Reg (EU) 2024/2847Generate dossier — €149
LIVE — Enforcement tracker · Deadline dashboard · Transposition status — Updated weekly from EUR-Lex, Safety Gate, OEIL & 12 official sourcesView regulatory intelligence →

You manufacture smart appliances in Korea and export them to European distributors in Germany, France, and the Netherlands. Regulation (EU) 2024/2847 adds cybersecurity documentation requirements on top of your existing CE marking. Your distributor cannot fulfil their obligations under Article 20 without your technical file. CRACheck generates it.

Korean smart appliance manufacturers already navigate CE marking, RoHS, REACH, and energy labelling for EU market access. The Cyber Resilience Act adds a horizontal cybersecurity layer. Article 13 places the documentation obligation on the manufacturer. Article 20 requires your EU distributor to verify that you have complied. If your appliance connects to WiFi, runs firmware, or processes user data, Annex VII technical documentation is now part of the export package. CRACheck produces the 8-document dossier in 15–25 minutes. €149 per appliance model. Your product data never leaves your browser.

Generate CRA dossier — €149Free: check your product classification

€149 one-time · 8-document ZIP · 15–25 minutes · Browser-side

Regulation (EU) 2024/2847 · Art. 31 + Annex VII · 8 documents · 100% browser-side — your data never leaves your device

Key numbers

Art. 20
EU distributor must verify your CRA documentation
11 Dec 2027
Connected appliances must comply by this date
15–25 min
Dossier generation time per appliance model

How CRACheck works

You enter your product data. CRACheck structures the documentation per Article 31 + Annex VII.

1
Classify your appliance
CRACheck checks if it falls under Default or Annex III (smart home products with security functionalities are Class I, item 17)
2
Enter appliance specifications
Connectivity (WiFi, Bluetooth, Zigbee), firmware version, data processing, user authentication
3
Map cybersecurity features
Encryption at rest and in transit, secure OTA updates, factory reset behaviour, data minimisation
4
Document vulnerability handling
PSIRT process, firmware patch cycle, coordinated disclosure policy, notification procedures
5
Define your support period
The CRA requires security updates for the product's expected lifetime or at least 5 years (Art. 13(8))
6
Generate the 8-document dossier
Structured output aligned with Art. 31 + Annex VII, ready for your EU distribution partner
7
Attach to your export documentation
The CRA dossier sits alongside your existing CE technical file

Common mistakes

CE COVERAGE ASSUMPTION

"Our CE marking already covers cybersecurity"

Existing CE marking under the Low Voltage Directive, EMC Directive, or Radio Equipment Directive does not include the cybersecurity requirements of Regulation (EU) 2024/2847. The CRA is a separate horizontal regulation with its own essential requirements (Annex I), conformity assessment procedures (Art. 32 + Annex VIII), and documentation obligations (Art. 31 + Annex VII). CE marking under the CRA is additional to your existing CE marking.

DISTRIBUTOR DELEGATION

"Our EU distributor handles compliance on our behalf"

Article 20 requires distributors to verify that the manufacturer has complied — not to comply on the manufacturer's behalf. The technical documentation obligation under Articles 13 and 31 rests with you as manufacturer. Your distributor checks that it exists; they do not create it for you.

SMART HOME CLASSIFICATION

"Our appliance is a simple household item, not a security product"

Annex III Class I item 17 lists "smart home products with security functionalities, including smart door locks, security cameras, baby monitoring systems and alarm systems." If your smart appliance has any security functionality — user authentication, encrypted communication, access control — it may qualify as Important Class I. Even without security functions, any connected appliance with firmware is a product with digital elements under Article 3(1).

What the ZIP contains

8 PDF documents generated from your data. Each cites the specific article of Regulation (EU) 2024/2847 it complies with.

1

Product Classifier

Determines if your smart appliance is Default or Important Class I under Annex III (item 17). Documents classification for your EU distributor.

2

Technical Documentation

Art. 31 + Annex VII dossier covering appliance design, firmware architecture, connectivity stack, security measures, production quality controls.

3

Risk Assessment

Annex I Part I analysis evaluating threats specific to connected home appliances: unauthorised access, firmware tampering, data exfiltration, physical attack vectors.

4

User Information

Annex II consumer-facing information: secure setup instructions, password change guidance, update procedures, data deletion (factory reset), support contact.

5

Declaration of Conformity

Art. 28 + Annex V. Complements existing Declarations for LVD, EMC, RED, and other applicable directives.

6

CVD Policy

Vulnerability disclosure framework specifying how consumers, researchers, and distributors can report security issues.

7

Notification Template

Art. 14 structure for ENISA notifications: 24h early warning, 72h notification, 14-day final report.

8

Obligations Calendar

Milestones: Art. 14 reporting from September 2026, full enforcement December 2027, stated support period per model.

Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.

Generated from your data, in your browser. No data leaves your device.

