Directive 2014/53/EU · Del. Reg. 2022/30Generate my documentation — €99
ACTIVE — Enforcement tracker · Deadline dashboard · Transposition status — Updated weekly from EUR-Lex, Safety Gate, OEIL & 12 official sourcesView regulatory intelligence →

FCC and CE are not equivalent for cybersecurity. FCC Part 15 governs radio frequency emissions. Directive 2014/53/EU now requires cybersecurity technical documentation under Art. 21 — and FCC certification provides zero coverage.

You manufacture radio equipment in the US. You have FCC certification. Your EU importer or Amazon tells you: 'FCC is not CE. You need cybersecurity documentation under the Radio Equipment Directive.' They are correct. FCC Part 15 covers radio frequency interference. Directive 2014/53/EU Art. 3(3)(d) covers network protection, Art. 3(3)(e) covers personal data, Art. 3(3)(f) covers fraud — none of which appear anywhere in FCC regulation. REDCheck generates the 5 PDF documents required under Art. 21 and Annex V. 30 minutes. €99 per product. 100% in your browser.

Generate my RED documentation — €99Free: does my product need RED cybersecurity documentation?

€99 one-time payment · 5 PDF documents in ZIP · 30 minutes · 100% in your browser

Directive 2014/53/EU · Art. 3(3)(d)(e)(f) · Art. 21 + Annex V · Art. 18 + Annex VI · Art. 10(9) + Annex VII · Delegated Reg. (EU) 2022/30 · EN 18031-1, -2, -3

FCC vs CE cybersecurity: the numbers

Two continents, two regulatory frameworks, zero overlap on cybersecurity. FCC certification is a prerequisite for the US market. CE marking with cybersecurity documentation is a prerequisite for the EU market. Neither replaces the other.

0% overlap
FCC Part 15 has zero coverage of EU cybersecurity requirements under Arts. 3(3)(d), (e) and (f)
3 requirements
Art. 3(3)(d) network · Art. 3(3)(e) personal data · Art. 3(3)(f) fraud. None in FCC.
€99
Cost to generate the 5 PDF documents that bridge the FCC-CE cybersecurity gap

What REDCheck does with your product data

You enter your product specifications. REDCheck structures the cybersecurity documentation requirement by requirement, following the EN 18031 categories.

1
Company details
Legal name, role under Directive 2014/53/EU (manufacturer, Art. 10), country of manufacture, EU contact.
2
Product classification
Determines which essential requirements apply: Art. 3(3)(d) (network protection) for all internet-connected equipment. Art. 3(3)(e) (personal data) if your product processes personal data via its app or cloud service.
3
Cybersecurity assessment
Requirement-by-requirement review mapped to EN 18031-1 (network) and EN 18031-2 (personal data) categories: access control, authentication, secure communications, software updates, vulnerability management.
4
Risk assessment
Assessment of implementation status for each applicable requirement of Arts. 3(3)(d) and (e). Maps your answers to a structured risk table.
5
EU Declaration of Conformity
Formal declaration under Art. 18 and Annex VI. Signed by the manufacturer. Basis for CE marking under Arts. 19–20.
6
Download ZIP
5 PDF documents generated in your browser. Add to your technical file alongside test reports and user manual. Retain for 10 years (Art. 10(4)).

Three mistakes about FCC vs CE cybersecurity

COMMON ERROR

"FCC and CE are mutual recognition — one covers the other"

There is no mutual recognition agreement between FCC and CE for cybersecurity. FCC Part 15 addresses radio frequency emissions. Directive 2014/53/EU Art. 3(3)(d), (e) and (f) address network protection, personal data and fraud. Different regulatory objectives, different legal systems. You need both — separately.

COMMON ERROR

"Our CE marking from 2022 already covers cybersecurity"

CE marking obtained before 1 August 2025 covers Art. 3(1)(a) (safety) and Art. 3(1)(b) (EMC). The cybersecurity requirements of Art. 3(3)(d) and (e) were activated by Delegated Regulation (EU) 2022/30 with application from 1 August 2025. They are NEW, ADDITIONAL requirements.

COMMON ERROR

"NIST or SOC 2 compliance covers the EU requirements"

NIST and SOC 2 are US frameworks. NIST is voluntary guidance; SOC 2 is an audit standard. Neither has legal force in the EU. The EN 18031 harmonised standards are the European specifications that give presumption of conformity under Art. 16. Following NIST may inform your answers, but it does not satisfy the EU documentation obligation.

What's in the ZIP

5 PDF documents per product model. Each cites the exact article of Directive 2014/53/EU that it covers.

1

Product Classification

Art. 1, Del. Reg. (EU) 2022/30 + Art. 3(3), Dir. 2014/53/EU.

2

Cybersecurity Technical Documentation

Art. 21 + Annex V.

3

Risk Assessment

Arts. 3(3)(d) and (e).

4

EU Declaration of Conformity

Art. 18 + Annex VI.

5

Simplified Declaration + Label

Art. 10(9) + Annex VII.

