Reg (EU) 2024/2847Generate dossier — €149
LIVE — Enforcement tracker · Deadline dashboard · Transposition status — Updated weekly from EUR-Lex, Safety Gate, OEIL & 12 official sourcesView regulatory intelligence →

Your EU importer has asked for the Declaration of Conformity under the Cyber Resilience Act. Article 28 and Annex V of Regulation (EU) 2024/2847 define the content. It is not the same declaration you already produce for the Radio Equipment Directive or the Low Voltage Directive. It covers cybersecurity conformity specifically. CRACheck generates it as part of the 8-document Annex VII dossier.

Annex V of Regulation (EU) 2024/2847 lists the mandatory content of the EU Declaration of Conformity: product identification, manufacturer name and address, statement of conformity under sole manufacturer responsibility, object of declaration with traceability, statement of conformity with relevant Union harmonisation legislation, reference to harmonised standards or specifications applied, and where applicable the notified body and certificate references. Your existing RED declaration does not cover Article 28 of the CRA. CRACheck generates the CRA-specific declaration as Document 5 within the 8-PDF dossier. 15-25 minutes. €149.

Generate CRA dossier — €149Free: check your product classification

€149 one-time · 8-document ZIP · 15-25 minutes · Browser-side

Regulation (EU) 2024/2847 · Art. 28 + Annex V · 8 documents · 100% browser-side

Key numbers

Annex V
Defines 7+ mandatory content elements for the CRA Declaration of Conformity.
Art. 28.2
A single declaration can cover multiple Union legal acts. Merge CRA with RED/LVD if applicable.
€149
CRACheck generates the DoC as part of 8 documents. Also generates the technical documentation it references.

How to produce your CRA Declaration of Conformity

The Declaration of Conformity is the document your EU buyer will ask for first. Have it ready.

1
Understand what Annex V requires
Product name and type, manufacturer name and address, conformity statement, product identification, list of applicable legislation, standards or specifications applied, notified body (if applicable), signature.
2
Check your existing declarations
You likely have RED and LVD declarations. The CRA declaration is separate unless you merge them under Art. 28.2.
3
Generate CRA dossier with CRACheck
The Declaration of Conformity (Doc 5) is one of 8 documents. It references the Technical Documentation (Doc 2) and the conformity assessment procedure.
4
Sign the declaration
The manufacturer signs the declaration under their sole responsibility. If you are the manufacturer under Art. 3(13), you sign.
5
Deliver to your EU importer
The importer must verify the declaration exists per Art. 19.2(c). Include it with the shipment documentation.

The Declaration of Conformity is the document your EU buyer will ask for first. Have it ready.

Declaration of Conformity mistakes

ART. 28

We already have a CE Declaration of Conformity — it covers everything

Your existing CE Declaration of Conformity references the Radio Equipment Directive (2014/53/EU), the LVD (2014/35/EU) and EMC (2014/30/EU). It does not reference Regulation (EU) 2024/2847. Article 28.1 requires the EU declaration of conformity to state that the essential cybersecurity requirements of Annex I have been met. A declaration without this statement does not cover the CRA.

ANNEX V

The declaration is just a one-page form — we can write it ourselves

The declaration itself is a formal statement. But it must reference the technical documentation produced under Art. 31 and Annex VII, the conformity assessment procedure followed under Art. 32, and the applicable harmonised standards or specifications. Without the underlying documentation, the declaration is empty. CRACheck generates both.

ART. 13.20

We can sign the declaration now and produce the documentation later

Article 13.20 of Regulation (EU) 2024/2847 requires the manufacturer to draw up the EU declaration of conformity and affix the CE marking only after the conformity assessment demonstrates that the essential cybersecurity requirements of Annex I have been met. Signing a declaration without supporting documentation is non-compliant.

What each CRACheck dossier contains: 8 documents

The Declaration of Conformity is Document 5 of 8 in the CRACheck dossier. It does not exist in isolation — it references and depends on the Technical Documentation, Risk Assessment and conformity assessment procedure.

1

Product Classifier

Determines product category per Annex III. Defines conformity assessment route under Art. 32.

2

Technical Documentation

Complete technical documentation structured per Art. 31 and Annex VII. All 8 mandatory sections.

3

Risk Assessment

Cybersecurity risk assessment per Art. 13.2 and Art. 13.3. Mapped against Annex I Part I requirements.

4

User Information

Information and instructions per Annex II. Security properties, support period, vulnerability reporting.

5

Declaration of Conformity

EU declaration of conformity per Art. 28 and Annex V.

6

CVD Policy

Coordinated Vulnerability Disclosure policy per Annex I Part II.

7

ENISA Notification Template

Pre-structured for 24h early warning, 72h notification, 14-day final report under Art. 14.

8

Obligations Calendar

Key dates: Art. 14 from 11 Sep 2026, full enforcement 11 Dec 2027, support period per Art. 13.8.

Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.

Generated in your browser. No product data is transmitted to any server.

