A smart meter gateway sits at the boundary between consumer energy infrastructure and the electricity grid. A compromised gateway can manipulate metering data, enable energy theft or, in extreme scenarios, affect grid load management. The CRA recognises this by placing smart meter gateways in Annex IV — the Critical product list. Certification requirements are the most stringent. CRACheck generates the Annex VII technical documentation that every certification process begins with. 8 PDF documents. 15-25 minutes. €149 per gateway model. Browser-side.
€149 one-time · 8-document ZIP · 15-25 minutes · Browser-side
Critical classification. Maximum scrutiny. Start with the documentation.
Critical classification. Maximum scrutiny. Start with the documentation.
Annex IV point 2 does not require the gateway to be complex. It lists "smart meter gateways within smart metering systems." If your product functions as a gateway between smart meters and the energy management system, it is Critical. The function determines the classification, not the complexity.
No. Article 32.4 requires Critical products to demonstrate conformity using a European cybersecurity certification scheme or, where unavailable, the procedures of Art. 32.3 (which require a notified body). Module A is not available for Critical products.
National smart metering standards (BSI-PP in Germany, SMETS in UK) cover metering requirements. CRA covers cybersecurity requirements under a separate EU-wide framework. Meeting national metering standards does not satisfy CRA Annex I requirements or Annex VII documentation obligations.
Critical products face the most stringent CRA requirements. CRACheck generates the 8 documents that underpin the certification process.
Determines product category per Annex III. Defines conformity assessment route under Art. 32.
Complete technical documentation structured per Art. 31 and Annex VII. All 8 mandatory sections.
Cybersecurity risk assessment per Art. 13.2 and Art. 13.3. Mapped against Annex I Part I requirements.
Information and instructions per Annex II. Security properties, support period, vulnerability reporting.
EU declaration of conformity per Art. 28 and Annex V.
Coordinated Vulnerability Disclosure policy per Annex I Part II.
Pre-structured for 24h early warning, 72h notification, 14-day final report under Art. 14.
Key dates: Art. 14 from 11 Sep 2026, full enforcement 11 Dec 2027, support period per Art. 13.8.
Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.
Generated in your browser. No product data is transmitted to any server.