Before the Cyber Resilience Act, your software product did not need CE marking. Now it does. Article 30 of Regulation (EU) 2024/2847 requires CE marking for cybersecurity conformity on every product with digital elements placed on the EU market. You need technical documentation under Annex VII, a Declaration of Conformity under Annex V, and a completed conformity assessment under Annex VIII. CRACheck generates the documentation for €149.

CE marking under the CRA is not the same as CE marking under the Radio Equipment Directive or the Low Voltage Directive. It specifically covers cybersecurity requirements under Annex I of Regulation (EU) 2024/2847. For Default products, you self-assess under Module A. For Important Class I (with harmonised standards), Module A applies. For Class II and Critical, you need a Notified Body under Module B+C or H. CRACheck generates the 8 documents that form the foundation of your CE marking process. €149 per product. 15–25 minutes. 100% browser-side.

Generate CRA dossier — €149 Free: check your product classification

€149 one-time · 8-document ZIP · 15–25 minutes · Browser-side

Key figures

Art. 30

CE marking obligation for cybersecurity conformity on products with digital elements

Annex VIII

Three conformity assessment modules: Module A (self), Module B+C (type exam), Module H (full QA)

First time

Software-only products, standalone firmware, and cloud-connected devices face CE marking obligations for the first time under the CRA

How to get CE marking under the CRA

Classify your product

CRACheck determines whether your product is Default, Important Class I, Class II, or Critical. This determines your conformity assessment module.

Generate Technical Documentation

Art. 31 + Annex VII. This is the file that demonstrates your product meets Annex I requirements.

Complete conformity assessment

For Module A: self-assessment documented in the technical file. For Module B+C or H: submit to a Notified Body.

Generate Declaration of Conformity

CRACheck produces the EU Declaration per Art. 28 + Annex V, referencing your conformity assessment results.

Affix CE marking

Art. 30: CE marking is affixed visibly, legibly, and indelibly to the product or its packaging. For software, it appears in the digital interface or accompanying documentation.

Download the full 8-document package

All documents ready for your CE marking file.

Common mistakes

❌

ART. 30(3)

"Our hardware CE under RED covers the CRA too."

Article 30(3) states that where a product is subject to multiple EU acts requiring CE marking, the marking indicates conformity with all of them. You need a separate CRA conformity assessment and Declaration of Conformity.

❌

ART. 2 + ART. 3(1)

"Software doesn't need CE marking."

Article 3(1) defines "product with digital elements" as any software or hardware product with a data connection. Pure software products are within scope. CE marking applies.

❌

ART. 30 + ART. 28

"We can CE-mark now and do the documentation later."

CE marking under Art. 30 presupposes a completed conformity assessment under Art. 32 and a signed Declaration under Art. 28. Affixing CE marking without supporting documentation is a misuse — sanctionable under Art. 64.

What the ZIP contains

8 PDF documents generated from your data. Each cites the specific article of Regulation (EU) 2024/2847 it complies with.

Product Classifier

Classification determines the CE marking basis.

Technical Documentation

Art. 31 + Annex VII. Must exist before CE is affixed.

Risk Assessment

Annex I assessment proving the product meets essential requirements.

User Information

Annex II. For software, includes CE marking reference in the digital interface.

Declaration of Conformity

Art. 28 + Annex V. The document that legally authorises CE marking.

CVD Policy

Art. 13(6). Must be fulfilled before CE marking.

Notification Template

Art. 14. Art. 14(2): early warning within 24h, notification within 72h, final report within 14 days.

Obligations Calendar

Includes CE marking milestones and support period.

See before you buy — Download sample dossier (PDF, fictional company) — Real structure, real articles, real format. Fictional data.

Generated from your data, in your browser. No data leaves your device.