What you pay

🧾 KOREAN COMPLIANCE CONSULTANCY WITH EU EXPERTISE
₩15M–₩35M (€10,000–€22,000)
6–10 weeks. Requires sharing product schematics and firmware. Separate engagement for each new model year.
✓ CRACHECK
€149
8 documents. 15–25 min. 100% browser-side — no product data shared. 10 regenerations for model year updates. Pack 10: €99/model. Pack 30: €79/model.

Two layers

● LAYER 1

What CRACheck produces

The cybersecurity documentation layer required by Art. 31 + Annex VII. Classifies your appliance, structures your security measures against Annex I requirements, outputs 8 PDFs that your EU distributor needs to verify under Article 20. This is the documentation that makes your export file CRA-complete.

∅ LAYER 2

What remains your engineering task

CRACheck does not redesign your appliance's firmware, implement secure OTA updates, encryption, or authentication mechanisms. If your product lacks the security features described in Annex I Part I, you need engineering work before you can accurately document compliance. CRACheck documents what you have built — it does not build it.

Korean appliance manufacturers with mature security architectures can complete Layer 1 today. Those still implementing Annex I features should start engineering now and document when ready.

Enforcement regime

Article 64 of Regulation (EU) 2024/2847.

🔴
Essential requirements + manufacturer obligations (Art. 64(2))
€15,000,000 / 2.5%

Annex I non-compliance, Art. 13/14 failures.

🟠
Documentation and conformity obligations (Art. 64(3))
€10,000,000 / 2%

Art. 28, Art. 31, Art. 32 failures.

🟡
Misleading information (Art. 64(4))
€5,000,000 / 1%

Misleading information.

Alternatives

CriterionKorean Compliance FirmEU Law FirmInternal DocumentationCRACheck
Time per model6–10 weeks8–14 weeks4–8 weeks15–25 minutes
Cost€10,000–€22,000€15,000–€30,000Staff allocation€149
CRA-specific expertiseVariableStrong legal, weak technicalLearning curveBuilt-in Annex VII structure
Data stays internalNoNoYesYes — 100% browser-side

Multiple appliance models for the EU market?

Korean manufacturers typically export several connected appliance models to Europe. Each model with distinct firmware or connectivity features requires its own CRA dossier. Volume pricing: €99/model (pack 10), €79/model (pack 30).

Request Volume Pricing
Each appliance model with distinct digital elements requires a separate dossier.

What CRACheck guarantees and what it does not

CRACheck generates a structured document aligned with Article 31 and Annex VII of Regulation (EU) 2024/2847 based on your input data about the appliance. The accuracy of the data is your responsibility as manufacturer.

We guarantee the output structure follows Art. 31 + Annex VII and that all cited legal references are correct. We do not guarantee acceptance by a specific market surveillance authority or EU distributor in a particular case.

CRACheck is not legal advice. For questions about Annex III classification, interaction with EU notified bodies, or the relationship between the CRA and other applicable directives, consult a specialised attorney.

Frequently asked questions

We already have CE marking. Does CRA require a separate declaration?
Yes. The CRA Declaration of Conformity under Article 28 + Annex V is a separate document from your existing CE Declarations under the LVD, EMC, or RED. Your product will carry CE marking under multiple legal bases, each documented independently. CRACheck generates the CRA-specific Declaration.
Does the 5-year support period apply to all appliances?
Article 13(8) requires security updates for the expected product lifetime or at least 5 years from placing on the market, whichever is shorter. For long-lifecycle appliances (refrigerators, washing machines), the expected lifetime may exceed 5 years — assess accordingly.
Our appliance uses a third-party WiFi module. Who documents it?
You, as manufacturer of the final product, are responsible for the complete technical documentation under Article 31. Article 13(5) requires due diligence when integrating third-party components. Obtain cybersecurity documentation from your module supplier and integrate it into your own Annex VII dossier.
Can we appoint our Korean office as authorised representative?
No. Article 18 requires the authorised representative to be established within the EU. If you lack an EU legal entity, appoint a representative in an EU Member State. Your EU distributor is not automatically your authorised representative.
Is this a subscription?
No. One-time payment. 30 days of editing, 10 regenerations. PDF yours permanently.
Can I request a refund?
Under Article 16(m) of Directive (EU) 2011/83, licence activation constitutes express consent for immediate digital content generation. Refunds only for reproducible technical failures.
What if the regulation is amended?
Regenerate with the updated CRACheck version at no additional cost during your licence period.
⚠️ Important notice: CRACheck is a self-assessment documentation tool, not legal advice and not a third-party audit. The document under Article 31 and Annex VII of Regulation (EU) 2024/2847 is generated from your input data. You are responsible for the accuracy of the data you provide. CRACheck does not replace a qualified professional assessment.

Your EU distributor will ask for the CRA file. Have it ready.

Eight documents. Article 31 + Annex VII fully structured. Regulation (EU) 2024/2847. Your data stays on your device. The ZIP you download is yours forever.

€149 one-time
8-document professional dossier · 15–25 minutes · No subscription · Browser-side
Generate CRA dossier — €149
✓ Last regulatory check: 1 May 2026 · No substantive changes detected · View history