The scenario is increasingly common: a European manufacturer of connected hardware outsources the firmware, embedded software, or application layer to an Indian development team. Under Regulation (EU) 2024/2847, the European manufacturer holds the Article 13 obligations — but Article 13(5) explicitly requires due diligence on components sourced from third parties. In practice, the manufacturer sends a formal request: deliver Annex VII documentation for the software component. Your engineering team has the technical knowledge. CRACheck structures that knowledge into the 8 sections of Annex VII. 15–25 minutes. €149 per component. 100% browser-side.
€149 one-time · 8-document ZIP · 15–25 minutes · Browser-side
Article 13(5) of Regulation (EU) 2024/2847 requires the manufacturer to exercise due diligence when integrating third-party components. The manufacturer fulfils this obligation by requesting documentation from you. If you refuse to provide it, the manufacturer either replaces you with a supplier who does, or builds the component in-house.
Annex VII of Regulation (EU) 2024/2847 has a specific 8-section structure. Your standard design documents may contain the right information, but not in the format the manufacturer needs for their conformity file. CRACheck restructures your engineering knowledge into Annex VII sections. The manufacturer integrates it directly.
Article 3(1) of Regulation (EU) 2024/2847 defines "product with digital elements" as including "software or hardware components being placed on the market separately." Even if your component is not sold separately, Article 13(5) requires the manufacturer to verify it. The documentation obligation exists regardless of whether the component is independently marketable.
8 PDF documents generated from your data. Each cites the specific article of Regulation (EU) 2024/2847 it complies with.
Classification of the component's role within the overall product under Annex III/IV.
Annex VII structured for software component documentation. Architecture, dependencies, integration points.
Art. 13(2) risk assessment scoped to the component's threat surface.
Annex II information relevant to the component: integration instructions, security configuration.
Art. 28 + Annex V template. The manufacturer signs the product-level declaration.
Annex I Part II §5. Vulnerability disclosure process for the component.
Art. 14 notification template for component-level vulnerabilities. Art. 14(2): early warning within 24h, notification within 72h, final report within 14 days.
Enforcement timeline for the manufacturer's product.
Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.
Generated from your data, in your browser. No data leaves your device.
Generates Annex VII documentation scoped to your software component. 8 documents. 15–25 minutes. €149. Deliverable the manufacturer integrates into their product dossier.
Does not document the manufacturer's complete product — only your component. Does not perform the product-level conformity assessment (Art. 32). Does not allocate responsibility between you and the manufacturer.
We document the component. The manufacturer documents the product.
Article 64 of Regulation (EU) 2024/2847.
Art. 64(2). The fine applies to the manufacturer. But undocumented components are the first thing investigators check.
Art. 64(3). A gap in component documentation is a gap in the product dossier.
Art. 64(4).
| Alternative | Cost | What you get |
|---|---|---|
| Let the manufacturer document your component | €0 to you (but they deduct from your fee) | Loss of control. Delay. Manufacturer sees your margins. |
| Write component documentation manually | Free + 40-60 engineer hours | Custom format. May not match Annex VII structure. Rework likely. |
| Refuse to provide documentation | €0 | Manufacturer replaces you. |
| CRACheck | €149 | 8 documents. Annex VII structure. You deliver on your terms. |
Each component requires its own Annex VII documentation. If your engineering team maintains 5, 10 or 20 components for different EU manufacturers, contact us for volume pricing.
Request Volume PricingCRACheck generates a structured document under Article 31 and Annex VII of Regulation (EU) 2024/2847 from the information you provide. The accuracy of the information is your responsibility as the component developer.
We guarantee that the document structure follows Article 31 and Annex VII and that the legal references are correct. We do not guarantee acceptance by the manufacturer or by a market surveillance authority.
CRACheck is not legal advice. For questions about your contractual obligations to the EU manufacturer, consult a qualified lawyer.
Eight documents. Annex VII fully structured. Regulation (EU) 2024/2847. Your data stays on your device. The ZIP you download is yours forever.