Is a WiFi smart plug really in scope of the CRA?

Yes. Article 2.1 covers products with digital elements that have a data connection. A WiFi smart plug has a WiFi data connection. It is in scope.

Is a Tuya-based plug Default or Class I?

A smart plug that switches a relay and has no security functionality is not listed in Annex III. It is a Default product. If the plug includes a camera, a motion sensor marketed for security, or functions as a home alarm component, it could fall under Annex III point 17.

Do I need separate documentation for Amazon.de, Amazon.fr and Amazon.es?

No. The CRA documentation is for the product, not for the marketplace. One dossier per product model covers all EU marketplaces.

What support period should I declare for a smart plug?

Article 13.8 requires a support period reflecting expected time of use. For a smart plug, consumers expect 3-5 years. Recital 59 references 5 years as a default.

Can I generate the dossier in Chinese?

CRACheck generates documents in English. Article 31.4 requires documentation in a language acceptable to the relevant authorities. English is accepted across the EU.

Is this a subscription?

No. One-time payment. 30 days editing, 10 regenerations. PDF yours permanently.

Can I request a refund?

Pursuant to Art. 16(m) of Directive (EU) 2011/83, licence activation constitutes express consent. Refunds only for reproducible technical failures.

What if the regulation changes?

Regenerate at no additional cost during licence validity.

You sell WiFi smart plugs on Amazon.de under your own brand. The plug connects to a Tuya-based app, switches a 220V load and has no security functionality. Under Annex III of Regulation (EU) 2024/2847, this is a Default product — not Important, not Critical. Module A self-assessment applies. No notified body required. CRACheck generates the 8-document Annex VII dossier in 15 minutes. €149.

A WiFi smart plug that switches a relay and connects to a home automation app is a product with digital elements under Article 2.1 of Regulation (EU) 2024/2847. It has a data connection. It is in scope. But it is not listed in Annex III as an Important product — it has no security functionality, it is not a router, not a camera, not a lock. That makes it a Default product. Default products follow Module A self-assessment under Article 32.1(a). CRACheck generates the documentation. 15-25 minutes. €149. Browser-side.

Generate CRA dossier — €149 Free: check your product classification

€149 one-time · 8-document ZIP · 15–25 minutes · Browser-side

Key numbers

Default

WiFi smart plug without security functionality. Not in Annex III. Module A self-assessment — no notified body.

Module A

Internal control procedure. Art. 32.1(a). You assess, you document, you declare.

€149

Per product model. One smart plug SKU = one licence = 8 documents.

How CRACheck works

You enter your product data. CRACheck structures the documentation per Article 31 + Annex VII.

Confirm Default classification

Your WiFi smart plug is not in Annex III (no security functionality). Default product. Module A applies.

Gather product data

WiFi chip model, firmware version, Tuya integration details, OTA update mechanism, default credential policy, intended support period.

Generate dossier

Enter data in CRACheck. 15-25 minutes. Download 8 PDFs in ZIP.

Store for Amazon compliance

Save the ZIP in your Seller Central compliance folder. Upload when Amazon opens the CRA dashboard.

Repeat for other smart plug variants

If you sell a 2-pack, a mini version and an outdoor version with different firmware, each model needs its own dossier.

Common mistakes

❌

ART. 2.1

"A smart plug is too simple for CRA — it just switches a relay"

Article 2.1 applies to all products with digital elements that have a direct or indirect data connection. Your smart plug connects via WiFi to an app. Complexity is not the threshold — connectivity is.

❌

ANNEX I, PART I

"The plug runs on Tuya firmware — Tuya handles security"

Article 13.5 requires manufacturers to exercise due diligence when integrating third-party components. If your plug uses Tuya firmware, you must document that the Tuya component does not compromise your product's cybersecurity.

❌

ANNEX I, PART I, 1(d)

"Users set up the plug with our app — they handle security"

Annex I Part I point 1(d) requires products to be delivered with secure by default configuration. If your plug ships with an open WiFi access point for setup, or requires a default password common across all units, it may not meet this requirement.

What the ZIP contains

8 PDF documents generated from your data. Each cites the specific article of Regulation (EU) 2024/2847 it complies with.

Product Classifier

Confirms Default classification. Documents that Annex III does not apply. Defines Module A.

Technical Documentation

Art. 31 + Annex VII. Covers WiFi module, Tuya integration, OTA update, relay control interface, data flow.

Risk Assessment

Art. 13.2-13.3. Risk analysis: unauthorized access, firmware tampering, network exposure.

User Information

Annex II. Secure setup, WiFi password requirements, support period, vulnerability reporting.

Declaration of Conformity

Art. 28 + Annex V. You sign this as manufacturer under Module A.

CVD Policy

Vulnerability disclosure channel for your smart plug.

Notification Template

Art. 14. Pre-structured for the 24h/72h/14d timeline.

Obligations Calendar

Key CRA dates for your smart plug lifecycle.

See before you buy — Download sample dossier (PDF, fictional company) — Real structure, real articles, real format. Fictional data.

Generated from your data, in your browser. No data leaves your device.

What you pay

🧾 GERMAN COMPLIANCE AGENCY FOR SMART HOME

€2,000–€4,000

Per product. 3-6 weeks. Overpaying for a Default product.

✓ Last regulatory check: 1 May 2026 · No substantive changes detected · View history