EU Machinery Regulation 2023/1230: What Safety-Critical Bolting Processes Must Deliver by 2027

Starting January 20, 2027, a new regulatory framework for machinery takes effect across the entire EU - with no transition period and no room for national variation. The Machinery Regulation (EU) 2023/1230 becomes fully binding on January 20, 2027, replacing the previous Machinery Directive 2006/42/EC. Anyone who places machinery on the market or operates it will be required to meet new standards for safety, documentation, and traceability.

For quality assurance and compliance professionals in manufacturing, this is not an abstract regulatory issue. It's a concrete question: Can you provide complete, unbroken evidence for every safety-critical bolted joint - showing when it was made, with what tool, and with what result - for at least ten years?

What Changes Fundamentally in 2027

From Directive to Regulation: Direct Effect, No National Variations

The first and most important difference is legal in nature. Machinery Regulation 2023/1230 replaces the previously applicable Machinery Directive 2006/42/EC. While the Machinery Directive required transposition into national law by each member state, the new Machinery Regulation applies directly in all EU countries without any additional national implementation. What was previously considered "state of the art" now becomes a binding compliance benchmark.

Software, AI, and Cybersecurity: Explicitly Covered for the First Time

A major focus of the Machinery Regulation is on digital products and "intelligent" machines. For the first time, the regulation explicitly covers software that performs safety-relevant functions, as well as AI-based systems.

This has direct consequences for networked bolting systems: manufacturers must now protect their machines against cyber threats - including cyberattacks, but also hardware and software failures, disrupted wireless connections, and errors in autonomous operating functions.

The Machinery Regulation explicitly requires manufacturers, for the first time, to protect safety-relevant software and data against unintentional or deliberate corruption (Annex III, Section 1.1.9), and to design control systems so that they can withstand reasonably foreseeable malicious access attempts by third parties (Annex III, Section 1.2.1).

For manufacturing IT, this means: Wi-Fi-enabled bolting tools, PLC interfaces, and data archiving systems must all be included in the cybersecurity risk assessment.

Expanded Technical Documentation and the 10-Year Retention Requirement

Annex IV of the Regulation sets out clear requirements for technical documentation: a complete description of the machine, risk analyses, drawings, test reports, software logic, and more. These records must be retained in a manner that makes them accessible to market surveillance authorities for at least 10 years.

In addition to the risk assessment, all technical documentation listed in Annex IV of the new Machinery Regulation must be available for submission to market surveillance authorities upon request for up to 10 years after the machine is placed on the market. From a liability standpoint, retaining records even longer is advisable.

Digital Operating Instructions: Permitted, but With Clear Obligations

For operating instructions, this represents the biggest shift in over 17 years: they may now be provided digitally, but are subject to clearly defined requirements regarding format, availability, and content. Digital operating instructions must remain available throughout the entire service life of the machine - and for at least ten years after it is placed on the market. Even when instructions are provided digitally, manufacturers must supply a free printed copy upon request.

Documentation and Traceability Requirements in Detail

In practice, the Machinery Regulation primarily changes the requirements for organization, record-keeping, and information processes. Companies will need to document more precisely how they assess risks, implement safety measures, and operate their machines in compliance.

EU Machinery Regulation 2023/1230 places particular emphasis on the traceability of machines and their components. This applies not only to the finished product, but also to the manufacturing processes used to produce it.

The Regulation places strong emphasis on market surveillance and the complete, unbroken traceability of machines and components. Without proper documentation, companies risk sales bans or operating prohibitions.

For machine manufacturers and their suppliers, the following applies: starting in 2027, machine manufacturers will need reliable evidence from their suppliers - such as structural calculations, material data, or service life estimates. These documents become part of the CE documentation for the finished machine.

What This Means for Safety-Critical Bolting Processes

VDI/VDE 2862: The Technical Framework for Bolting Application Classes

Alongside the Machinery Regulation, VDI/VDE 2862 remains the authoritative technical standard for bolting processes in manufacturing. Anyone assembling bolted joints in safety-relevant applications cannot avoid VDI/VDE 2862. The guideline defines the monitoring requirements for bolting operations in series production - differentiated across three bolting application classes (A, B, C) with fundamentally different requirements for tooling, logging, calibration, and process capability.