Look before you buy — Download sample dossier (PDF, fictitious product)

Generated from your data, in your browser. No product data leaves your computer.

What you pay

🧾 EU CONSULTANCY
$15,000–20,000
Per model. Months. Separate engagement from your FCC lab.
✓ REDCHECK
€99
5 documents. 30 minutes. Covers what FCC does not.

Technical documentation and third-party testing: two layers

● LAYER 1

Cybersecurity technical documentation (Annex V)

5 PDF documents. 30 min. €99 per product. The documentation that Art. 21 requires BEFORE your product can bear CE marking.

∅ LAYER 2

Conformity assessment by a Notified Body

If you fully apply EN 18031, you can self-declare via Module A (Annex II) without a Notified Body. If you partially apply or don't apply the harmonised standards, Art. 17(4) requires third-party involvement. REDCheck does not replace a Notified Body — it generates the documentation that is a prerequisite for any conformity route.

We do not sell testing. We do not sell consulting. We sell the tool that structures your cybersecurity documentation under Art. 21 and Annex V.

What happens without cybersecurity documentation

Art. 46 of Directive 2014/53/EU requires Member States to establish penalties that are effective, proportionate and dissuasive, including criminal penalties for serious infringements.

🇪🇺
Market withdrawal and sales prohibition
Immediate

Arts. 40(1), 40(4) and 43 of Directive 2014/53/EU.

🛒
Amazon EU listing removal
Revenue loss

Amazon requires cybersecurity conformity documentation.

📉
Board and investor impact
Strategic

EU revenue at risk if cybersecurity documentation gap is not addressed.

Alternatives

AlternativeCostWhat you get
EU compliance consultancy$15,000–20,000 per model3–6 months. Separate from FCC.
Ask your FCC lab to add cybersecurityUsually impossibleMost FCC labs do not cover EU cybersecurity.
Assemble documentation yourself$0 (your time)EN 18031 has 600+ pages.
REDCheck€995 documents, 30 min, per model

Selling multiple products across FCC and CE markets?

Professional Pack: €999 for 70 generations. Cover your entire EU portfolio.

Request volume pricing
Reply within one business day.

What REDCheck guarantees and what it does not

REDCheck generates a document structured under Art. 21 and Annex V of Directive 2014/53/EU based on the information you enter. The truthfulness, accuracy and completeness of that information is your responsibility as manufacturer of the radio equipment.

We guarantee that the document structure follows Art. 21 and Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date.

REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.

Frequently asked questions

I already paid for CE testing (EMC + safety). Why do I need more documentation?
CE testing for EMC and safety covers two of the three essential requirements. Cybersecurity under Art. 3(3)(d), (e) and (f) is a THIRD set of requirements, activated from 1 August 2025. Your EMC/safety test reports remain valid. The cybersecurity documentation is additional.
Can my FCC test lab also handle EU cybersecurity documentation?
Only if your lab is also a Notified Body under Directive 2014/53/EU. FCC accreditation and EU notification are separate systems. Most US-based FCC labs are not EU Notified Bodies. REDCheck generates the documentation directly — no lab needed.
What is EN 18031 and how does it relate to FCC?
EN 18031 is the European harmonised standard series for cybersecurity of radio equipment. EN 18031-1 covers network protection, EN 18031-2 covers personal data, EN 18031-3 covers fraud. There is no FCC equivalent. If you fully apply EN 18031, you get presumption of conformity (Art. 16) and can self-declare under Module A.
What happens when the CRA replaces RED?
Delegated Regulation (EU) 2022/30 will be repealed from 11 December 2027. REDCheck covers 1 August 2025 to 11 December 2027.
Is it a subscription?
No. One-time payment. Each license includes a 30-day editing window and up to 10 regenerations. The 5 PDF documents you download are yours permanently.
Can I request a refund?
Under Art. 16(m) of Directive (EU) 2011/83 on consumer rights, by activating the license you give express consent to the immediate generation of the digital content, waiving the 14-day right of withdrawal. Refunds are accepted only for reproducible technical failures reported to hello@solidwaretools.com within 14 days of purchase.
What if the regulation changes?
If Directive 2014/53/EU, Delegated Regulation (EU) 2022/30 or the EN 18031 standards change during your license validity period, you can regenerate the documents with the updated version of the generator at no additional cost.
⚠️ Important notice: REDCheck is a documentary self-assessment tool, not legal advice or a third-party audit. The document is generated from the data you enter. The accuracy of the data is your responsibility under Art. 10(1) of Directive 2014/53/EU. REDCheck does not replace a conformity assessment by a Notified Body where required under Art. 17(4) of the Directive.

FCC does not cover EU cybersecurity. Generate the documentation that does.

Five PDF documents. Art. 21 and Annex V fully structured. Directive 2014/53/EU. Your product data never leaves your computer. The ZIP you download is yours permanently.

€99 per product
One-time payment · No subscription · 30 minutes · 10 regenerations · 30-day editing window · Professional Pack: €999
Generate my RED documentation — €99
✓ Last regulatory check: 6 May 2026 · No substantive changes detected · View history