European hotel chains, office building managers and retail security integrators are adding CRA compliance clauses to their procurement specifications. An IP camera that cannot demonstrate Annex VII documentation will not pass procurement in 2027. Annex III point 17 of Regulation (EU) 2024/2847 classifies security cameras as Important Class I. If you have not applied the relevant harmonised standard in full, Art. 32.2 requires conformity assessment by a notified body — either Module B+C or Module H. The notified body needs your technical documentation. CRACheck generates it: 8 PDFs, 15-25 minutes, €149 per product.
€149 one-time · 8-document ZIP · 15–25 minutes · Browser-side
You enter your product data. CRACheck structures the documentation per Article 31 + Annex VII.
Annex III point 17 of Regulation (EU) 2024/2847 explicitly names "security cameras" as Important Class I products. The regulatory text does not distinguish between professional CCTV and consumer security cameras. If your product is marketed or can be used as a security camera, it is Class I.
Module A self-assessment under Art. 32.1(a) applies to Default products or to Important Class I products where harmonised standards are fully applied. If the relevant CRA harmonised standard is not yet published or you have not applied it in full, Art. 32.2 requires conformity assessment by a notified body.
Article 14 of Regulation (EU) 2024/2847 applies to manufacturers of all products with digital elements — including hardware manufacturers. If a vulnerability in your camera's firmware is actively exploited, you must notify ENISA and the designated CSIRT within 24 hours. This obligation applies from 11 September 2026.
8 PDF documents generated from your data. Each cites the specific article of Regulation (EU) 2024/2847 it complies with.
Classifies camera as Class I per Annex III point 17. No ambiguity for security cameras.
Art. 31 + Annex VII. Covers video processing, cloud connectivity, encryption, firmware update architecture, access control.
Art. 13.2-13.3. Includes network exposure, unauthorized camera access, credential theft, firmware tampering.
Annex II. Privacy settings, recording notification, secure setup, vulnerability reporting, secure disposal.
Art. 28 + Annex V. References CRA alongside RED and any other applicable directives.
Coordinated Vulnerability Disclosure for firmware vulnerabilities. Critical for cameras with cloud connectivity.
Art. 14 ENISA notification for camera-specific incidents and vulnerabilities.
CRA dates with Class I notified body milestones and support period.
See before you buy — Download sample dossier (PDF, fictional company) — Real structure, real articles, real format. Fictional data.
Generated from your data, in your browser. No data leaves your device.
Generates the Annex VII technical documentation for your IP camera. Structured per Art. 31. Ready for submission to a notified body.
CRACheck does not perform the conformity assessment. For Class I products without harmonised standards, a notified body must issue the certificate under Art. 32.2. CRACheck produces the documentation input — the notified body produces the assessment output.
We document. The notified body certifies.
Article 64 of Regulation (EU) 2024/2847.
Art. 64.2.
Art. 64.3.
Art. 64.4.
| Criterion | Notified body full-service (docs + assessment) | Ask your RED lab to add CRA | Self-assess under Module A (incorrect for Class I) | CRACheck + separate notified body |
|---|---|---|---|---|
| Cost | €8,000–€20,000 | €3,000–€8,000 | €0 | €149 + NB fee |
| Result | Complete. 3-6 months. | If they cover CRA. Most do not yet. | Non-compliant. Art. 32.2 requires NB if no harmonised standard. | Documentation in 15 min. NB assessment on your timeline. |
Each camera model with different firmware, hardware or connectivity needs its own Annex VII dossier. Indoor camera, outdoor PTZ, doorbell camera — three products, three dossiers. Volume pricing: €99/product (10-pack), €79/product (30-pack).
Request Volume PricingCRACheck generates a structured document according to Article 31 and Annex VII of Regulation (EU) 2024/2847 from the information you provide. The accuracy, completeness and truthfulness of that information is your responsibility as the manufacturer.
We guarantee that the document structure follows Article 31 and Annex VII of Regulation (EU) 2024/2847 and that the legal references cited are correct. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case or by a commercial buyer in a procurement process.
CRACheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.
Eight documents. Article 31 + Annex VII fully structured. Regulation (EU) 2024/2847. Your data stays on your device. The ZIP you download is yours forever.