The original application date was 1 August 2024. Delegated Regulation (EU) 2023/2444 postponed it by one year to 1 August 2025. There will be no further postponement. From this date, every internet-connected radio equipment placed on the EU market must comply with the cybersecurity requirements of Art. 3(3)(d) and, where applicable, Art. 3(3)(e) and Art. 3(3)(f). Technical documentation under Art. 21 must exist BEFORE the product bears CE marking. REDCheck generates the 5 PDF documents for each product model. 30 minutes. €99 per product. 100% in your browser.
€99 one-time payment · 5 PDF documents in ZIP · 30 minutes · 100% in your browser
Three dates define the regulatory lifecycle of cybersecurity for radio equipment.
From publication to repeal — every date and its legal basis.
Delegated Regulation (EU) 2023/2444 was the ONLY postponement. The European Commission published the EN 18031 standards in January 2025. The harmonised standards gap — the reason for the first postponement — no longer exists. No legal mechanism for a further delay has been proposed or discussed.
Correct in principle: Art. 10 applies when placing radio equipment on the market. Products already on the market before 1 August 2025 are not retroactively required to have cybersecurity documentation. However, if you continue PLACING new units of the same product on the market after the date (new manufacturing batches, new stock imported), those units must comply.
The CRA enters full application on 11 December 2027. Between 1 August 2025 and 11 December 2027, Delegated Regulation 2022/30 is the applicable law. That is 28 months. If your product is on the EU market during this window without cybersecurity documentation, you are non-compliant for 28 months. Market surveillance does not wait for the CRA.
5 PDF documents generated from your product data. Each cites the exact article of Directive 2014/53/EU that it covers.
Art. 1, Del. Reg. (EU) 2022/30 + Art. 3(3), Dir. 2014/53/EU.
Art. 21 + Annex V. Requirement-by-requirement documentation.
Arts. 3(3)(d) and (e). Structured risk table.
Art. 18 + Annex VI.
Art. 10(9) + Annex VII.
Look before you buy — Download sample dossier (PDF, fictitious product) — Real structure, real articles, real format. Fictitious data.
Generated from your data, in your browser. No product data leaves your computer.
5 PDF documents. 30 min. €99 per product. The documentation that Art. 21 requires BEFORE your product can bear CE marking.
If you fully apply EN 18031, you can self-declare via Module A (Annex II) without a Notified Body. If you partially apply or don't apply the harmonised standards, Art. 17(4) requires third-party involvement. REDCheck does not replace a Notified Body — it generates the documentation that is a prerequisite for any conformity route.
We do not sell testing. We do not sell consulting. We sell the tool that structures your cybersecurity documentation under Art. 21 and Annex V.
Art. 46 of Directive 2014/53/EU requires Member States to establish penalties.
Art. 40 of Directive 2014/53/EU. Market surveillance can require withdrawal across all 27 Member States.
Administrative fines under §19. Up to 1 year of imprisonment under §20.
Amazon and EU marketplaces require conformity documentation. Missing cybersecurity documentation triggers listing suspension.
| Alternative | Cost | What you get |
|---|---|---|
| Notified Body / consultancy | €5,000–20,000 | Assessment + documentation. 2–6 months. |
| Assemble documentation yourself | €0 (your time) | EN 18031 has 600+ pages. No template. |
| Wait for the CRA | €0 | 28 months of non-compliance. Fines. Listing removal. |
| REDCheck | €99 | 5 documents, 30 min, per product |
Professional Pack: €999 for 70 generations.
Request volume pricingREDCheck generates a document structured under Art. 21 and Annex V of Directive 2014/53/EU based on the information you enter. The truthfulness, accuracy and completeness of that information is your responsibility as manufacturer of the radio equipment.
We guarantee that the document structure follows Art. 21 and Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case, nor by a commercial buyer in a procurement process.
REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.
Five PDF documents. Art. 21 and Annex V fully structured. Directive 2014/53/EU. Your product data never leaves your computer.