August's change proposals

### 5.2.6 Remote Data Processing Systems

A remote data processing solution or "RDPS" is a system which has an essential role for one or more functions of the product that it performs remotely. While many product update methods may fit into the definition of an RDPS, product update requirements are considered seperately in term [5.3.4 Secure updates](#534-secure-updates) of this document.  

A remote data processing solution or "RDPS" is a component of a product that has an essential role in one or more of a product's functions and performs that role remotely from the local components of the product. While many product update methods may fit into the definition of an RDPS, product update requirements are considered seperately in term [5.3.4 Secure updates](#534-secure-updates) of this document.  

All remote data processing solutions are a component of the product but its use is independent of the product's deployment environment.

While it may impact the tools available to an assesor, does not significantly change the security requirements associated with the product, its intended use or its functions. Similarly a remote data processing solution remains as a component of the product even if it is made and operated by a third party as long as it performs the intended functions or the product.

While a product's employment of an RDPS may create additional security requirements related to its remote nature and effect the tools available to an assessor, use of an RDPS does not significantly change the security requirements associated with the product's use or functions. A remote data processing solution is a component of the product when it has been designed by or for the manufacturer or is in the manufacturers control, and it is necessary for the product to performs its intended functions.

> NOTE: CRA DEF (ART 3(2) "‘remote data processing’ means data processing at a distance for which the software is designed and developed by the manufacturer, or under the responsibility of the manufacturer, and the absence of which would prevent the product with digital elements from performing one of its functions;"

Remote data processing solutions can perform any function of the product, and are not limited to a product's core functions. Common uses of RDPS include remote storage of profile or configuration data, often to enable simialr devices to use or access the data from a web interface.

The system can also be a log storage or metrics collection endpoint, which is part of the product design, but those have a dedicated section in this standard with detailed requirements.

Remote data processing solutions can perform any function of the product, and are not limited to a product's core functions. Common uses of RDPS include remote storage of profile or configuration data, often to enable similar devices to use or access the data from a web interface.

The system can also be a log storage or metrics collection endpoint, which is part of the product design, but those have a dedicated section in the present document with detailed requirements.

CRA applicability has as subtle difference in how the application is desigend.

A website that is accessed with a browser is not in scope, but a online service which is used from an installed application is in scope.