Can I merge the CRA declaration with my RED declaration?

Article 28.2 allows a single EU declaration of conformity covering multiple Union legal acts. You can create a combined declaration listing Regulation (EU) 2024/2847 alongside Directive 2014/53/EU. CRACheck generates the CRA-specific declaration; your regulatory team merges it with existing declarations.

Who signs the declaration — factory or EU brand?

The manufacturer signs. Under Art. 3(13), the manufacturer is the entity placing the product on the market under their name or trademark. If the EU brand is the manufacturer, they sign. If you sell under your own brand, you sign.

Must the declaration accompany every product unit?

Article 13.20 requires the manufacturer to draw up the declaration. Article 13.24 requires the declaration to accompany the product or be accessible via a URL. The declaration must be available to users and market surveillance authorities.

How long must we keep the declaration?

Art. 13.19 requires 10 years or the support period, whichever is longer. Keep the signed declaration and its supporting documentation for the required retention period.

Is this a subscription?

No. One-time payment. The licence includes 30 days of editing and 10 regenerations. The downloaded PDF is yours to keep.

Can I request a refund?

Pursuant to Art. 16(m) of Directive (EU) 2011/83 on consumer rights, by activating the licence you give express consent for the immediate generation of the digital content, waiving the 14-day withdrawal period. Refunds are accepted only for reproducible technical failures.

What if the regulation changes?

If the regulation changes during the validity of your licence, you can regenerate the document with the updated version of the generator at no additional cost.

Your EU importer has asked for the Declaration of Conformity under the Cyber Resilience Act. Article 28 and Annex V of Regulation (EU) 2024/2847 define the content. It is not the same declaration you already produce for the Radio Equipment Directive or the Low Voltage Directive. It covers cybersecurity conformity specifically. CRACheck generates it as part of the 8-document Annex VII dossier.

Annex V of Regulation (EU) 2024/2847 lists the mandatory content of the EU Declaration of Conformity: product identification, manufacturer name and address, statement of conformity under sole manufacturer responsibility, object of declaration with traceability, statement of conformity with relevant Union harmonisation legislation, reference to harmonised standards or specifications applied, and where applicable the notified body and certificate references. Your existing RED declaration does not cover Article 28 of the CRA. CRACheck generates the CRA-specific declaration as Document 5 within the 8-PDF dossier. 15-25 minutes. €149.

Generate CRA dossier — €149 Free: check your product classification

€149 one-time · 8-document ZIP · 15-25 minutes · Browser-side

Key numbers

Annex V

Defines 7+ mandatory content elements for the CRA Declaration of Conformity.

Art. 28.2

A single declaration can cover multiple Union legal acts. Merge CRA with RED/LVD if applicable.

€149

CRACheck generates the DoC as part of 8 documents. Also generates the technical documentation it references.

How to produce your CRA Declaration of Conformity

The Declaration of Conformity is the document your EU buyer will ask for first. Have it ready.

Understand what Annex V requires

Product name and type, manufacturer name and address, conformity statement, product identification, list of applicable legislation, standards or specifications applied, notified body (if applicable), signature.

Check your existing declarations

You likely have RED and LVD declarations. The CRA declaration is separate unless you merge them under Art. 28.2.

Generate CRA dossier with CRACheck

The Declaration of Conformity (Doc 5) is one of 8 documents. It references the Technical Documentation (Doc 2) and the conformity assessment procedure.

Sign the declaration

The manufacturer signs the declaration under their sole responsibility. If you are the manufacturer under Art. 3(13), you sign.

Deliver to your EU importer

The importer must verify the declaration exists per Art. 19.2(c). Include it with the shipment documentation.

The Declaration of Conformity is the document your EU buyer will ask for first. Have it ready.

Declaration of Conformity mistakes

❌

ART. 28

We already have a CE Declaration of Conformity — it covers everything

Your existing CE Declaration of Conformity references the Radio Equipment Directive (2014/53/EU), the LVD (2014/35/EU) and EMC (2014/30/EU). It does not reference Regulation (EU) 2024/2847. Article 28.1 requires the EU declaration of conformity to state that the essential cybersecurity requirements of Annex I have been met. A declaration without this statement does not cover the CRA.

❌

ANNEX V

The declaration is just a one-page form — we can write it ourselves

The declaration itself is a formal statement. But it must reference the technical documentation produced under Art. 31 and Annex VII, the conformity assessment procedure followed under Art. 32, and the applicable harmonised standards or specifications. Without the underlying documentation, the declaration is empty. CRACheck generates both.

❌

ART. 13.20

We can sign the declaration now and produce the documentation later

Article 13.20 of Regulation (EU) 2024/2847 requires the manufacturer to draw up the EU declaration of conformity and affix the CE marking only after the conformity assessment demonstrates that the essential cybersecurity requirements of Annex I have been met. Signing a declaration without supporting documentation is non-compliant.

What each CRACheck dossier contains: 8 documents

The Declaration of Conformity is Document 5 of 8 in the CRACheck dossier. It does not exist in isolation — it references and depends on the Technical Documentation, Risk Assessment and conformity assessment procedure.

Product Classifier

Determines product category per Annex III. Defines conformity assessment route under Art. 32.

Technical Documentation

Complete technical documentation structured per Art. 31 and Annex VII. All 8 mandatory sections.

Risk Assessment

Cybersecurity risk assessment per Art. 13.2 and Art. 13.3. Mapped against Annex I Part I requirements.

User Information

Information and instructions per Annex II. Security properties, support period, vulnerability reporting.

Declaration of Conformity

EU declaration of conformity per Art. 28 and Annex V.

CVD Policy

Coordinated Vulnerability Disclosure policy per Annex I Part II.

ENISA Notification Template

Pre-structured for 24h early warning, 72h notification, 14-day final report under Art. 14.

Obligations Calendar

Key dates: Art. 14 from 11 Sep 2026, full enforcement 11 Dec 2027, support period per Art. 13.8.

Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.

Generated in your browser. No product data is transmitted to any server.

What you pay for the complete declaration package

🧾 COMPLIANCE CONSULTANT FOR CRA DECLARATION

€3,000–€8,000

Declaration + supporting documentation. 2-4 weeks.

✓ Last regulatory check: 1 May 2026 · No substantive changes detected · View history