You are a cybersecurity consultancy serving manufacturers of connected products — sensors, smart home, wearables, building automation, industrial IoT. Regulation (EU) 2024/2847 requires each of them to produce Annex VII technical documentation before placing their product on the EU market. They will ask you to do it. CRACheck Professional Pack: 70 licenses, €1,199 one-time. 8 structured PDF documents per product. Generated in your browser in 20 minutes.
€1,199 · One-time · 70 dossiers · 8 PDFs each · Your data never leaves your browser
You know the regulation. You know your clients need documentation. The question is whether you can deliver it at scale without hiring or outsourcing.
CRACheck Professional Pack is built for professionals who generate CRA documentation for multiple clients — not for individual manufacturers documenting a single product.
Three inputs. Four answers. No signup required.
Every license generates a complete Annex VII technical documentation package. Each document cites the specific article of Regulation (EU) 2024/2847 it complies with.
Default / Important Class I / Important Class II / Critical. Annex III + Annex IV analysis.
Complete technical file structure. Product description, design, development, cybersecurity risk assessment methodology.
Systematic assessment against the 13 essential requirements of Annex I Part I. Article 13.2.
8 requirements of Annex I Part II. Coordinated vulnerability disclosure policy, SBOM reference. Article 13.6.
Per Annex V. Manufacturer identification, product identification, conformity assessment. Article 28.
Per Annex VI. Short-form declaration with URL reference. Article 13.20.
Printable label with CE marking, support period end date, manufacturer contact. Article 30.
Pre-structured template for reporting vulnerabilities to CSIRT/ENISA within 24 hours. Article 14.
See before you buy — Download sample dossier (PDF, fictional company) — Real structure, real articles, real format. Fictional data.
Mapping Annex I requirements manually, cross-referencing ENISA guidance, structuring the risk assessment, formatting the Declaration of Conformity. For one client. Then the next one arrives. At 30+ clients, the bottleneck is not expertise — it is production capacity.
Distributors and importers will request documentation per Annex VII of Regulation (EU) 2024/2847 — not a vulnerability scan, not a SOC2 report, not an ISO 27001 certificate. The CRA has its own structure. Generic cybersecurity templates do not map to it.
If a client is told to find another consultant for CRA documentation, they will — and that consultant will also take the RED, EMC, and LVD work. The CRA is not optional for the service portfolio. It is a retention risk.
8 structured PDF documents per product. Risk assessment, vulnerability handling, Declaration of Conformity, CE marking, notification template. Generated from input data in 20 minutes. Article-by-article traceability.
Penetration testing, code review, SBOM generation, vulnerability scanning, secure development lifecycle implementation. That is the consultancy's core service. CRACheck documents the outcome.
CRACheck structures and documents. The consultancy assesses and implements. The two layers complement each other.
These are the consequences under Article 64 of Regulation (EU) 2024/2847. This is the argument to present when a client asks why an Annex VII dossier is necessary.
Article 64.2 of Regulation (EU) 2024/2847. Whichever is higher.
Article 64.3. Covers failure to produce Annex VII technical documentation, CE marking, and vulnerability reporting.
Article 54. Corrective measures, withdrawal, or recall if documentation is insufficient.
The clients face these consequences. The consultancy offers the documentation that prevents them.
| Option | Cost for 70 clients | Total time | Output quality |
|---|---|---|---|
| Manual drafting (templates) | Professional time only | 1,050-1,400 hours | Variable, no traceability |
| Outsource to regulatory consultant | €70,000-€140,000 | Depends on consultant | High, but cost-prohibitive |
| Enterprise SaaS platform | €8,000-€20,000/year | 2-4 weeks setup | High, requires integration |
| CRACheck Professional Pack | €1,199 (one-time) | ~23 hours total | Structured, Annex VII, article-by-article |
CRACheck generates a structured documentation package according to Annex VII of Regulation (EU) 2024/2847 from the information that the user enters. The truthfulness, accuracy and completeness of that information is the responsibility of the manufacturer — or of the consultant entering data on their behalf.
We guarantee that the document structure follows Annex VII of Regulation (EU) 2024/2847 and that the legal references cited are correct as of the latest verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case, nor by a commercial buyer in a procurement process.
CRACheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.
70 licenses. 8 PDF documents per product. Annex VII structure. Browser-side. One payment.