You build IoT devices in the US — smart home hubs, sensors, wearables, gateways. Europe is part of your growth plan: Amazon DE, FR, IT or direct sales through EU distributors. Your EU importer or Amazon itself is now requesting cybersecurity documentation under Delegated Regulation (EU) 2022/30. There is no US equivalent. FCC does not cover it. An EU consultancy quotes $15,000–20,000 per product and 3–6 months. Your board expects Europe to deliver revenue this quarter, not compliance invoices. REDCheck generates the 5 PDF documents. 30 minutes. €99 per product. 100% in your browser.
€99 one-time payment · 5 PDF documents in ZIP · 30 minutes · 100% in your browser
The EU Radio Equipment Directive applies to any connected device with radio capabilities entering the European market. US IoT companies selling in Europe face a regulatory framework that has no direct equivalent in the US.
You enter your product specifications. REDCheck structures the cybersecurity documentation requirement by requirement, following the EN 18031 categories.
NIST Cybersecurity Framework and EU Directive 2014/53/EU are separate systems with different legal force. NIST is voluntary guidance. The cybersecurity requirements under Art. 3(3)(d) and (e) are mandatory obligations backed by penalties under Art. 46. Following NIST may help you answer the EN 18031 requirements — but it does not replace the EU documentation.
Delegated Regulation (EU) 2022/30 applies from 1 August 2025. Products already on the EU market without cybersecurity documentation are non-compliant from that date. Market surveillance authorities and marketplace platforms can act immediately. 'Later' means listing removal, market withdrawal and revenue loss.
If you place the product under YOUR brand, you are the manufacturer under Art. 10. The obligation to produce technical documentation is non-delegable (Art. 10(3), Art. 11(1)). An importer (Art. 12) must verify your documentation — they cannot create it for you.
5 PDF documents per product model. Each cites the exact article of Directive 2014/53/EU that it covers.
Art. 1, Del. Reg. (EU) 2022/30 + Art. 3(3), Dir. 2014/53/EU.
Art. 21 + Annex V.
Arts. 3(3)(d) and (e).
Art. 18 + Annex VI.
Art. 10(9) + Annex VII.
Look before you buy — Download sample dossier (PDF, fictitious product)
Generated from your data, in your browser. No product data leaves your computer.
5 PDF documents. 30 min. €99 per product. The documentation that Art. 21 requires BEFORE your product can bear CE marking.
If you fully apply EN 18031, you can self-declare via Module A (Annex II) without a Notified Body. If you partially apply or don't apply the harmonised standards, Art. 17(4) requires third-party involvement. REDCheck does not replace a Notified Body — it generates the documentation that is a prerequisite for any conformity route.
We do not sell testing. We do not sell consulting. We sell the tool that structures your cybersecurity documentation under Art. 21 and Annex V.
Art. 46 of Directive 2014/53/EU requires Member States to establish penalties that are effective, proportionate and dissuasive, including criminal penalties for serious infringements.
Arts. 40(1), 40(4) and 43 of Directive 2014/53/EU.
Amazon requires conformity documentation. ASINs may be suspended immediately.
If Europe is 15-20% of revenue and growing, losing EU market access is a board-level event.
| Alternative | Cost | What you get |
|---|---|---|
| EU compliance consultancy | $15,000–20,000 per model | 3–6 months. Custom report. |
| Hire in-house EU regulatory specialist | $80,000–120,000/year | If you can find one. 3-month onboarding. |
| Assemble documentation yourself | $0 (your time) | EN 18031 has 600+ pages. Different framework from US. |
| REDCheck | €99 | 5 documents, 30 min, per model |
If you document 10 or more product models, write to us for the Professional Pack: €999 for 70 generations.
Request volume pricingREDCheck generates a document structured under Art. 21 and Annex V of Directive 2014/53/EU based on the information you enter. The truthfulness, accuracy and completeness of that information is your responsibility as manufacturer of the radio equipment.
We guarantee that the document structure follows Art. 21 and Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date.
REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.
Five PDF documents. Art. 21 and Annex V fully structured. Directive 2014/53/EU. Your product data never leaves your computer. The ZIP you download is yours permanently.