Generate 5 PDF documents: product classification, cybersecurity technical documentation, risk assessment under Arts. 3(3)(d), (e) and (f), EU declaration of conformity and simplified declaration with printable label. 30 minutes. €99 per product. No subscription.
Generate my RED documentation → Free test: does your product need RED cybersecurity documentation?Each document covers a specific obligation under Directive 2014/53/EU and Delegated Regulation (EU) 2022/30. Each one cites the exact articles that underpin its content.
Under Art. 1 of Delegated Reg. (EU) 2022/30 and Arts. 1–2 of Directive 2014/53/EU. Determines whether your radio equipment is subject to Arts. 3(3)(d), (e) and/or (f), identifies the exemptions under Art. 2 of the Delegated Reg. and establishes the applicable conformity procedure under Art. 17.
Under Art. 21 and Annex V of Directive 2014/53/EU. Covers the applicable cybersecurity requirements: access control, authentication, password management, secure communications, software integrity, secure updates, vulnerability management, event logging and personal data protection.
Mapping of the requirements under Arts. 3(3)(d), (e) and (f) activated by Delegated Reg. (EU) 2022/30. Assessment of implementation status against the categories of EN 18031-1 (network), EN 18031-2 (data) and EN 18031-3 (fraud) as applicable.
Under Art. 18 and Annex VI of Directive 2014/53/EU. Document signed by the manufacturer declaring that the radio equipment meets the essential requirements of Art. 3, including the cybersecurity requirements of Arts. 3(3)(d), (e) and (f). Basis for CE marking (Arts. 19–20).
Under Art. 10(9) and Annex VII of Directive 2014/53/EU. Short-form declaration that physically accompanies the product and includes the URL where the buyer can access the full declaration. Includes a printable label with QR code.
Delegated Regulation (EU) 2022/30 activates three essential cybersecurity requirements under Directive 2014/53/EU for specific categories of radio equipment. REDCheck generates the technical documentation for all of them.
REDCheck generates cybersecurity technical documentation for any radio equipment subject to Arts. 3(3)(d), (e) and/or (f). Applies to manufacturers (Art. 10), importers (Art. 12) and distributors (Art. 13) under Directive 2014/53/EU.
These categories fall outside the scope of Delegated Reg. (EU) 2022/30 because they are already regulated by other EU sectoral legislation covering cybersecurity aspects.
These radio equipment types fall within the scope of the Delegated Reg. but their conformity procedure requires involvement of a Notified Body under Art. 17(4) of the Directive. REDCheck generates the base documentation; the third-party assessment is a separate step.
Not sure about your case? Take the free test first. If REDCheck is not the right tool for your product, we tell you before you buy.
Manufacturers (Art. 10), importers (Art. 12) and distributors (Art. 13) of internet-connected radio equipment sold in the EU.
Art. 46 of Directive 2014/53/EU requires Member States to establish penalties that are “effective, proportionate and dissuasive,” including criminal penalties for serious infringements. Market surveillance authorities can order withdrawal, prohibition and recall.
Market surveillance authorities can require the economic operator to withdraw the radio equipment from the market, prohibit its sale or order a recall if the product fails to meet the essential requirements of Art. 3 — including the cybersecurity requirements activated by Delegated Reg. (EU) 2022/30. Arts. 40(1), 40(4) and 43 of Directive 2014/53/EU. Applies in any EU Member State.
Each Member State sets its own penalties under Art. 46. Example: Germany — the Produktsicherheitsgesetz provides for fines of €3,000 to €30,000 (§ 19) and up to 1 year of imprisonment for serious offenses (§ 20). Art. 46 explicitly requires that penalties “may include criminal penalties for serious infringements.” The exact amount depends on the Member State and the severity of the breach.
Amazon, eBay and other European marketplaces require conformity documentation as a condition to maintain an active listing. Without an EU declaration of conformity covering Arts. 3(3)(d), (e) and (f), the product may be suspended or removed from the platform. The most immediate practical consequence for consumer electronics sellers: revenue loss from listing suspension, with no right to compensation.
No fine print. Read this before buying so you know exactly what you get for €99.
Compare the four models available in the market to document radio equipment under Delegated Regulation (EU) 2022/30.
| Criteria | Notified Body / Lab | Enterprise SaaS | Free resources | REDCheck |
|---|---|---|---|---|
| Price | €5,000 – 20,000 per product | €4,000/year (subscription) | €0 (fragmented) | €99 per product (one-time payment) |
| Turnaround time | 2 – 6 months (queue wait) | 3 weeks (with onboarding) | Variable (you assemble it all) | 30 minutes |
| Documents generated | Variable depending on scope | Variable depending on plan | Cheat sheets, no formal documentation | 5 PDF documents in ZIP |
| Article coverage | Customized | Full EN 18031 | Partial | Arts. 3(3)(d)(e)(f) · Art. 17 · Art. 18 + Anexo VI · Art. 21 + Anexo V · Art. 10.9 + Anexo VII |
| Chip independence | Yes | Yes | Some ESP32 only | Any radio chip/platform |
| Data in browser | Your data goes to the lab | Your data goes to their servers | Local (manual) | 100% browser-side · Zero data to server |
| Business model | Per-project engagement | Annual recurring subscription | No commitment | One-time payment with no renewal or subscription |
Price ranges based on published rates from Notified Bodies (TÜV, SGS, Intertek, Bureau Veritas) and IoT cybersecurity SaaS platforms. No specific brands cited.
