Robot vacuums collect home layout data, movement patterns and, in camera-equipped models, images of the interior. A cybersecurity breach does not just affect the appliance — it exposes the physical layout of the owner's home. European consumers and data protection authorities are acutely aware of this risk. Regulation (EU) 2024/2847 requires technical documentation under Annex VII covering how you protect this data. CRACheck generates 8 PDF documents. 15-25 minutes. €149 per product model. Browser-side — home layout mapping architectures stay on your device.
€149 one-time · 8-document ZIP · 15-25 minutes · Browser-side
Every smart appliance in a European home needs CRA documentation. Start with your best-seller.
Every smart appliance in a European home needs CRA documentation. Start with your best-seller.
Annex I Part I point 1(f) of Regulation (EU) 2024/2847 requires products to minimise the processing of personal or other data to the minimum necessary for the intended purpose. Collecting a detailed 3D floor map, storing it in the cloud indefinitely and making it accessible via an API goes beyond the minimum necessary for vacuum navigation. Document your data minimisation approach.
The classification depends on how the product is marketed and what it can reasonably be used for. If your companion app allows the user to view the live camera feed remotely, the camera functions as home monitoring regardless of its primary purpose. Market surveillance authorities may classify it under Annex III point 17. Document conservatively.
Article 13.5 requires due diligence on third-party components. If the LIDAR module processes spatial data and transmits it to your main processor, you must ensure the data pipeline is secure. The LIDAR vendor's security posture affects your product's cybersecurity. Document the integration.
Smart appliances combine physical function with digital connectivity. CRACheck generates 8 documents covering the cybersecurity of the digital layer.
Determines product category per Annex III. Defines conformity assessment route under Art. 32.
Complete technical documentation structured per Art. 31 and Annex VII. All 8 mandatory sections.
Cybersecurity risk assessment per Art. 13.2 and Art. 13.3. Mapped against Annex I Part I requirements.
Information and instructions per Annex II. Security properties, support period, vulnerability reporting.
EU declaration of conformity per Art. 28 and Annex V.
Coordinated Vulnerability Disclosure policy per Annex I Part II.
Pre-structured for 24h early warning, 72h notification, 14-day final report under Art. 14.
Key dates: Art. 14 from 11 Sep 2026, full enforcement 11 Dec 2027, support period per Art. 13.8.
Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.
Generated in your browser. No product data is transmitted to any server.
Generates Annex VII documentation for your smart appliance. Covers WiFi, camera/LIDAR, cloud storage, companion app, OTA updates and data minimisation.
CRACheck does not perform GDPR Data Protection Impact Assessment, test your cloud API security or scan your companion app for vulnerabilities. CRA covers cybersecurity documentation. Privacy assessment is separate.
We document cybersecurity. You handle privacy assessment.
Article 64 establishes three tiers of administrative fines. Penalties are calculated per undertaking — but non-compliance on a single product can trigger inspection of your entire portfolio.
Art. 64.2. Up to €15 million or 2.5% of total worldwide annual turnover, whichever is higher.
Art. 64.3. Up to €10 million or 2% of total worldwide annual turnover, whichever is higher. Includes failure to produce Annex VII documentation.
Art. 64.4. Up to €5 million or 1% of total worldwide annual turnover, whichever is higher.
Art. 64.5 accounts for the nature, gravity and duration of the infringement, and gives consideration to microenterprises, small and medium-sized enterprises, including start-ups.
| Alternative | Cost | What you get |
|---|---|---|
| Smart home consultancy | €8,000–€18,000 | Per product family. 3-6 months. |
| Rely on existing CE (EMC/LVD) | €0 | Does not cover Annex I cybersecurity requirements. |
| Assume GDPR compliance covers CRA | €0 | GDPR covers data protection. CRA covers cybersecurity. Both required. |
| CRACheck | €149 | 8 docs. 15 min. Covers camera, LIDAR, cloud, app. |
Robot vacuum, smart purifier, connected oven — each model with different firmware or connectivity needs its own dossier. Volume pricing: €99/product (10-pack), €79/product (30-pack).
Request volume pricingCRACheck generates a structured document according to Article 31 and Annex VII of Regulation (EU) 2024/2847 from the information you provide. The accuracy, completeness and truthfulness of that information is your responsibility as the manufacturer.
We guarantee that the document structure follows Article 31 and Annex VII of Regulation (EU) 2024/2847 and that the legal references cited are correct as of the last verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case or by a commercial buyer in a procurement process.
CRACheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.