Directive 2014/53/EU · Del. Reg. 2022/30Generate my documentation — €99
ACTIVE — Enforcement tracker · Deadline dashboard · Transposition status — Updated weekly from EUR-Lex, Safety Gate, OEIL & 12 official sourcesView regulatory intelligence →

You manufacture WiFi access points for enterprise deployments. Your product is the gateway between devices and the internet. Art. 3(3)(d) of Directive 2014/53/EU requires cybersecurity documentation for every access point model placed on the EU market. No exception for enterprise-grade equipment.

An access point is, by definition, internet-connected radio equipment. Art. 1(1) of Delegated Regulation (EU) 2022/30 applies Art. 3(3)(d) to every such device. Enterprise access points processing user credentials or traffic data also trigger Art. 3(3)(e). Your existing CE marking does not cover these cybersecurity requirements. REDCheck generates 5 PDF documents per model. 30 minutes. €99 per model.

Generate my RED documentation — €99Free: does my product need RED cybersecurity documentation?

€99 one-time payment · 5 PDF documents in ZIP · 30 minutes · 100% in your browser

Directive 2014/53/EU · Art. 3(3)(d)(e)(f) · Art. 21 + Annex V · Art. 18 + Annex VI · Art. 10(9) + Annex VII · Delegated Reg. (EU) 2022/30 · EN 18031-1, -2, -3

The numbers

Art. 3(3)(d)
Network protection: applies to every access point. Access points are, by definition, the device connecting other equipment to the network
EN 18031-1
Harmonised standard: access control, authentication, secure boot, firmware updates, vulnerability management, event logging
€99
Per access point model. Enterprise AP, consumer AP, outdoor AP — same price, same documentation

What REDCheck does with your product data

You enter your product specifications. REDCheck structures the documentation requirement by requirement.

1
Company details
Legal name, role, country, EU contact.
2
Product classification
Determines applicable requirements.
3
Cybersecurity assessment
EN 18031 mapped requirements.
4
Risk assessment
Structured risk table.
5
EU Declaration of Conformity
Art. 18 + Annex VI.
6
Download ZIP
5 PDF documents. Retain 10 years.

Common mistakes

❌
COMMON ERROR

"Enterprise access points are deployed in managed networks — cybersecurity is the network admin's problem"

Art. 10(1): the manufacturer ensures compliance at the design and manufacturing stage. The cybersecurity requirements apply to the PRODUCT, not to the deployment.

❌
COMMON ERROR

"We comply with Wi-Fi Alliance security standards"

Wi-Fi Alliance certifications (WPA3) cover wireless security protocols. EN 18031-1 covers a broader set: access control, secure boot, firmware integrity, secure updates, vulnerability management. Wi-Fi Alliance is useful evidence but does not cover all EN 18031-1 requirements.

❌
COMMON ERROR

"Our access point firmware is custom — EN 18031 doesn't apply to custom implementations"

EN 18031 applies to the PRODUCT regardless of the firmware implementation. Custom firmware must still implement the security requirements.

What's in the ZIP

5 PDF documents per product model.

1

Product Classification

Art. 1, Del. Reg. (EU) 2022/30 + Art. 3(3), Dir. 2014/53/EU.

2

Cybersecurity Technical Documentation

Art. 21 + Annex V.

3

Risk Assessment

Arts. 3(3)(d) and (e).

4

EU Declaration of Conformity

Art. 18 + Annex VI.

5

Simplified Declaration + Label

Art. 10(9) + Annex VII.

Look before you buy — Download sample dossier (PDF, fictitious product)

Generated from your data, in your browser. No product data leaves your computer.

What you pay

🧾 CYBERSECURITY LAB — PER AP MODEL
€8,000–€15,000
3–6 months. Full third-party assessment.
✓ REDCHECK
€99
5 documents. 30 minutes. Self-declaration if EN 18031 fully applied.

Technical documentation and third-party testing: two layers

● LAYER 1

Cybersecurity technical documentation (Annex V)

5 documents. 30 min. €99. Art. 21 requirement.

