of an electronic information system which consists of computer code; that centrally control such products.

This category includes but is not limited to smart door locking devices, baby monitoring systems, alarm systems and home security cameras.

Personal wearable products to be worn or placed on a human body that have a health monitoring purpose are products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that are worn on the body directly or via clothing or accessories and that can, regularly or continuously, sense and further process information, including body metrics, relevant to the user’s health, excluding products that fall within the scope of Regulation (EU) 2017/745 or of Regulation (EU) 2017/746.

This category includes but is not limited to fitness trackers, smartwatches, smart jewellery, smart clothing and sports apparel that meet this description.

Personal wearable products that are intended for the use by and for children are products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; which can be worn or placed on the body, directly or via clothing or accessories, of individuals under the age of 14.

This category includes but is not limited to child safety wearables.

Hypervisors are softwaremeans the part of an electronic information system which consists of computer code; products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that abstract and/or allocate computing resources and enable the execution, management and orchestration of virtual machines that are logically separated from each other and/or from the physical hardwaremeans a physical electronic information system, or parts thereof capable of processing, storing or transmitting digital data;. Hypervisors may run directly on hardwaremeans a physical electronic information system, or parts thereof capable of processing, storing or transmitting digital data; (bare metal), on top of an operating system, or within another virtual machine (nested virtualisation).

In the context of this category of products, a virtual machine is a software-defined logical separation of a computing environment, which includes a virtualised set of hardwaremeans a physical electronic information system, or parts thereof capable of processing, storing or transmitting digital data; resources (e.g. CPU, memory, storage, network interfaces) and typically hosts its own operating system.

This category includes but is not limited to type 1 hypervisors (bare metal), type 2 hypervisors (hosted on an operating system) and hybrid hypervisors.

Container runtime systems are softwaremeans the part of an electronic information system which consists of computer code; products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that manage the execution and lifecycle of containers running on a single host operating system as isolated processes, allocating resources and allowing the management and orchestration of individual containers.

In the context of this category of products, a container is a software-based execution environment that encapsulates one or more softwaremeans the part of an electronic information system which consists of computer code; componentsmeans software or hardware intended for integration into an electronic information system; and their dependencies in a single package, enabling it to run independently and consistently.

Firewalls are products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that protect a connected network or system from unauthorized access by monitoring and restricting data communication traffic to and from that network.

This category includes but is not limited to network firewalls and application firewalls such as web application firewalls or filters and anti-spam gateways.

Intrusion detection systems are products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that monitor traffic once it has entered the network environment for suspicious activity and detect or identify that an intrusion has been attempted, is occurring, or has occurred on a connected network or system.

This category includes but is not limited to network-based intrusion detection systems and host-based intrusion detection systems.

Intrusion prevention systems are products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; composed of an intrusion detection system that actively responds to an intrusion to a connected network or system.

This category includes but is not limited to network-based intrusion prevention systems and host-based intrusion prevention systems.