Directive 2014/53/EU · Del. Reg. 2022/30Generate my documentation — €99
ACTIVE — Enforcement tracker · Deadline dashboard · Transposition status — Updated weekly from EUR-Lex, Safety Gate, OEIL & 12 official sourcesView regulatory intelligence →

You sell electronics under your own brand in the EU. Under Art. 14 of Directive 2014/53/EU, that makes you the manufacturer — and cybersecurity documentation is now your legal obligation.

You buy smart plugs, earbuds, cameras or speakers from a factory in Shenzhen or Dongguan. You put your brand on them. You sell on Amazon DE, FR, IT or your own Shopify store. You are not the importer. You are not the distributor. Under Art. 14 of Directive 2014/53/EU, you are the MANUFACTURER — because you place the product on the market under your own name or trade mark. That means Art. 10 applies to you in full: you must ensure compliance, draw up technical documentation and sign the EU declaration of conformity. From 1 August 2025, that includes cybersecurity under Delegated Regulation (EU) 2022/30. A consultancy quotes €5,000–15,000 per model and months of wait. REDCheck generates the 5 PDF documents in 30 minutes. €99 per product. 100% in your browser.

Generate my RED documentation — €99Free: does my product need RED cybersecurity documentation?

€99 one-time payment · 5 PDF documents in ZIP · 30 minutes · 100% in your browser

Directive 2014/53/EU · Art. 3(3)(d)(e)(f) · Art. 21 + Annex V · Art. 18 + Annex VI · Art. 10(9) + Annex VII · Delegated Reg. (EU) 2022/30 · EN 18031-1, -2, -3

Private label and EU manufacturer status: the numbers

Art. 14 of Directive 2014/53/EU converts any seller who places radio equipment under their own brand into a manufacturer. This is not optional — it is how the Directive defines roles in the supply chain.

Art. 14
The article that makes a private label seller a manufacturer under EU law — with ALL obligations of Art. 10
5 documents
Product classification, technical documentation, risk assessment, EU declaration of conformity, simplified declaration + label
€5,000–15,000
Typical cost at a consultancy per product model. REDCheck: €99

What REDCheck does with your product data

You enter your product specifications. REDCheck structures the cybersecurity documentation requirement by requirement, following the EN 18031 categories.

1
Company details
Legal name, role under Directive 2014/53/EU. If you sell under your own brand, you are the manufacturer under Art. 14. Country of establishment, EU contact.
2
Product classification
Determines which essential requirements apply: Art. 3(3)(d) (network protection) for all internet-connected equipment. Art. 3(3)(e) (personal data) if your product processes personal data via its companion app.
3
Cybersecurity assessment
Requirement-by-requirement review mapped to EN 18031-1 (network) and EN 18031-2 (personal data) categories: access control, authentication, secure communications, software updates, vulnerability management.
4
Risk assessment
Assessment of implementation status for each applicable requirement of Arts. 3(3)(d) and (e). Maps your answers to a structured risk table.
5
EU Declaration of Conformity
Formal declaration under Art. 18 and Annex VI. Signed by the manufacturer. This is the document marketplaces require to reinstate your listing.
6
Download ZIP
5 PDF documents generated in your browser. Upload to your marketplace compliance portal. Retain for 10 years (Art. 10(4)).

Three mistakes private label sellers make about RED cybersecurity

COMMON ERROR

"The factory has CE marking — I'm covered"

The factory's CE marking covers THEIR products under THEIR name. When you put YOUR brand on the product, you become a new manufacturer under Art. 14. The factory's EU declaration of conformity does not cover your branded product. You need your OWN declaration under Art. 18, signed by you, referencing YOUR company and YOUR product designation.

COMMON ERROR

"I'm just a reseller, not a manufacturer"

EU law distinguishes between distributors (Art. 13) and manufacturers (Art. 10). A distributor sells products under the ORIGINAL manufacturer's brand. If you relabel, rebrand or sell under your own trade mark, Art. 14 reclassifies you as a manufacturer. The factory is your contract manufacturer. You are the legal manufacturer.

COMMON ERROR

"I'll ask my factory to add my brand to their CE certificate"

The EU declaration of conformity (Art. 18, Annex VI) identifies a specific manufacturer by legal name and address. A factory in Shenzhen cannot sign a declaration that names YOUR company as the manufacturer — that is YOUR responsibility under Art. 10(3). The factory can provide test reports, but the declaration must be yours.

What's in the ZIP

5 PDF documents generated from your product data. Each cites the exact article of Directive 2014/53/EU that it covers.

1

Product Classification

Art. 1, Del. Reg. (EU) 2022/30 + Art. 3(3), Dir. 2014/53/EU.

2

Cybersecurity Technical Documentation

Art. 21 + Annex V. Requirement-by-requirement documentation.

3

Risk Assessment

Arts. 3(3)(d) and (e). Structured risk table.

4

EU Declaration of Conformity

Art. 18 + Annex VI.

5

Simplified Declaration + Label

Art. 10(9) + Annex VII.

Look before you buy — Download sample dossier (PDF, fictitious product) — Real structure, real articles, real format. Fictitious data.

Generated from your data, in your browser. No product data leaves your computer.

What you pay

🧾 CONSULTANCY
€5,000–15,000
Per product model. 3–6 months. 6 branded products = €30,000–90,000.
✓ REDCHECK
€99
5 documents. 30 minutes per product. 6 branded products = €594.

