Reg (EU) 2024/2847Generate dossier — €149
LIVE — Enforcement tracker · Deadline dashboard · Transposition status — Updated weekly from EUR-Lex, Safety Gate, OEIL & 12 official sourcesView regulatory intelligence →

Your company is a subcontractor for TCS, Infosys, Wipro or another Tier-1 Indian IT firm. They manage the European client. They just forwarded you a requirement: deliver Annex VII technical documentation under Regulation (EU) 2024/2847 for the software module you develop. Deadline: two weeks. CRACheck generates the 8-document dossier in 15 minutes.

The CRA compliance cascade has reached the subcontractor layer. European clients require Tier-1 Indian IT companies to provide Annex VII documentation. The Tier-1 cannot produce documentation for code they did not write — so they push the requirement to their subcontractors. The email arrives with little context: "Please provide CRA technical documentation for the [module name] component per Regulation (EU) 2024/2847 Annex VII. Deadline: [date]." Your team knows the code. You do not know the regulation. CRACheck bridges that gap: 15–25 minutes, 8 PDF documents structured under Annex VII, €149. Deliver before the deadline. Keep the subcontract.

Generate Annex VII dossier — €149Free: check if your product is in scope

€149 one-time · 8-document ZIP · 15–25 minutes · Browser-side

Regulation (EU) 2024/2847 · Art. 31 + Annex VII · 8 documents · 100% browser-side — your data never leaves your device

Key numbers

Art. 13(5)
Due diligence cascades: EU client → Tier-1 → you. Each layer must verify the next.
15 min
Generate the dossier before the Tier-1's internal deadline.
€149
Per module. Less than a single billable day to the Tier-1.

How it works

1
Read the Tier-1's request carefully
Identify which Annex VII sections they need: typically §1 (product description), §2 (design, SBOM, CVD), §3 (risk assessment), §6 (test reports).
2
Scope the documentation to your module
You document only the component you develop. The Tier-1 assembles the product-level dossier.
3
Complete CRACheck
15–25 minutes. Engineering questions about your module's architecture, dependencies, and security measures.
4
Download the 8-PDF ZIP
Structured under Annex VII. Professional format the Tier-1's delivery team can integrate directly.
5
Deliver to the Tier-1
Email the ZIP before the deadline. The Tier-1 includes it in their product-level documentation for the EU client.

Three mistakes to avoid

COMMON MISTAKE

"The Tier-1 should handle all compliance — we are just a subcontractor"

Article 13(5) of Regulation (EU) 2024/2847 creates a due diligence chain. The EU client verifies the Tier-1. The Tier-1 must verify subcontractor components. If the Tier-1 cannot document your module, they either document it at your cost or replace you with a subcontractor who provides documentation proactively.

COMMON MISTAKE

"We will send our Confluence wiki pages as documentation"

Internal wiki pages document your team's knowledge. Annex VII of Regulation (EU) 2024/2847 requires a specific 8-section structure. The Tier-1's compliance team expects structured PDF documents they can include in the conformity file — not wiki links. CRACheck converts your engineering knowledge into the expected format.

COMMON MISTAKE

"This is a one-time request — it will not happen again"

The first request is the beginning, not the end. As December 2027 approaches, every EU project in the Tier-1's portfolio will require Annex VII documentation. Every subcontractor delivering code for those projects will receive the same request. Building a CRACheck workflow now prepares you for the requests that are coming.

What the ZIP contains

8 PDF documents generated from your data. Each cites the specific article of Regulation (EU) 2024/2847 it complies with.

1

Product Classifier

Module classification within the larger product.

2

Technical Documentation

Annex VII scoped to your module.

3

Risk Assessment

Art. 13(2) for the module's threat surface.

4

User Information

Annex II. Integration documentation for the Tier-1.

5

Declaration of Conformity

Art. 28 + Annex V template.

6

CVD Policy

Annex I Part II §5.

7

Notification Template

Art. 14. Art. 14(2): early warning within 24h, notification within 72h, final report within 14 days.

8

Obligations Calendar

Key dates.

Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.

Generated from your data, in your browser. No data leaves your device.

