Art. 17 of Directive 2014/53/EU defines three conformity assessment routes for the cybersecurity requirements of Art. 3(3). If you fully apply the harmonised standards EN 18031-1, -2 and -3 (where applicable), Art. 17(3)(a) allows self-declaration via Module A (Annex II) — no Notified Body needed. If you partially apply or do not apply them, Art. 17(4) requires Module B+C (Annex III — EU-type examination) or Module H (Annex IV — full quality assurance) with Notified Body involvement. In BOTH cases, Art. 21 requires the manufacturer to prepare technical documentation under Annex V BEFORE any conformity route can be followed. REDCheck generates this prerequisite documentation. 30 minutes. €99 per product.
€99 one-time payment · 5 PDF documents in ZIP · 30 minutes · 100% in your browser
The choice between Module A and a Notified Body is not about preference — it is determined by Art. 17 based on how you apply the harmonised standards.
The flowchart is embedded in Art. 17. REDCheck does not choose the route for you — it generates the documentation that both routes require as input.
The opposite. Module A (Annex II) paragraph 2 states: 'The manufacturer shall establish the technical documentation in accordance with Article 21.' Module A is self-declaration, NOT self-exemption. The difference is who reviews: in Module A, you self-assess. In Module B+C, a Notified Body examines. But the documentation requirement is identical.
'Mostly' is not 'fully.' Art. 17(3)(a) requires the manufacturer to have 'applied harmonised standards the references of which have been published in the OJEU.' Partial application triggers Art. 17(4), which requires Notified Body involvement. There is no middle ground. One unmet requirement moves you from Module A to Module B+C or H.
A Notified Body EXAMINES your documentation — it does not PRODUCE it. Art. 34(1): Notified Bodies carry out conformity assessments 'in accordance with the conformity assessment procedures provided for in Annexes III and IV.' The manufacturer must submit complete technical documentation for examination (Annex III, Module B, paragraph 3(c)). If your documentation is incomplete, the Notified Body returns the file. REDCheck generates the documentation you submit.
5 PDF documents generated from your product data. Each cites the exact article of Directive 2014/53/EU that it covers.
Art. 1, Del. Reg. (EU) 2022/30 + Art. 3(3), Dir. 2014/53/EU.
Art. 21 + Annex V. Requirement-by-requirement documentation.
Arts. 3(3)(d) and (e). Structured risk table.
Art. 18 + Annex VI.
Art. 10(9) + Annex VII.
Look before you buy — Download sample dossier (PDF, fictitious product) — Real structure, real articles, real format. Fictitious data.
Generated from your data, in your browser. No product data leaves your computer.
5 PDF documents. 30 min. €99 per product. Maps your EN 18031 assessment to the Annex V structure. This is what Art. 21 requires BEFORE your product can bear CE marking — regardless of conformity route.
If you fully apply EN 18031, Art. 16 grants presumption of conformity → Module A self-declaration (Annex II) without Notified Body. If partially applied or not applied: Art. 17(4) requires Module B+C (Annex III) or Module H (Annex IV) with Notified Body. REDCheck generates the Layer 1 documentation that is a prerequisite for EITHER route.
We do not assess your product. We do not interpret EN 18031. We structure the documentation that Art. 21 requires based on YOUR assessment of YOUR product.
Art. 46 of Directive 2014/53/EU requires Member States to establish penalties.
Art. 40 of Directive 2014/53/EU. Market surveillance can require withdrawal across all 27 Member States.
Administrative fines under §19. Up to 1 year imprisonment under §20.
Art. 21(4): if technical documentation is insufficient, the authority can require testing by an acceptable body AT THE MANUFACTURER'S EXPENSE. A weak Module A self-declaration with incomplete documentation invites scrutiny.
| Alternative | Cost | What you get |
|---|---|---|
| Notified Body (full service) | €5,000–20,000 per model | Assessment + documentation + certificate. Only needed if EN 18031 not fully applied. |
| EU cybersecurity consultancy | €3,000–15,000 per model | Custom documentation. May or may not follow Annex V structure. |
| Draft documentation internally | €0 (your time) | No template. Annex V has 9 required elements. Risk of incomplete submission. |
| REDCheck | €99 | Annex V documentation for Module A or input to Notified Body. 30 min. |
Professional Pack: €999 for 70 generations.
Request volume pricingREDCheck generates a document structured under Art. 21 and Annex V of Directive 2014/53/EU based on the information you enter. The truthfulness, accuracy and completeness of that information is your responsibility as manufacturer of the radio equipment.
We guarantee that the document structure follows Art. 21 and Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case, nor by a commercial buyer in a procurement process.
REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.
Five PDF documents. Art. 21 and Annex V fully structured. Directive 2014/53/EU. Your product data never leaves your computer.