The European EV charging infrastructure rollout means millions of connected chargers on the grid by 2027. Each one is a network endpoint that manages energy flows, user authentication and billing data. Regulation (EU) 2024/2847 applies to all products with digital elements on the EU market — EV chargers included. If your charger integrates a smart meter gateway, it may fall under Annex IV point 2 (Critical product). Most home wallboxes without smart meter gateway integration are Default products. CRACheck generates 8 PDF documents per Article 31 and Annex VII. 15-25 minutes. €149. Browser-side.
€149 one-time · 8-document ZIP · 15-25 minutes · Browser-side
The EU energy transition runs on connected devices. Every charger needs CRA documentation.
The EU energy transition runs on connected devices. Every charger needs CRA documentation.
Annex IV point 2 of Regulation (EU) 2024/2847 lists "smart meter gateways within smart metering systems" as Critical products. If your wallbox integrates a smart meter gateway for energy management, it falls under Annex IV. If it communicates with the meter but does not contain a gateway function, it is likely Default. The distinction depends on architecture.
OCPP (Open Charge Point Protocol) defines communication between charger and central management system. OCPP 2.0.1 includes security profiles. But the CRA requires you to document your specific implementation: how you handle OCPP authentication, transport encryption, session management. Referencing OCPP alone does not satisfy Annex VII. Document your implementation.
EV chargers are infrastructure devices expected to operate for 10-15 years. Article 13.8 requires the support period to reflect expected use. A 2-year support period for a product with a 10-year operational life leaves 8 years without security updates. Market surveillance authorities and CPO partners will question this.
EV chargers sit at the intersection of energy infrastructure and consumer electronics. CRACheck generates 8 documents covering the cybersecurity of both dimensions.
Determines product category per Annex III. Defines conformity assessment route under Art. 32.
Complete technical documentation structured per Art. 31 and Annex VII. All 8 mandatory sections.
Cybersecurity risk assessment per Art. 13.2 and Art. 13.3. Mapped against Annex I Part I requirements.
Information and instructions per Annex II. Security properties, support period, vulnerability reporting.
EU declaration of conformity per Art. 28 and Annex V.
Coordinated Vulnerability Disclosure policy per Annex I Part II.
Pre-structured for 24h early warning, 72h notification, 14-day final report under Art. 14.
Key dates: Art. 14 from 11 Sep 2026, full enforcement 11 Dec 2027, support period per Art. 13.8.
Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.
Generated in your browser. No product data is transmitted to any server.
Generates Annex VII documentation for your EV charger. Covers OCPP, WiFi/LTE, authentication, billing, energy management and OTA updates.
CRACheck does not assess compliance with energy sector regulations (Directive (EU) 2019/944), payment card industry standards (PCI-DSS) or OCPP certification. CRA covers cybersecurity documentation. Energy and payment compliance are separate.
We document cybersecurity. You handle energy regulation.
Article 64 establishes three tiers of administrative fines. Penalties are calculated per undertaking — but non-compliance on a single product can trigger inspection of your entire portfolio.
Art. 64.2. Up to €15 million or 2.5% of total worldwide annual turnover, whichever is higher.
Art. 64.3. Up to €10 million or 2% of total worldwide annual turnover, whichever is higher. Includes failure to produce Annex VII documentation.
Art. 64.4. Up to €5 million or 1% of total worldwide annual turnover, whichever is higher.
Art. 64.5 accounts for the nature, gravity and duration of the infringement, and gives consideration to microenterprises, small and medium-sized enterprises, including start-ups.
| Alternative | Cost | What you get |
|---|---|---|
| EV charging compliance consultancy | €15,000–€30,000 | CRA + energy regulation. 4-8 months. |
| Rely on OCPP certification | €0 additional | OCPP covers protocol compliance. CRA covers product cybersecurity. Separate. |
| Wait for CPO partner to enforce | €0 now | Lose the tender. CPOs will buy from compliant manufacturers. |
| CRACheck | €149 | 8 CRA docs. 15 min. Per charger model. |
Each charger model with different firmware, connectivity or digital capabilities needs its own CRA dossier. Volume pricing: €99/product (10-pack), €79/product (30-pack).
Request volume pricingCRACheck generates a structured document according to Article 31 and Annex VII of Regulation (EU) 2024/2847 from the information you provide. The accuracy, completeness and truthfulness of that information is your responsibility as the manufacturer.
We guarantee that the document structure follows Article 31 and Annex VII of Regulation (EU) 2024/2847 and that the legal references cited are correct as of the last verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case or by a commercial buyer in a procurement process.
CRACheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.