You are a trade compliance or import advisory firm serving importers of products with digital elements — consumer electronics, IoT devices, routers, smart home products, industrial sensors. Regulation (EU) 2024/2847 requires importers to verify that the manufacturer has drawn up Annex VII technical documentation before placing any product on the EU market (Article 19.2). Your importers' suppliers — factories across Asia, software companies, hardware manufacturers — almost never have it. CRACheck Professional Pack: 70 licenses, €1,199 one-time. 8 structured PDF documents per product. Generated in your browser in 20 minutes.
€1,199 · One-time · 70 dossiers · 8 PDFs each · Your data never leaves your browser
Your importers need CRA documentation from manufacturers who have never heard of Annex VII. Without it, the products cannot legally enter the EU market under Article 19. The question is whether you can produce it at scale — or whether you lose the client to a firm that can.
CRACheck Professional Pack is built for trade compliance and import advisory professionals who manage CRA documentation across dozens of importers and their manufacturers simultaneously.
Three inputs. Four answers. No signup required.
Every license generates a complete Annex VII technical documentation package. Each document cites the specific article of Regulation (EU) 2024/2847 it complies with.
Default / Important Class I / Important Class II / Critical. Annex III + Annex IV analysis.
Complete technical file structure. Product description, design, development, cybersecurity risk assessment methodology.
Systematic assessment against the 13 essential requirements of Annex I Part I. Article 13.2.
8 requirements of Annex I Part II. Coordinated vulnerability disclosure policy, SBOM reference. Article 13.6.
Per Annex V. Manufacturer identification, product identification, conformity assessment. Article 28.
Per Annex VI. Short-form declaration with URL reference. Article 13.20.
Printable label with CE marking, support period end date, manufacturer contact. Article 30.
Pre-structured template for reporting vulnerabilities to CSIRT/ENISA within 24 hours. Article 14.
See before you buy — Download sample dossier (PDF, fictional company) — Real structure, real articles, real format. Fictional data.
Many non-EU manufacturers provide a CE certificate covering the Radio Equipment Directive or Low Voltage Directive. Under Regulation (EU) 2024/2847, market surveillance can request the full Annex VII cybersecurity documentation package — risk assessment, vulnerability handling, SBOM reference, Declaration of Conformity specific to the CRA. An existing CE certificate from another directive does not cover Article 19.2 requirements.
Most non-EU manufacturers of connected products — consumer electronics, IoT devices, industrial sensors — do not have the regulatory knowledge to produce Annex VII documentation independently. Waiting for them to deliver it means the product sits without documentation, and the importer bears the exposure under Article 19. The trade compliance firm that provides the structure moves the project forward.
Annex VII documentation is a structured compliance output that the importer needs to place the product legally on the EU market. Producing it is a professional service with measurable value — the importer cannot import without it. Absorbing the cost without billing it erodes margins. The firm that positions CRA documentation as a service line scales revenue alongside regulation.
8 structured PDF documents per product. Cybersecurity risk assessment, vulnerability handling, Declaration of Conformity, CE marking guidance, notification template. Generated from the manufacturer's product data in 20 minutes. Article-by-article traceability to Regulation (EU) 2024/2847.
Firmware hardening, secure boot configuration, vulnerability scanning, penetration testing, SBOM generation from source code. These are implementation responsibilities that belong to the manufacturer. CRACheck documents the cybersecurity posture — it does not create it.
CRACheck structures and documents. The trade compliance professional advises and coordinates between importers and manufacturers. The two layers complement each other.
These are the consequences under Article 64 of Regulation (EU) 2024/2847. As the trade compliance advisor, this is the argument to present when an importer asks why CRA documentation is necessary before import.
Article 64.2 of Regulation (EU) 2024/2847. Whichever is higher. Applies to manufacturers and, by extension, to importers who place non-compliant products on the market (Article 19.1).
Article 64.3. Covers non-compliance with Article 19 (importer obligations), including failure to verify that the manufacturer has drawn up technical documentation before placing the product on the market.
Article 54. Market surveillance authorities can require withdrawal, recall, or prohibition of making the product available if documentation is insufficient.
The importer faces these consequences. The trade compliance firm offers the documentation that prevents them — and bills it as a professional service.
| Option | Cost for 70 products | Total time | Output quality |
|---|---|---|---|
| Ask manufacturers to self-produce | No direct cost | Months of follow-up | Inconsistent, often incomplete |
| Outsource to cybersecurity consultant | €105,000–€210,000 | Depends on provider | High, but cost-prohibitive at scale |
| Enterprise SaaS platform | €8,000–€20,000/year | 2-4 weeks setup | High, requires integration |
| CRACheck Professional Pack | €1,199 (one-time) | ~23 hours total | Structured, Annex VII, article-by-article |
CRACheck generates a structured documentation package according to Annex VII of Regulation (EU) 2024/2847 from the information that the user enters. The truthfulness, accuracy and completeness of that information is the responsibility of the manufacturer — or of the professional entering data on their behalf.
We guarantee that the document structure follows Annex VII of Regulation (EU) 2024/2847 and that the legal references cited are correct as of the latest verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case, nor by a commercial buyer in a procurement process.
CRACheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.
70 licenses. 8 PDF documents per product. Annex VII structure. Browser-side. One payment.