What you pay

🧾 CE MARKING CONSULTANCY

€10,000–€30,000

8–20 weeks

Does not include Notified Body fees (€5K–€25K for Class II/Critical)

✓ CRACHECK

€149 — Documentation foundation for CE marking

15–25 minutes

8 structured documents

Notified Body fees separate for Class II/Critical

Two layers

● LAYER 1 — DOCUMENTATION · CRACHECK

Documentation layer

CRACheck generates the 8 documents that form the foundation of CE marking. For Module A products, this documentation may be sufficient to support CE marking.

∅ LAYER 2 — NOT INCLUDED

What CRACheck does not do

CRACheck does not affix CE marking to your product. It does not act as a Notified Body. For Important Class II or Critical products, Module B+C or H assessment requires a Notified Body.

CE marking requires documentation. CRACheck generates the documentation. You affix the marking based on a completed conformity assessment.

Enforcement regime

🔴

Art. 64(1) — Up to €15,000,000 or 2.5%

For affixing CE marking without a completed conformity assessment.

🟠

Art. 64(2) — Up to €10,000,000 or 2%

For failing to draw up the Declaration of Conformity or incomplete technical documentation.

🟡

Art. 64(3) — Up to €5,000,000 or 1%

For misuse of CE marking or providing misleading information about conformity status.

Alternatives

Criterion	No action	DIY documentation	CE consultancy	CRACheck
CE marking readiness	None	Uncertain	Full, slow	Documentation ready
Annex VII coverage	None	Partial	Full	Full (10 categories)
Cost	€0 now, fines later	Staff hours	€10K–€30K	€149
Time	—	2–6 months	8–20 weeks	15–25 min
CRACheck	Ready	Full	€149	15-25 min

CE marking documentation for a product range?

Each product variant needs its own CE marking basis. Pack pricing: €99/product (10), €79/product (30).

Request volume pricing

Commercial enquiries via hello@solidwaretools.com

What CRACheck guarantees and what it does not

CRACheck generates a structured document package according to Article 31 and Annex VII of Regulation (EU) 2024/2847 based on the information you enter. The accuracy, completeness, and truthfulness of that information is your responsibility as the manufacturer.

We guarantee that the document structure follows Article 31 and Annex VII of Regulation (EU) 2024/2847 and that the legal references cited are correct. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case.

CRACheck is not legal advice. For situations specific to your product or market, consult a qualified lawyer or specialised regulatory consultancy.

Frequently asked questions

Is CE marking under the CRA the same as existing CE marking?

No. Existing CE markings under RED, LVD, or Machinery Regulation cover their respective requirements. The CRA introduces a separate CE marking obligation under Article 30 for cybersecurity. If your product falls under multiple directives, it needs conformity assessment for each.

Do software-only products need CE marking?

Yes, if they meet the definition of "product with digital elements" under Article 3(1). Software with a data connection is within scope.

Where do I affix CE marking on software?

Article 30(5) provides that where CE marking cannot be affixed physically, it shall be affixed to the packaging or accompanying documents. For software, this means the digital interface, installation screen, or accompanying documentation.

What is Module A self-assessment?

Module A (Annex VIII, Part I) allows the manufacturer to self-assess conformity without Notified Body involvement. Available for Default products and Important Class I products when harmonised standards cover all essential requirements.

Is this a subscription?

No. One-time payment. The licence includes 30 days of editing and 10 regenerations. The downloaded PDF is yours permanently.

Can I request a refund?

Under Art. 16(m) of Directive (EU) 2011/83, activating the licence constitutes express consent for immediate generation of digital content, waiving the 14-day withdrawal right. Refunds are only processed for reproducible technical failures.

What if the regulation changes?

If Regulation (EU) 2024/2847 is amended during your licence window, you can regenerate the documentation using the updated version of the generator at no additional cost.

Official legal sources

Regulation (EU) 2024/2847 — Cyber Resilience Act — full text

⚠️ Important notice: CRACheck is a self-assessment documentation tool, not legal advice and not a third-party audit. The document under Article 31 and Annex VII of Regulation (EU) 2024/2847 is generated from your input data. You are responsible for the accuracy of the data you provide. CRACheck does not replace a qualified professional assessment.