Is CE marking under the CRA the same as existing CE marking?

No. Existing CE markings under RED, LVD, or Machinery Regulation cover their respective requirements. The CRA introduces a separate CE marking obligation under Article 30 for cybersecurity. If your product falls under multiple directives, it needs conformity assessment for each.

Do software-only products need CE marking?

Yes, if they meet the definition of "product with digital elements" under Article 3(1). Software with a data connection is within scope.

Where do I affix CE marking on software?

Article 30(5) provides that where CE marking cannot be affixed physically, it shall be affixed to the packaging or accompanying documents. For software, this means the digital interface, installation screen, or accompanying documentation.

What is Module A self-assessment?

Module A (Annex VIII, Part I) allows the manufacturer to self-assess conformity without Notified Body involvement. Available for Default products and Important Class I products when harmonised standards cover all essential requirements.

Is this a subscription?

No. One-time payment. The licence includes 30 days of editing and 10 regenerations. The downloaded PDF is yours permanently.

Can I request a refund?

Under Art. 16(m) of Directive (EU) 2011/83, activating the licence constitutes express consent for immediate generation of digital content, waiving the 14-day withdrawal right. Refunds are only processed for reproducible technical failures.

What if the regulation changes?

If Regulation (EU) 2024/2847 is amended during your licence window, you can regenerate the documentation using the updated version of the generator at no additional cost.

Before the Cyber Resilience Act, your software product did not need CE marking. Now it does. Article 30 of Regulation (EU) 2024/2847 requires CE marking for cybersecurity conformity on every product with digital elements placed on the EU market. You need technical documentation under Annex VII, a Declaration of Conformity under Annex V, and a completed conformity assessment under Annex VIII. CRACheck generates the documentation for €149.

CE marking under the CRA is not the same as CE marking under the Radio Equipment Directive or the Low Voltage Directive. It specifically covers cybersecurity requirements under Annex I of Regulation (EU) 2024/2847. For Default products, you self-assess under Module A. For Important Class I (with harmonised standards), Module A applies. For Class II and Critical, you need a Notified Body under Module B+C or H. CRACheck generates the 8 documents that form the foundation of your CE marking process. €149 per product. 15–25 minutes. 100% browser-side.

Generate CRA dossier — €149 Free: check your product classification

€149 one-time · 8-document ZIP · 15–25 minutes · Browser-side

Key figures

Art. 30

CE marking obligation for cybersecurity conformity on products with digital elements

Annex VIII

Three conformity assessment modules: Module A (self), Module B+C (type exam), Module H (full QA)

First time

Software-only products, standalone firmware, and cloud-connected devices face CE marking obligations for the first time under the CRA

How to get CE marking under the CRA

Classify your product

CRACheck determines whether your product is Default, Important Class I, Class II, or Critical. This determines your conformity assessment module.

Generate Technical Documentation

Art. 31 + Annex VII. This is the file that demonstrates your product meets Annex I requirements.

Complete conformity assessment

For Module A: self-assessment documented in the technical file. For Module B+C or H: submit to a Notified Body.

Generate Declaration of Conformity

CRACheck produces the EU Declaration per Art. 28 + Annex V, referencing your conformity assessment results.

Affix CE marking

Art. 30: CE marking is affixed visibly, legibly, and indelibly to the product or its packaging. For software, it appears in the digital interface or accompanying documentation.

Download the full 8-document package

All documents ready for your CE marking file.

Common mistakes

❌

ART. 30(3)

"Our hardware CE under RED covers the CRA too."

Article 30(3) states that where a product is subject to multiple EU acts requiring CE marking, the marking indicates conformity with all of them. You need a separate CRA conformity assessment and Declaration of Conformity.

❌

ART. 2 + ART. 3(1)

"Software doesn't need CE marking."

Article 3(1) defines "product with digital elements" as any software or hardware product with a data connection. Pure software products are within scope. CE marking applies.

❌

ART. 30 + ART. 28

"We can CE-mark now and do the documentation later."

CE marking under Art. 30 presupposes a completed conformity assessment under Art. 32 and a signed Declaration under Art. 28. Affixing CE marking without supporting documentation is a misuse — sanctionable under Art. 64.

What the ZIP contains

8 PDF documents generated from your data. Each cites the specific article of Regulation (EU) 2024/2847 it complies with.

Product Classifier

Classification determines the CE marking basis.

Technical Documentation

Art. 31 + Annex VII. Must exist before CE is affixed.

Risk Assessment

Annex I assessment proving the product meets essential requirements.

User Information

Annex II. For software, includes CE marking reference in the digital interface.

Declaration of Conformity

Art. 28 + Annex V. The document that legally authorises CE marking.

CVD Policy

Art. 13(6). Must be fulfilled before CE marking.

Notification Template

Art. 14. Art. 14(2): early warning within 24h, notification within 72h, final report within 14 days.

Obligations Calendar

Includes CE marking milestones and support period.

See before you buy — Download sample dossier (PDF, fictional company) — Real structure, real articles, real format. Fictional data.

Generated from your data, in your browser. No data leaves your device.

What you pay

🧾 CE MARKING CONSULTANCY

€10,000–€30,000

8–20 weeks

Does not include Notified Body fees (€5K–€25K for Class II/Critical)

✓ Last regulatory check: 1 May 2026 · No substantive changes detected · View history