∅ LAYER 2

Conformity assessment by a Notified Body

If you fully apply EN 18031, self-declare. Otherwise Art. 17(4) requires third-party involvement.

We do not sell testing. We do not sell consulting. We sell the tool that structures your cybersecurity documentation.

What happens without cybersecurity documentation

Art. 46 of Directive 2014/53/EU requires effective, proportionate and dissuasive penalties.

🇪🇺
Access points: network infrastructure
Priority enforcement

Market surveillance treats network infrastructure products as priority due to systemic impact.

🇩🇪
Germany — BNetzA
€3,000–€30,000

The BNetzA actively enforces compliance for networking equipment.

📉
Enterprise procurement
Disqualification

EU enterprise clients are adding Delegated Reg. 2022/30 compliance as a procurement requirement.

Alternatives

AlternativeCostWhat you get
Full cybersecurity lab assessment€8,000–15,000/model3–6 months. Third-party certificate.
Enterprise SaaS compliance platform€4,000+/yearSubscription. Annual renewal.
Document via internal security team€0 (staff time)Not in Annex V format.
REDCheck€995 documents, 30 min

Manufacturing multiple access point models?

Indoor, outdoor, high-density, industrial — Professional Pack: €999 for 70 generations.

Request volume pricing
Reply within one business day.

What REDCheck guarantees and what it does not

REDCheck generates a document structured under Art. 21 and Annex V of Directive 2014/53/EU based on the information you enter. The truthfulness, accuracy and completeness of that information is your responsibility as manufacturer of the radio equipment.

We guarantee that the document structure follows Art. 21 and Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date.

REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.

Frequently asked questions

Our AP supports multiple WiFi standards (WiFi 5, 6, 6E). Is one documentation set enough per model?
One license covers one product MODEL. If WiFi 5 and WiFi 6 are different hardware models, each needs separate documentation. If a single hardware model supports multiple standards via firmware, one documentation set covers all configurations.
Does Art. 3(3)(e) apply to our enterprise AP?
If your access point processes personal data — user credentials, MAC addresses linked to identifiable persons — Art. 3(3)(e) applies. Enterprise APs with user authentication (802.1X, RADIUS) typically process personal data.
Can I use our SOC 2 Type II report as evidence for EN 18031?
SOC 2 covers organizational security controls. EN 18031 covers product-level cybersecurity requirements. There is overlap but they are different frameworks. Your SOC 2 evidence can inform the EN 18031 assessment.
Is it a subscription?
No. One-time payment. Each license includes a 30-day editing window and up to 10 regenerations. The 5 PDF documents you download are yours permanently.
Can I request a refund?
Under Art. 16(m) of Directive (EU) 2011/83 on consumer rights, by activating the license you give express consent to the immediate generation of the digital content, waiving the 14-day right of withdrawal. Refunds are accepted only for reproducible technical failures reported to hello@solidwaretools.com within 14 days of purchase.
What if the regulation changes?
If Directive 2014/53/EU, Delegated Regulation (EU) 2022/30 or the EN 18031 standards change during your license validity period, you can regenerate the documents with the updated version of the generator at no additional cost.

Official legal sources

⚠️ Important notice: REDCheck is a documentary self-assessment tool, not legal advice or a third-party audit. The document is generated from the data you enter. The accuracy of the data is your responsibility under Art. 10(1) of Directive 2014/53/EU. REDCheck does not replace a conformity assessment by a Notified Body where required under Art. 17(4) of the Directive.

Your access point connects devices to the network. Document its cybersecurity in 30 minutes. €99 per model.

Five PDF documents. Art. 21 and Annex V. Directive 2014/53/EU. Your product data never leaves your computer.

€99 per product
One-time payment · No subscription · 30 minutes · 10 regenerations · 30-day editing window · Professional Pack: €999
Generate my RED documentation — €99

Related landings

📡 Routers

Router manufacturer: Annex V documentation

🇹🇼 Taiwan

Taiwan manufacturer: Module A vs Notified Body

🏭 Industrial

Industrial IoT gateway: RED documentation

✓ Last regulatory check: 6 May 2026 · No substantive changes detected · View history