What you pay

🧾 IF THE TIER-1 DOCUMENTS YOUR MODULE FOR YOU
€3,000–€5,000
Deducted from your payment. Loss of control. They see your code structure.
✓ CRACHECK
€149
8 documents. 15 minutes. You deliver. You keep control.

Two layers of responsibility

● WHAT CRACHECK DOES

Documentation generation

Generates Annex VII documentation for your software module. 8 PDFs. 15–25 minutes. €149. The deliverable the Tier-1 needs to assemble the product-level dossier.

∅ WHAT CRACHECK DOES NOT DO

What falls outside CRACheck

Does not document the Tier-1's entire product. Does not interact with the Tier-1's compliance team. Does not perform the conformity assessment.

We document your module. The Tier-1 assembles the product.

Enforcement regime

Article 64 of Regulation (EU) 2024/2847.

🇪🇺
Non-compliance with Annex I + Art. 13
€15M / 2.5%

Art. 64(2). The fine applies to the manufacturer (EU client). Liability cascades through Tier-1 to subcontractors via contract.

🇪🇺
Missing documentation (Art. 31)
€10M / 2%

Art. 64(3).

🇪🇺
Incorrect information
€5M / 1%

Art. 64(4).

Alternatives

AlternativeCostWhat you get
Tier-1 documents your module€0 (but deducted from your fee)Loss of IP control and credibility.
Internal engineer writes documentationFree + 20-40 hoursCustom format. May not match Annex VII. Rework risk.
Ask the Tier-1 for guidance€0 + credibility lossThey expect you to know. Asking signals unfamiliarity.
CRACheck€1498 documents. 15 min. Annex VII format. Delivered on time.

You subcontract for multiple Tier-1 firms on EU projects?

Each module needs its own documentation. If you maintain 5 or 10 modules across different Tier-1 contracts, contact us for subcontractor volume pricing.

Request Volume Pricing
One-business-day response

What CRACheck guarantees and what it does not

CRACheck generates a structured document under Article 31 and Annex VII of Regulation (EU) 2024/2847 from the information you provide. The accuracy is your responsibility.

We guarantee structure and legal references. We do not guarantee acceptance by the Tier-1 or the EU client.

CRACheck is not legal advice. For subcontract liability questions, consult a qualified lawyer.

Frequently asked questions

Why is my Tier-1 partner asking for CRA documentation now?
The Tier-1's European client has added Regulation (EU) 2024/2847 requirements to their contract. Article 13(5) requires the manufacturer (EU client) to exercise due diligence on third-party components. The Tier-1 is the first third party. You are the second. The documentation request cascades through the supply chain.
Does the Tier-1 see all the details in my documentation?
You control the content. CRACheck generates documentation from your answers. You decide what level of architecture detail to include. Include enough to satisfy Annex VII requirements without exposing proprietary implementation details.
Can I ask the Tier-1 what format they need?
If the Tier-1 has a specific template, use it. If they asked for "Annex VII documentation" without a template, CRACheck provides the standard regulatory structure. In either case, CRACheck output can be the starting point.
Will this become a regular requirement for every EU project?
Yes. As December 2027 approaches, Annex VII documentation will become a standard delivery artefact for all EU projects. Tier-1 firms will require it from all subcontractors. Starting now builds the internal process before the volume increases.
Is it a subscription?
No. One-time payment. 30 days editing, 10 regenerations.
Can I request a refund?
Art. 16(m) Directive (EU) 2011/83. Activation = express consent. Refunds only for reproducible technical failures.
What if the regulation changes?
Regenerate at no additional cost during your licence period.
⚠️ Important notice: CRACheck is a self-assessment documentation tool, not legal advice and not a third-party audit. The document under Article 31 and Annex VII of Regulation (EU) 2024/2847 is generated from your input data. You are responsible for the accuracy of the data you provide. CRACheck does not replace a qualified professional assessment.

The Tier-1 set a deadline. Meet it in 15 minutes.

Eight documents. Annex VII fully structured. Regulation (EU) 2024/2847. Your data stays on your device. The ZIP you download is yours forever.

€149 one-time
8 documents · 15–25 min · Module-scoped · 100% browser-side
Generate Annex VII dossier — €149
✓ Last regulatory check: 28 April 2026 · No substantive changes detected · View history