Compliance & Sustainability

 

1. Product- & material conformity

 

REACH

EU-chemical order (EC) No. 1907/2006 of the European Parliament and the advice to the registration, valuation, licensing and restriction of chemical substances (REACH)

Download - certificate

Based on the SVHC list the products supplied to you by Deutronic Elektronik GmbH contain no high concern substances with a concentration of more than 0.1 weight percent.

Extract from the regulation:

Article 33 Duty to communicate information on substances in articles

  • Any supplier of an article containing a substance meeting the criteria in article 57 and identified in accordance with article 59(1) in a concentration above 0,1 % weight by weight (w/w) shall provide the recipient of the article with sufficient information, available to the supplier, to allow safe use of the article including, as a minimum, the name of that substance.
  • On request by a consumer any supplier of an article containing a substance meeting the criteria in article 57 and identified in accordance with article 59(1) in a concentration above 0,1% weight by weight (w/w) shall provide the consumer with sufficient information, available to the supplier, to allow safe use of the article including, as a minimum, the name of that substance.

 

RoHS

EU directive in 2015/863 on the restriction of the use of certain hazardous substances in electrical and electronic equipment Restriction of Hazardous Substances (RoHS)

Download - certificate

The products manufactured by Deutronic Elektronik GmbH comply with the RoHS directive in 2015/863 and they contain no ingredients respectively within the permitted limits, which are mentioned in the directive guidelines.

Already in the middle of 2005, we have adapted our production to meet the new guidelines. Since that time we exclusively manufacture RoHS compliant.

To our knowledge, all products delivered to you from Deutronic Elektronik GmbH do not contain substances, whose marketing is prohibited under the RoHS directive.

Furthermore, we can confirm, based on statements of our suppliers, that we only use components which meet the requirements of the RoHS Directive.

A small part of components can not comply with this directive. These are for example batteries.

 

TSCA

US federal law regulating chemical substances to minimize risks to health and the environment, Toxic Substances Control Act (TSCA)

Download – certificate

Deutronic Elektronik GmbH hereby confirms that all products supplied by us and their packaging, when used correctly in accordance with the product specifications, to the best of our current knowledge, comply with the requirements of the Toxic Substances Control Act (TSCA) in the currently valid version of the U.S. Environmental Protection Agency (EPA).

 

EUDR

EU Regulation (EU) 2023/1115 on deforestation-free supply chains (“EUDR”) regulates the placing on the market of certain raw materials (including wood) and products made from them in the European Union

Download – certificate

At Deutronic, cardboard boxes and pallets are used exclusively as packaging and transport materials for electronic products.
They serve to support, protect, and carry the devices and are not marketed or sold by Deutronic as separate goods.

 

 

2. Responsible supply chain

Conflict minerals

Statement relating to the Dodd-Frank Act

The Deutronic Elektronik GmbH does not import any minerals directly, including the “Conflict Minerals”, like kassiterit, gold or wolframit.

According to our current knowledge, none of our suppliers use conflict minerals which are originated in the Democratic Republic Kongo or its neighboring countries.

The Deutronic Elektronik GmbH is not obligated to inform due SEC regulations.

 

 

3. Cyber Resilience Act (CRA), Vulnerability Management & Product Security

As a manufacturer of high-quality electronics and power electronics solutions, the security, integrity, and resilience of our products containing digital elements are our top priority.

In accordance with the requirements of EU Regulation 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act – CRA), Deutronic Elektronik GmbH maintains an active vulnerability management program and provides a central, direct point of contact for reporting security vulnerabilities.

Central Point of Contact for Security Reports

If you discover a potential security vulnerability or a security-related issue in a Deutronic Elektronik GmbH product, please notify us using the following contact information:

Email: CRA(at)deutronic.com
Department in Charge: CRA / Product safety

Please use this contact address exclusively for reports regarding security vulnerabilities, weaknesses, and security-related issues in our products.

What You Should Include in a Report

To enable the fastest and most targeted technical assessment possible, we ask that you provide the following information when reporting a vulnerability, if possible:

  1. Affected product: Product name, part number, and serial number, as well as the software or firmware version in use.
  2. Description of the vulnerability: A technical description of the observed anomaly or potential security vulnerability that is as detailed as possible.
  3. Reproducibility: Steps to reproduce the issue, a proof-of-concept if applicable, and relevant log files or other technical information, if available.
  4. Potential Impact:Information regarding the potential impact of the vulnerability on the confidentiality, integrity, or availability of the product or associated systems.

Handling of Reported Vulnerabilities

Incoming reports are reviewed, assessed, and processed by the responsible department as part of our internal vulnerability management process. If additional information is required for the technical analysis, we will contact the person who submitted the report.

Confirmed vulnerabilities are addressed according to their severity and potential impact. Where necessary, appropriate measures are taken to resolve the issue and improve product security, and affected customers are informed accordingly.

We ask that security vulnerabilities be reported responsibly and confidentially, and we support a coordinated approach to addressing vulnerabilities.