You are a marketplace agency serving sellers of smart home devices, wearables, IP cameras, connected electronics on Amazon, Kaufland, Cdiscount, bol.com. Regulation (EU) 2024/2847 treats any seller who places a product under its own brand as a manufacturer (Article 21) — with full Article 13 obligations: cybersecurity risk assessment, Annex VII technical documentation, vulnerability handling, SBOM, CE marking, and a minimum 5-year support period. CRACheck Professional Pack: 70 licenses, €1,199 one-time. 8 structured PDF documents per product. Generated in your browser in 20 minutes.
€1,199 · One-time · 70 dossiers · 8 PDFs each · Your data never leaves your browser
Your sellers list white-label connected products under their own brands. Under Article 21 of Regulation (EU) 2024/2847, each of them is a manufacturer. The question is whether they have the documentation to prove it — or whether the next marketplace audit shuts them down.
CRACheck Professional Pack is built for agencies and service providers who manage marketplace sellers of connected products and need to offer CRA documentation at scale.
Three inputs. Four answers. No signup required.
Every license generates a complete Annex VII technical documentation package. Each document cites the specific article of Regulation (EU) 2024/2847 it complies with. The seller does not need access to the tool — the agency enters the product data and delivers the finished package.
Default / Important Class I / Important Class II / Critical. Annex III + Annex IV analysis.
Complete technical file structure. Product description, design, development, cybersecurity risk assessment methodology.
Systematic assessment against the 13 essential requirements of Annex I Part I. Article 13.2.
8 requirements of Annex I Part II. Coordinated vulnerability disclosure policy, SBOM reference. Article 13.6.
Per Annex V. Manufacturer identification, product identification, conformity assessment. Article 28.
Per Annex VI. Short-form declaration with URL reference. Article 13.20.
Printable label with CE marking, support period end date, manufacturer contact. Article 30.
Pre-structured template for reporting vulnerabilities to CSIRT/ENISA within 24 hours. Article 14.
See before you buy — Download sample dossier (PDF, fictional company) — Real structure, real articles, real format. Fictional data.
The CE certificate from a Chinese factory typically covers the Radio Equipment Directive (2014/53/EU), EMC (2014/30/EU), or Low Voltage Directive (2014/35/EU). The Cyber Resilience Act is a separate regulation — Regulation (EU) 2024/2847 — with its own essential cybersecurity requirements (Annex I), its own technical documentation structure (Annex VII), and its own conformity assessment procedures (Article 32). A product can have a valid RED CE mark and zero CRA documentation.
Amazon, Kaufland, and other EU marketplaces are tightening compliance checks. When a listing is suspended for missing documentation, the seller loses daily revenue, organic ranking, advertising investment, and Buy Box position. Reinstatement takes weeks. The agency that has documentation ready prevents the suspension entirely — instead of scrambling to fix it afterwards.
Marketplace sellers operate on speed and convenience. When CRA documentation becomes mandatory, every seller will need it for every connected product. The agency that offers it as part of the account management retains the client. The agency that says "find a compliance consultant" pushes the seller toward a full-service competitor that handles everything — listings, advertising, and compliance — in one place.
8 structured PDF documents per product. Cybersecurity risk assessment, vulnerability handling, Declaration of Conformity, CE marking guidance, notification template. Generated from product data in 20 minutes. Article-by-article traceability to Regulation (EU) 2024/2847.
Penetration testing, firmware hardening, secure boot, encrypted OTA updates, SBOM generation from source code, vulnerability scanning. These are engineering-level changes to the product itself. CRACheck documents the cybersecurity posture — it does not modify the product.
CRACheck structures and documents. The agency coordinates between the seller and the factory for implementation-level changes. The two layers complement each other.
These are the consequences under Article 64 of Regulation (EU) 2024/2847 for sellers who are classified as manufacturers under Article 21. This is the argument to present when a seller asks why CRA documentation is necessary on top of existing CE marking.
Article 64.2 of Regulation (EU) 2024/2847. Whichever is higher. Applies to any manufacturer — including marketplace sellers under Article 21.
Article 64.3. Covers failure to produce Annex VII technical documentation, CE marking, and vulnerability reporting.
Article 54. Corrective measures, withdrawal, or recall if documentation is insufficient. Marketplace listing suspension is the commercial equivalent.
The sellers face these consequences. The agency offers the documentation that prevents them — and charges for the service.
| Option | Cost for 50 products | Total time | Output quality |
|---|---|---|---|
| Manual drafting (Word templates) | Professional time only | 750+ hours | Variable, no CRA-specific structure |
| Outsource to cybersecurity firm | €75,000-€150,000 | Depends on provider | High, but cost-prohibitive at scale |
| Enterprise SaaS platform | €8,000-€20,000/year | 2-4 weeks setup | High, requires integration |
| CRACheck Professional Pack | €1,199 (one-time) | ~17 hours total | Structured, Annex VII, article-by-article |
CRACheck generates a structured documentation package according to Annex VII of Regulation (EU) 2024/2847 from the information that the user enters. The truthfulness, accuracy and completeness of that information is the responsibility of the manufacturer — or of the agency entering data on their behalf.
We guarantee that the document structure follows Annex VII of Regulation (EU) 2024/2847 and that the legal references cited are correct as of the latest verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case, nor by a marketplace platform in a compliance review.
CRACheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.
70 licenses. 8 PDF documents per product. Annex VII structure. Browser-side. One payment.