It's not that it's cheaper. The model is different.
Directive 2014/53/EU establishes that technical documentation is the manufacturer's responsibility (Art. 10(1), 10(3)). REDCheck inverts the consulting model: you, as the manufacturer, assess your own product requirement by requirement, guided by the generator's questions that map to the EN 18031 categories. REDCheck structures your assessment into 5 professional documents compliant with Annex V.
REDCheck is JavaScript running on your machine. There is no server processing your product data, no database, no storage. The generation of all 5 PDFs happens locally and you download the ZIP directly. You can disconnect from the internet after the page loads and the generator keeps working. GDPR-native by design.
The 5 documents you download do not depend on any active subscription. SaaS compliance platforms force you to renew to maintain access to your reports. Here, the ZIP is a portable package that outlasts your commercial relationship with us. The manufacturer must retain technical documentation for 10 years (Art. 10(4)): your PDFs comply without paying another cent.
Without cybersecurity technical documentation under Art. 21, your radio equipment cannot bear CE marking or be legally marketed in the EU from August 1, 2025. One license per product. One-time payment. No subscription.
Three steps. Same flow for every product.
Choose an individual license (€99) or the Professional Pack (€999). You receive your license key by email. Access the generator at solidwaretools.com/redcheck/generator-en and enter your key.
Enter your company details, your radio equipment specifications and the status of your cybersecurity measures. The form guides you requirement by requirement following the EN 18031 categories. Includes examples in every field to help you along.
Generate and download the 5 PDF documents in a ZIP file. Add them to your technical file alongside test reports and the user manual. Retain the file for 10 years (Art. 10(4)).
Important notice on product scope. REDCheck generates cybersecurity technical documentation under Art. 21 and Annex V of Directive 2014/53/EU. It is not a third-party audit. It does not replace a conformity assessment by a Notified Body where required under Art. 17(4) of the Directive.
For manufacturers fully applying the EN 18031 standards, self-declaration (Module A, Annex II) is the standard procedure. For manufacturers partially applying or not applying the harmonised standards, Module B+C (Annex III) or Module H (Annex IV) are mandatory. In both cases, REDCheck generates the technical documentation that is a prerequisite for any conformity procedure.
Temporal scope: REDCheck v1.0 covers the cybersecurity requirements of Arts. 3(3)(d), (e) and (f) activated by Delegated Reg. (EU) 2022/30, in effect from 1 August 2025 to 11 December 2027. From 11 December 2027, these requirements will be absorbed by the Cyber Resilience Act — Reg. (EU) 2024/2847. We offer CRACheck for that phase.
Commercial honesty about product scope and how refunds work for downloadable digital content.
REDCheck generates a set of structured documents under Art. 21 and Annex V of Directive 2014/53/EU, based on the information that you, as the manufacturer of the radio equipment, enter. The accuracy, completeness and truthfulness of that information is your responsibility as manufacturer under Art. 10(1).
We guarantee that the document structure follows Annex V and Annex VI, and that the legal references cited (articles, annexes, obligations) are correct as of the last verification date. We do not guarantee that a specific dossier will be accepted by a market surveillance authority in a particular case or by a Notified Body.
REDCheck is not legal advice. For specific situations (open inspection, initiated penalty procedure, third-party conformity assessment), consult a lawyer or a consultancy specializing in IoT cybersecurity.
REDCheck is digital content delivered via download of the ZIP file containing the 5 PDF documents generated in your browser. Under Art. 16(m) of Directive (EU) 2011/83 on consumer rights, the right of withdrawal does not apply to digital content whose execution has begun with the express consent of the buyer. The ZIP generation constitutes the act of delivery.
Refund for technical failure: if the software fails (generator error, PDF that does not download, reproducible bug), we issue a full refund upon receipt of a screenshot of the error sent to hello@solidwaretools.com within 14 days of purchase.
No refund for change of mind once the license has been activated and the ZIP generated, in accordance with Art. 16(m) cited above.
5 PDF documents: product classification, cybersecurity technical documentation, risk assessment, EU declaration of conformity and simplified declaration with printable label. All in a ZIP, straight from your browser.
One-time payment · No subscription · 30 minutes · 10 regenerations · 30-day editing window · Professional Pack: €999
Our team reviews EUR-Lex, BOE, JORF, Bundesgesetzblatt and EU institutional platforms every Monday and Tuesday. Changes are implemented on Wednesdays. We publish a biweekly report with the most relevant updates.
Last scan: 27 April 2026 · Next report: 11 May 2026
View regulatory monitoring diary →