Indian electronics manufacturers have supplied European markets for decades. CE marking, RoHS, EMC — the compliance checklist is familiar. Regulation (EU) 2024/2847 adds a new requirement: cybersecurity documentation under Annex VII for any product with digital elements. Your European importer's obligations under Article 19(2)(b) are explicit: they must ensure the manufacturer has drawn up the technical documentation before placing the product on the market. If your product has firmware, connectivity, or remote data processing capability, this applies. CRACheck generates 8 PDF documents structured under Art. 31 + Annex VII in 15–25 minutes. €149 per product. 100% browser-side — no product data uploaded.
€149 one-time · 8-document ZIP · 15–25 minutes · Browser-side
CE marking for EMC (Directive 2014/30/EU) and safety (Low Voltage Directive 2014/35/EU) does not cover cybersecurity. Regulation (EU) 2024/2847 adds cybersecurity as a separate requirement. After 11 December 2027, the CE marking on products with digital elements must also attest compliance with the CRA essential cybersecurity requirements (Art. 30). The marking is the same symbol — the obligations behind it are expanded.
Article 19(1) of Regulation (EU) 2024/2847 states that importers shall place on the market only products that comply with Annex I cybersecurity requirements. Article 19(2)(b) requires the importer to verify that the manufacturer has drawn up the technical documentation. If the documentation does not exist, the importer cannot import. The bottleneck is at the manufacturer — you.
Article 2(1) applies to any product with a "direct or indirect logical or physical data connection to a device or network." An industrial IoT gateway, a connected controller, a smart meter with cellular connectivity — all qualify. There is no "industrial electronics" exemption. The scope is defined by data connection, not by industry.
8 PDF documents generated from your data. Each cites the specific article of Regulation (EU) 2024/2847 it complies with.
Classification under Annex III/IV. Critical for hardware: routers (Class I §12), microcontrollers with security (Class I §14), smart meter gateways (Critical, Annex IV §2).
Annex VII including hardware-specific content: photographs/illustrations (§1(c)), internal layout, firmware versions (§1(b)), production monitoring (§2(c)).
Art. 13(2). Hardware threat model: physical tampering, firmware extraction, side-channel attacks, supply chain component integrity.
Annex II. Installation instructions, firmware update process, decommissioning, secure data erasure.
Art. 28 + Annex V. Manufacturer signs.
Annex I Part II §5. Vulnerability disclosure for hardware/firmware.
Art. 14 ENISA notification. 24h/72h/14d process.
Sept 2026 (Art. 14), Dec 2027 (full), product support period end dates.
Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.
Generated from your data, in your browser. No data leaves your device.
Product photographs, firmware versions, production processes, component sourcing. 8 PDFs. 15–25 minutes. €149.
Does not perform physical testing (EMC, safety). Does not interact with notified bodies for Class I/II conformity assessment (Art. 32(2)-(3)). Does not replace your existing CE marking process — it adds the cybersecurity layer.
We document the cybersecurity layer. You handle the physical testing and notified body involvement.
Article 64 of Regulation (EU) 2024/2847.
Art. 64(2). Applied to the manufacturer. Your EU importer cannot shield you.
Art. 64(3).
Art. 64(4).
| Alternative | Cost | What you get |
|---|---|---|
| European compliance consultant | €12,000–€20,000 | Full CRA documentation + testing guidance. 3–6 months. |
| Add cybersecurity section to existing CE file yourself | Free + weeks | Custom format. Risk of Annex VII gaps. Importer may reject. |
| Wait until the importer demands it | €0 now | December 2027: scramble under deadline. Importer finds alternative supplier. |
| CRACheck | €149 | 8 documents. 15–25 min. Annex VII structured. Importer-ready. |
Each product with digital elements needs its own Annex VII dossier. If you manufacture 10, 20 or 50 SKUs with connectivity for the EU market, contact us for factory volume pricing.
Request Volume PricingCRACheck generates a structured document under Article 31 and Annex VII of Regulation (EU) 2024/2847 from the information you provide. The accuracy of the information — including hardware specifications, firmware versions, and component data — is your responsibility as the manufacturer.
We guarantee the document structure follows Annex VII and the legal references are correct. We do not guarantee acceptance by a market surveillance authority or by your EU importer in a specific case.
CRACheck is not legal advice. For hardware-specific conformity assessment questions — including notified body requirements for Class I/II products — consult a qualified regulatory consultant.
8 professional documents. Structured under Article 31 and Annex VII of Regulation (EU) 2024/2847. Your data stays on your device. The ZIP you download is yours forever.