Technical documentation and third-party testing: two layers

● LAYER 1

Cybersecurity technical documentation (Annex V)

5 PDF documents. 30 min. €99 per product. The documentation that Art. 21 requires BEFORE your product can bear CE marking. This is what Amazon is asking for.

∅ LAYER 2

Conformity assessment by a Notified Body

If you fully apply EN 18031, you can self-declare via Module A (Annex II) without a Notified Body. If you partially apply or don't apply the harmonised standards, Art. 17(4) requires third-party involvement. REDCheck does not replace a Notified Body — it generates the documentation that is a prerequisite for any conformity route.

We do not sell testing. We do not sell consulting. We sell the tool that structures your cybersecurity documentation under Art. 21 and Annex V.

What happens without cybersecurity documentation

Art. 46 of Directive 2014/53/EU requires Member States to establish penalties that are effective, proportionate and dissuasive.

🛒
Amazon and marketplace listing removal
Revenue loss

Amazon requires the EU declaration of conformity from the MANUFACTURER. Under Art. 14, that is you — the brand owner. Without it, your ASINs are suspended.

🇪🇺
Market withdrawal and sales prohibition
Immediate

Arts. 40(1), 40(4) and 43 of Directive 2014/53/EU. Applies to any product that does not meet the essential requirements of Art. 3 — including cybersecurity.

⚖️
Personal liability under Art. 14
Full Art. 10 obligations

Art. 14 does not create a lighter version of manufacturer obligations. You assume ALL obligations of Art. 10: compliance (10(1)), technical documentation (10(3)), EU declaration of conformity (10(3)), retention for 10 years (10(4)), corrective measures (10(11)), cooperation with authorities (10(12)).

Alternatives

AlternativeCostWhat you get
EU-based consultancy€5,000–15,000 per modelCustomised report. Weeks of wait.
Ask the factory to handle it€0 (your time)They cannot sign YOUR declaration. Art. 14 makes it YOUR obligation.
Assemble documentation yourself€0 (your time)EN 18031 has 600+ pages across 3 parts. No guidance.
REDCheck€995 documents, 30 min, per product

Selling more than one branded product in the EU?

If you document 10 or more product models, write to us for the Professional Pack: €999 for 70 generations with a single license key. One generation per product model.

Request volume pricing
Reply within one business day.

What REDCheck guarantees and what it does not

REDCheck generates a document structured under Art. 21 and Annex V of Directive 2014/53/EU based on the information you enter. The truthfulness, accuracy and completeness of that information is your responsibility as manufacturer of the radio equipment.

We guarantee that the document structure follows Art. 21 and Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case, nor by a commercial buyer in a procurement process.

REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.

Frequently asked questions — private label seller EU manufacturer obligations

What exactly does Art. 14 say?
Art. 14 of Directive 2014/53/EU: 'An importer or distributor shall be considered a manufacturer for the purposes of this Directive and he shall be subject to the obligations of the manufacturer under Article 10, where he places radio equipment on the market under his name or trade mark or modifies radio equipment already placed on the market in such a way that compliance with this Directive may be affected.' If your brand is on the product, you are the manufacturer.
Can the factory sign the EU declaration of conformity for my branded product?
No. The EU declaration of conformity under Art. 18 and Annex VI identifies the MANUFACTURER — which under Art. 14 is you, the brand owner. The factory is your contract manufacturer. They can provide test reports, component certifications and manufacturing records, but the declaration must bear your legal name, address and signature.
I sell the same product under my brand AND the factory also sells it under their brand. Do we each need separate documentation?
Yes. The technical documentation under Art. 21 is linked to a specific manufacturer and product designation. Your branded version and the factory's branded version are legally two different products with two different manufacturers. Each needs its own documentation package.
What happens when the CRA replaces the RED cybersecurity requirements?
Delegated Regulation (EU) 2022/30 will be repealed with effect from 11 December 2027, when the Cyber Resilience Act — Regulation (EU) 2024/2847 — enters full application. REDCheck covers the window from 1 August 2025 to 11 December 2027. For CRA documentation from that date, SolidwareTools offers CRACheck.
Is it a subscription?
No. One-time payment. Each license includes a 30-day editing window and up to 10 regenerations. The 5 PDF documents you download are yours permanently.
Can I request a refund?
Under Art. 16(m) of Directive (EU) 2011/83 on consumer rights, by activating the license you give express consent to the immediate generation of the digital content, waiving the 14-day right of withdrawal. Refunds are accepted only for reproducible technical failures reported to hello@solidwaretools.com within 14 days of purchase.
What if the regulation changes?
If Directive 2014/53/EU, Delegated Regulation (EU) 2022/30 or the EN 18031 standards change during your license validity period, you can regenerate the documents with the updated version of the generator at no additional cost.
⚠️ Important notice: REDCheck is a documentary self-assessment tool, not legal advice or a third-party audit. The document is generated from the data you enter. The accuracy of the data is your responsibility under Art. 10(1) of Directive 2014/53/EU. REDCheck does not replace a conformity assessment by a Notified Body where required under Art. 17(4) of the Directive.

Your brand, your product, your legal obligation. Generate the cybersecurity documentation in 30 minutes.

Five PDF documents. Art. 21 and Annex V fully structured. Directive 2014/53/EU. Your product data never leaves your computer. The ZIP you download is yours permanently.

€99 per product
One-time payment · No subscription · 30 minutes · 10 regenerations · 30-day editing window · Professional Pack: €999
Generate my RED documentation — €99
✓ Last regulatory check: 6 May 2026 · No substantive changes detected · View history