Dashcams and GPS trackers process two of the most sensitive data categories: location and video. A compromised GPS tracker reveals a person's or vehicle's real-time position. A compromised dashcam exposes video footage of the driver's surroundings. EU fleet operators, logistics companies and consumer buyers will require CRA documentation. GPS trackers for children fall under Annex III point 19 as Class I. Most consumer dashcams and adult GPS trackers are Default. CRACheck generates 8 PDF documents per Annex VII. 15-25 minutes. €149 per product. Browser-side.
€149 one-time · 8-document ZIP · 15-25 minutes · Browser-side
Location data is personal data. Video is personal data. CRA documentation protects both.
Location data is personal data. Video is personal data. CRA documentation protects both.
Encryption in transit is one element. Annex I Part I point 1(c) requires protection of confidentiality of stored, transmitted and processed data. If your tracker stores location history in unencrypted flash memory, or if the cloud API allows unauthenticated access to historical location data, the product does not meet Annex I requirements. Document the full data lifecycle.
Annex III point 19 explicitly covers "personal wearable products that are intended for the use by and for children." A GPS watch marketed for children's safety is Class I. The child-safety context elevates the classification regardless of the product's technical simplicity.
If a vulnerability in your dashcam's firmware allows remote access to video footage or real-time camera feed, it is a cybersecurity incident affecting privacy. Article 14 requires notification to ENISA within 24 hours of becoming aware of active exploitation. Dashcam vulnerabilities have been publicly demonstrated by security researchers.
Dashcams and GPS trackers combine camera, location, LTE/WiFi and cloud connectivity. CRACheck generates 8 documents covering the full digital surface.
Determines product category per Annex III. Defines conformity assessment route under Art. 32.
Complete technical documentation structured per Art. 31 and Annex VII. All 8 mandatory sections.
Cybersecurity risk assessment per Art. 13.2 and Art. 13.3. Mapped against Annex I Part I requirements.
Information and instructions per Annex II. Security properties, support period, vulnerability reporting.
EU declaration of conformity per Art. 28 and Annex V.
Coordinated Vulnerability Disclosure policy per Annex I Part II.
Pre-structured for 24h early warning, 72h notification, 14-day final report under Art. 14.
Key dates: Art. 14 from 11 Sep 2026, full enforcement 11 Dec 2027, support period per Art. 13.8.
Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.
Generated in your browser. No product data is transmitted to any server.
Generates Annex VII documentation for your dashcam or GPS tracker. Covers GPS, LTE, camera, cloud storage, companion app and OTA updates.
CRACheck does not perform GDPR Data Protection Impact Assessment for location tracking, test your cloud API security or scan your companion app. CRA documentation is one layer. Privacy assessment is separate.
We document cybersecurity. You handle privacy compliance.
Article 64 establishes three tiers of administrative fines. Penalties are calculated per undertaking — but non-compliance on a single product can trigger inspection of your entire portfolio.
Art. 64.2. Up to €15 million or 2.5% of total worldwide annual turnover, whichever is higher.
Art. 64.3. Up to €10 million or 2% of total worldwide annual turnover, whichever is higher. Includes failure to produce Annex VII documentation.
Art. 64.4. Up to €5 million or 1% of total worldwide annual turnover, whichever is higher.
Art. 64.5 accounts for the nature, gravity and duration of the infringement, and gives consideration to microenterprises, small and medium-sized enterprises, including start-ups.
| Alternative | Cost | What you get |
|---|---|---|
| Fleet compliance consultancy | €8,000–€15,000 | 3-6 months. |
| Rely on LTE operator security | €0 | Network security ≠ product security. Separate obligations. |
| Document only fleet trackers, skip dashcams | Variable | Both are products with digital elements. Both need documentation. |
| CRACheck | €149 | 8 docs. 15 min. Per product model. |
Each product model needs its own CRA dossier. Volume pricing: €99/product (10-pack), €79/product (30-pack).
Request volume pricingCRACheck generates a structured document according to Article 31 and Annex VII of Regulation (EU) 2024/2847 from the information you provide. The accuracy, completeness and truthfulness of that information is your responsibility as the manufacturer.
We guarantee that the document structure follows Article 31 and Annex VII of Regulation (EU) 2024/2847 and that the legal references cited are correct as of the last verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case or by a commercial buyer in a procurement process.
CRACheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.