Category A covers what are known as safety-critical bolted joints, where failure poses a risk to life and limb. Category B covers function-critical applications, where failure of the joint restricts or prevents proper use of the device. Category C applications are classified as non-critical and, in the worst case, result in customer dissatisfaction.

Where a safety-critical bolting application falls under Category A, the guideline requires that all bolting data be made available. In this context, in addition to data documentation, the use of component identification or automated error detection may also be appropriate.

What a Complete Bolting Data Record Must Contain

The combination of the Machinery Regulation's traceability requirements and VDI/VDE 2862 defines a clear minimum data set per bolting operation for Class A joints:

VDI/VDE 2862 is widely recognized across the industry and therefore represents the state of science and technology. In cases of product complaints and product liability, companies must fundamentally demonstrate that they operated in accordance with the state of the art. The Machinery Regulation now elevates this evidentiary requirement to the regulatory level.

Implementation with GWK: Ensuring Traceability at the Process Level

OPERATOR®: Automatic Data Capture in Series Production

The OPERATOR® production tool from GWK was developed precisely for this use case: safety-critical bolting in series production with complete, automatic documentation.

The modular interchangeable-square system enables fast switching between different drive sizes - without recalibrating the base unit. Wi-Fi data transmission sends every bolting data record in real time to EasyWin® or QuanLab Pro®: torque, angle, timestamp, tool ID, and OK/NOK result - fully automatic, with no manual input required.

The OPERATOR® EST01 extends the system with PLC communication and Open Protocol. This allows it to be integrated directly into existing MES and production control environments. Every bolting operation is linked to the part number and production order - the foundation for the product-level traceability the Machinery Regulation requires.

QUANTEC MCS®: Process Analysis and Parameter Validation

Before a bolting process goes into series production, it must be validated. The QUANTEC MCS® analysis tool with pivot-point-free angle measurement provides the data foundation for this validation: What torque produces what clamping force? Where is the optimal tightening angle? How does the joint behave under operating conditions?

With a measurement accuracy of ±1% between 10 and 100% of the nominal range and a robust aluminum-titanium construction, the QUANTEC MCS® is the "compact bolting lab" for development and quality assurance. Measurement data is compatible with QuanLab Pro®, Ceus, and QS-Torque - and can therefore be integrated directly into the documentation structure of the technical records.

DAkkS-Accredited Calibration Laboratory: The Foundation of Metrological Traceability

All measurement data is only as reliable as the calibration of the tools that generate it. The Machinery Regulation requires traceability - and that includes metrological traceability of the tools used, back to national standards.

GWK operates its own DAkkS-accredited calibration laboratory with the DWPM-1000® fully automatic testing machine in accuracy class 0.2 - the reference standard for calibrating torque and angle wrenches in accordance with DIN EN ISO 17025. Class 0.2 means: the measurement uncertainty of the testing machine is a maximum of 0.2% of the measured value.

For production sites where tools cannot simply be shipped in for calibration, a mobile calibration service is available - on-site, with a complete DAkkS calibration certificate.

How the Three Levels Work Together

Timeline and Checklist: What to Do Now

EU Machinery Regulation (EU) 2023/1230 was published in the Official Journal of the European Union on June 29, 2023, and takes full effect on January 20, 2027. That leaves fewer than six months. For companies with large machine portfolios, reviewing existing risk assessments, updating documentation, and restructuring internal processes can take several years. Organizations that wait until shortly before 2027 will quickly find themselves under serious time pressure.

The table below shows which measures should take priority and when:

Conclusion: Traceability Is Not Extra Work - It Is the Process

EU Machinery Regulation 2023/1230 makes explicit what should already apply in safety-critical manufacturing environments: every bolted joint that poses a risk to life and limb in the event of failure must be completely documented - from parameter validation through series production to archiving.

EU Machinery Regulation 2023/1230 is not purely a legal matter. It fundamentally changes the requirements for design, risk assessment, and record-keeping, and makes digital documentation processes the new standard.

Organizations that deploy the OPERATOR® with Wi-Fi data transmission, the QUANTEC MCS® for process validation, and GWK's DAkkS-accredited calibration laboratory already have the process-level foundation for this traceability in place. The question is not whether to close the gaps - it's when.

This article is intended for informational purposes only and does not constitute legal advice. For an assessment of your specific compliance situation, we recommend consulting a qualified legal professional.