What you pay for the complete declaration package

🧾 COMPLIANCE CONSULTANT FOR CRA DECLARATION
€3,000–€8,000
Declaration + supporting documentation. 2-4 weeks.
✓ CRACHECK
€149
Declaration + 7 supporting documents. 15 min. Complete package.

Documentation package vs. declaration alone

● LAYER 1

What CRACheck does

Generates the CRA Declaration of Conformity per Art. 28 and Annex V, plus the 7 supporting documents it references. Complete dossier, not just a form.

∅ LAYER 2

What CRACheck does NOT do

CRACheck does not perform the conformity assessment. The declaration states that the assessment has been performed and requirements are met — you as manufacturer are responsible for the truthfulness of that statement.

We generate the documentation package. You declare conformity.

CRA penalty regime — Article 64 of Regulation (EU) 2024/2847

Article 64 establishes three tiers of administrative fines. Penalties are calculated per undertaking — but non-compliance on a single product can trigger inspection of your entire portfolio.

🇪🇺
Non-compliance with essential cybersecurity requirements (Annex I) and Art. 13/14 obligations
€15M / 2.5%

Art. 64.2. Up to €15 million or 2.5% of total worldwide annual turnover, whichever is higher.

🇪🇺
Non-compliance with technical documentation (Art. 31), authorised representative (Art. 18), conformity assessment (Art. 32)
€10M / 2%

Art. 64.3. Up to €10 million or 2% of total worldwide annual turnover, whichever is higher. Includes failure to produce Annex VII documentation.

🇪🇺
Supply of incorrect, incomplete or misleading information to authorities
€5M / 1%

Art. 64.4. Up to €5 million or 1% of total worldwide annual turnover, whichever is higher.

Art. 64.5 accounts for the nature, gravity and duration of the infringement, and gives consideration to microenterprises, small and medium-sized enterprises, including start-ups.

Alternatives

AlternativeCostWhat you get
Compliance consultant€3,000–€8,000Declaration + documentation. 2-4 weeks.
Add CRA to existing RED declaration without documentation€0Non-compliant. Declaration without Annex VII documentation is empty.
Copy a template from the internet€0Template without product-specific technical documentation is worthless.
CRACheck€149Complete: declaration + 7 supporting documents. 15 min.

You need CRA declarations for multiple product models?

Each product model needs its own Declaration of Conformity with its own supporting documentation. Volume pricing: €99/product (10-pack), €79/product (30-pack).

Request volume pricing
Response within one business day.

What CRACheck guarantees and what it does not

CRACheck generates a structured document according to Article 31 and Annex VII of Regulation (EU) 2024/2847 from the information you provide. The accuracy, completeness and truthfulness of that information is your responsibility as the manufacturer.

We guarantee that the document structure follows Article 31 and Annex VII of Regulation (EU) 2024/2847 and that the legal references cited are correct as of the last verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case or by a commercial buyer in a procurement process.

CRACheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.

Frequently asked questions

Can I merge the CRA declaration with my RED declaration?
Article 28.2 allows a single EU declaration of conformity covering multiple Union legal acts. You can create a combined declaration listing Regulation (EU) 2024/2847 alongside Directive 2014/53/EU. CRACheck generates the CRA-specific declaration; your regulatory team merges it with existing declarations.
Who signs the declaration — factory or EU brand?
The manufacturer signs. Under Art. 3(13), the manufacturer is the entity placing the product on the market under their name or trademark. If the EU brand is the manufacturer, they sign. If you sell under your own brand, you sign.
Must the declaration accompany every product unit?
Article 13.20 requires the manufacturer to draw up the declaration. Article 13.24 requires the declaration to accompany the product or be accessible via a URL. The declaration must be available to users and market surveillance authorities.
How long must we keep the declaration?
Art. 13.19 requires 10 years or the support period, whichever is longer. Keep the signed declaration and its supporting documentation for the required retention period.
Is this a subscription?
No. One-time payment. The licence includes 30 days of editing and 10 regenerations. The downloaded PDF is yours to keep.
Can I request a refund?
Pursuant to Art. 16(m) of Directive (EU) 2011/83 on consumer rights, by activating the licence you give express consent for the immediate generation of the digital content, waiving the 14-day withdrawal period. Refunds are accepted only for reproducible technical failures.
What if the regulation changes?
If the regulation changes during the validity of your licence, you can regenerate the document with the updated version of the generator at no additional cost.
⚠️ Important notice: CRACheck is a self-assessment documentation tool, not legal advice and not a third-party audit. The document under Article 31 and Annex VII of Regulation (EU) 2024/2847 is generated from your input data. You are responsible for the accuracy of the data you provide. CRACheck does not replace a qualified professional assessment.

Your EU importer needs the CRA Declaration of Conformity. Generate it with the complete supporting dossier — 15 minutes, €149.

€149 one-time payment
8 professional documents · 15-25 minutes · No subscription · 100% in your browser
Generate CRA dossier — €149
✓ Last regulatory check: 1 May 2026 · No substantive changes detected · View history