Smart lighting is one of the highest-volume connected product categories exported from China to the EU. WiFi bulbs, Zigbee LED strips, Bluetooth dimmers — each one is a product with digital elements under the CRA. Smart lighting without security functionality is not in Annex III — it is a Default product eligible for Module A self-assessment. The documentation obligation is straightforward: Article 31 + Annex VII. The challenge is volume: if you sell 15 different smart lighting models in the EU, you need 15 dossiers. CRACheck generates each one in 15-25 minutes. €149 per model. Volume pricing available: €1,199 for Professional Pack (70 generations), Browser-side.
€149 one-time · 8-document ZIP · 15-25 minutes · Browser-side
Default product. Module A. Volume pricing. One week to document your entire lighting catalogue.
Default product. Module A. Volume pricing. One week to document your entire lighting catalogue.
A smart bulb connects to WiFi, communicates with an app, receives firmware updates. It is a product with digital elements under Art. 2.1. Simplicity of function does not exempt it from the Regulation. The documentation requirement is proportional — a Default product with Module A is the lightest compliance path.
Art. 13.5 requires due diligence on third-party components. Tuya provides the IoT platform. You integrate it into your LED strip. If the Tuya chip has a default configuration that is not secure by default, your product is non-compliant under Annex I Part I point 1(d). Document how you configure the Tuya component to meet CRA requirements.
CRACheck costs €149 per product model — not per unit sold. If your €10 bulb sells 100,000 units, the CRA documentation cost is €149 ÷ 100,000 = €0.0015 per unit. With volume pricing (The cost is per model, not per unit.
Smart lighting documentation is straightforward for Default products. CRACheck generates 8 documents covering WiFi/Zigbee/BLE connectivity, Tuya/Matter integration and OTA updates.
Determines product category per Annex III. Defines conformity assessment route under Art. 32.
Complete technical documentation structured per Art. 31 and Annex VII. All 8 mandatory sections.
Cybersecurity risk assessment per Art. 13.2 and Art. 13.3. Mapped against Annex I Part I requirements.
Information and instructions per Annex II. Security properties, support period, vulnerability reporting.
EU declaration of conformity per Art. 28 and Annex V.
Coordinated Vulnerability Disclosure policy per Annex I Part II.
Pre-structured for 24h early warning, 72h notification, 14-day final report under Art. 14.
Key dates: Art. 14 from 11 Sep 2026, full enforcement 11 Dec 2027, support period per Art. 13.8.
Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.
Generated in your browser. No product data is transmitted to any server.