Cross-border e-commerce from China to the EU is under increasing regulatory pressure. The Digital Services Act, the General Product Safety Regulation and now the Cyber Resilience Act all create obligations for online marketplace operators. Article 25 of Regulation (EU) 2024/2847 requires online marketplaces to cooperate with market surveillance authorities and, upon order, to remove non-compliant products. AliExpress has already started requiring compliance documentation for certain product categories. Temu faces similar pressure from EU authorities. If you sell connected devices on these platforms, CRA documentation will be required. CRACheck generates 8 PDF documents per Annex VII. 15-25 minutes. €149 per product. Browser-side.
€149 one-time · 8-document ZIP · 15-25 minutes · Browser-side
The platforms will enforce. The sellers who are ready will keep selling.
The platforms will enforce. The sellers who are ready will keep selling.
Article 2.1 of Regulation (EU) 2024/2847 covers products "made available on the market." When a European consumer buys a smart plug on AliExpress and receives it in Hamburg, the product has been made available on the EU market. The seller's location is irrelevant.
Article 25 obliges marketplace operators to cooperate with market surveillance authorities. EU authorities have already pressured AliExpress on product safety. The General Product Safety Regulation created precedent. CRA enforcement will follow the same pattern.
If you sell unbranded products, the entity that places them on the market is still identifiable through the store listing. If no manufacturer is identified, market surveillance authorities may hold the marketplace operator responsible under Art. 25. The marketplace may then enforce against you as the seller. Having CRA documentation resolves the compliance chain.
Cross-border e-commerce sellers need the same CRA documentation as any manufacturer. CRACheck generates 8 documents per product.
Determines product category per Annex III. Defines conformity assessment route under Art. 32.
Complete technical documentation structured per Art. 31 and Annex VII. All 8 mandatory sections.
Cybersecurity risk assessment per Art. 13.2 and Art. 13.3. Mapped against Annex I Part I requirements.
Information and instructions per Annex II. Security properties, support period, vulnerability reporting.
EU declaration of conformity per Art. 28 and Annex V.
Coordinated Vulnerability Disclosure policy per Annex I Part II.
Pre-structured for 24h early warning, 72h notification, 14-day final report under Art. 14.
Key dates: Art. 14 from 11 Sep 2026, full enforcement 11 Dec 2027, support period per Art. 13.8.
Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.
Generated in your browser. No product data is transmitted to any server.