European contracts are being updated to include Cyber Resilience Act clauses. The typical clause reads: "The supplier shall deliver technical documentation in accordance with Annex VII of Regulation (EU) 2024/2847." For a 5-person development shop in India, parsing a 81-page EU regulation is not a realistic option. CRACheck converts the 8 sections of Annex VII into engineering questions you already know the answers to. Architecture? You designed it. Components? You chose them. Vulnerability process? You run it. 15–25 minutes. €149. 100% browser-side — your client's data stays on your machine.
€149 one-time · 8-document ZIP · 15–25 minutes · Browser-side
Your client expects you to know. The clause references Regulation (EU) 2024/2847 and Annex VII. Those are the specifications. Asking the client to explain a regulation they have already cited signals that you are unfamiliar with EU compliance. CRACheck gives you the output format your client expects without revealing the learning curve.
API documentation describes how to use the software. Annex VII of Regulation (EU) 2024/2847 describes how the software was designed, developed, tested, and secured. Section 2(a) requires architecture diagrams. Section 2(b) requires an SBOM and CVD policy. Section 3 requires a cybersecurity risk assessment. These are compliance documents, not user documentation.
The regulation applies from 11 December 2027 (Art. 71(2)). But your client is preparing now because the technical documentation under Annex VII §2 must describe the design and development process — not just the final product. Clients who wait until December 2027 will not be able to retroactively document design decisions made in 2025 or 2026.
8 PDF documents generated from your data. Each cites the specific article of Regulation (EU) 2024/2847 it complies with.
Classification under Annex III/IV. Most custom software for EU clients falls under Default category.
Full Annex VII. The document your contract clause requires.
Art. 13(2) cybersecurity risk assessment. Structured format — no compliance expertise needed.
Annex II. 9 information points for end-user documentation.
Art. 28 + Annex V. For your client to sign.
Coordinated vulnerability disclosure policy (Annex I Part II §5).
Art. 14 ENISA notification template. Art. 14(2): early warning within 24h, notification within 72h, final report within 14 days.
Key dates: Sept 2026 (Art. 14), Dec 2027 (full).
Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.
Generated from your data, in your browser. No data leaves your device.
Generates 8 PDF documents from your answers. 15–25 minutes. €149.
Does not interpret the specific CRA clause in your contract. Does not perform the conformity assessment (Art. 32). Does not advise on contractual liability.
We handle the documentation format. You provide the engineering knowledge.
Article 64 of Regulation (EU) 2024/2847.
Art. 64(2).
Art. 64(3).
Art. 64(4).
| Alternative | Cost | What you get |
|---|---|---|
| EU regulatory lawyer | €3,000–€8,000 | Documentation + legal advice. 4–8 weeks. |
| Parse the 81-page regulation yourself | Free + days | No guarantee the output matches what your client expects. |
| Sign the contract without understanding the clause | €0 | Contractual liability for documentation you cannot produce. |
| CRACheck | €149 | 8 documents. 15–25 minutes. Structured under Annex VII. |
Each CRACheck licence covers one product. If you deliver software for 5 or 10 European clients, each product needs its own Annex VII dossier. Contact us for volume pricing.
Request Volume PricingCRACheck generates a structured document under Article 31 and Annex VII of Regulation (EU) 2024/2847 from the information you provide. The accuracy of the information is your responsibility as the developer providing engineering inputs.
We guarantee that the document structure follows Article 31 and Annex VII of Regulation (EU) 2024/2847 and that the legal references cited are correct. We do not guarantee acceptance by a market surveillance authority or by your EU client in a specific contract.
CRACheck is not legal advice. For contract-specific situations, consult a qualified lawyer.
8 professional documents. Structured under Article 31 and Annex VII of Regulation (EU) 2024/2847. Your data stays on your device. The ZIP you download is yours forever.