The support period obligation transforms the economics of connected products. A Chinese manufacturer that ships a WiFi smart plug and never releases a firmware update is non-compliant from day one of enforcement. Article 13.8 requires a support period that reflects the expected time of use. Annex I Part II requires security updates to be provided without delay during that period. Annex II requires the support period to be communicated to users. The support period is documented in the Technical Documentation (Annex VII point 4) and the User Information (Annex II). CRACheck structures both. 15-25 minutes. €149 per product. Browser-side.
€149 one-time · 8-document ZIP · 15-25 minutes · Browser-side
The support period is not a warranty. It is a firmware update commitment backed by regulation.
The support period is not a warranty. It is a firmware update commitment backed by regulation.
Article 13.8 of Regulation (EU) 2024/2847 requires the support period to reflect "the time during which the product is expected to be in use, considering in particular reasonable user expectations, the nature of the product including its expected lifetime and other relevant factors." A 1-year support period for a product used 5 years is not consistent with user expectations. Market surveillance authorities may consider it non-compliant.
Annex I Part II point 8 of Regulation (EU) 2024/2847 requires security updates to be provided "without delay" and, where applicable, through automatic updates with opt-out. "Without delay" means as soon as a security patch is available and tested. Months-long delays between vulnerability discovery and patch release are non-compliant.
Annex II of Regulation (EU) 2024/2847 requires the manufacturer to inform users about the expected product lifetime during which security updates will be provided. This includes the end date of the support period. The information must be provided at the time the product is made available. Users have the right to know when security updates will stop.
The support period obligation touches multiple CRA documents. CRACheck generates 8 PDFs that consistently document your support period across Technical Documentation, User Information and Obligations Calendar.
Determines product category per Annex III. Defines conformity assessment route under Art. 32.
Complete technical documentation structured per Art. 31 and Annex VII. All 8 mandatory sections.
Cybersecurity risk assessment per Art. 13.2 and Art. 13.3. Mapped against Annex I Part I requirements.
Information and instructions per Annex II. Security properties, support period, vulnerability reporting.
EU declaration of conformity per Art. 28 and Annex V.
Coordinated Vulnerability Disclosure policy per Annex I Part II.
Pre-structured for 24h early warning, 72h notification, 14-day final report under Art. 14.
Key dates: Art. 14 from 11 Sep 2026, full enforcement 11 Dec 2027, support period per Art. 13.8.
Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.
Generated in your browser. No product data is transmitted to any server.
Documents your support period declaration across Technical Documentation (Annex VII.4), User Information (Annex II) and Obligations Calendar. Consistent across all 8 documents.
CRACheck does not determine the optimal support period for your product. That is a business decision informed by expected product lifetime, user expectations and your firmware update capability. CRACheck documents whatever period you declare.
We document the commitment. You deliver the updates.
Article 64 establishes three tiers of administrative fines. Penalties are calculated per undertaking — but non-compliance on a single product can trigger inspection of your entire portfolio.
Art. 64.2. Up to €15 million or 2.5% of total worldwide annual turnover, whichever is higher.
Art. 64.3. Up to €10 million or 2% of total worldwide annual turnover, whichever is higher. Includes failure to produce Annex VII documentation.
Art. 64.4. Up to €5 million or 1% of total worldwide annual turnover, whichever is higher.
Art. 64.5 accounts for the nature, gravity and duration of the infringement, and gives consideration to microenterprises, small and medium-sized enterprises, including start-ups.
| Alternative | Cost | What you get |
|---|---|---|
| Product lifecycle consultancy | €10,000–€25,000 | Strategy + documentation. 2-4 months. |
| Declare minimum support period | €0 | Risk of non-compliance under Art. 13.8 if inconsistent with expected use. |
| Do not declare any support period | €0 | Non-compliant. Annex II requires disclosure. |
| CRACheck | €149 | 8 docs with support period documented. 15 min. |
Consumer smart plug (3-5 years), industrial gateway (10+ years), router (5-7 years) — each needs its own support period declaration documented in its own CRA dossier. Volume pricing: €99/product (10-pack), €79/product (30-pack).
Request volume pricingCRACheck generates a structured document according to Article 31 and Annex VII of Regulation (EU) 2024/2847 from the information you provide. The accuracy, completeness and truthfulness of that information is your responsibility as the manufacturer.
We guarantee that the document structure follows Article 31 and Annex VII of Regulation (EU) 2024/2847 and that the legal references cited are correct as of the last verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case or by a commercial buyer in a procurement process.
CRACheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.