Delegated Regulation (EU) 2022/30 activates cybersecurity requirements under the Radio Equipment Directive from 1 August 2025. Regulation (EU) 2024/2847 — the Cyber Resilience Act — enters full application on 11 December 2027 and repeals the Delegated Regulation. For the next 28 months, RED cybersecurity is the law. After December 2027, CRA is the law. Products placed on the market during the RED window need RED documentation. Products placed from December 2027 need CRA documentation. REDCheck covers the first window (€99). CRACheck covers the second (€149). Both tools, same philosophy: guided self-assessment, structured output, one-time payment.
€99 one-time payment · 5 PDF documents in ZIP · 30 minutes · 100% in your browser
Two regulations, two documentation periods.
From RED to CRA — every milestone.
28 months of non-compliance. Market surveillance authorities enforce Art. 3(3)(d)/(e)/(f) from 1 August 2025. Waiting for the CRA does not exempt you from the RED. Two regulations, two separate periods.
No. The CRA (Reg. 2024/2847) has different requirements, different annexes and a different scope than the RED. The CRA applies to 'products with digital elements' — broader than 'radio equipment.' The technical documentation under CRA Annex VII is structured differently from RED Annex V. Separate regulation, separate documentation.
The CRA replaces the cybersecurity requirements of Del. Reg. 2022/30 — not the entire Radio Equipment Directive. Directive 2014/53/EU continues to apply for EMC, electrical safety, radio spectrum and other essential requirements. Only the cybersecurity overlay from Del. Reg. 2022/30 is absorbed by the CRA.
5 PDF documents generated from your product data. Each cites the exact article of Directive 2014/53/EU that it covers.
Art. 1, Del. Reg. (EU) 2022/30 + Art. 3(3), Dir. 2014/53/EU.
Art. 21 + Annex V. Requirement-by-requirement documentation.
Arts. 3(3)(d) and (e). Structured risk table.
Art. 18 + Annex VI.
Art. 10(9) + Annex VII.
Look before you buy — Download sample dossier (PDF, fictitious product) — Real structure, real articles, real format. Fictitious data.
Generated from your data, in your browser. No product data leaves your computer.
5 PDF documents. 30 min. €99 per product. The documentation that Art. 21 requires BEFORE your product can bear CE marking.
If you fully apply EN 18031, you can self-declare via Module A (Annex II) without a Notified Body. If you partially apply or don't apply the harmonised standards, Art. 17(4) requires third-party involvement. REDCheck does not replace a Notified Body — it generates the documentation that is a prerequisite for any conformity route.
We do not sell testing. We do not sell consulting. We sell the tool that structures your cybersecurity documentation under Art. 21 and Annex V.
Art. 46 of Directive 2014/53/EU requires Member States to establish penalties that are effective, proportionate and dissuasive.
Art. 40 of Directive 2014/53/EU. Market surveillance can require withdrawal across all 27 Member States.
Administrative fines under §19. Up to 1 year of imprisonment under §20.
Amazon and EU marketplaces require conformity documentation. Missing cybersecurity documentation triggers listing suspension.
| Alternative | Cost | What you get |
|---|---|---|
| Notified Body / accredited lab | €5,000–10,000 per model | 3–6 months. Full third-party assessment. |
| Cybersecurity consultancy | €5,000–15,000 per model | Custom report. Weeks of wait. |
| Assemble documentation yourself | €0 (your time) | EN 18031 has 600+ pages. No template. |
| REDCheck | €99 | 5 documents, 30 min, per model |
Professional Pack: €999 for 70 generations.
Request volume pricingREDCheck generates a document structured under Art. 21 and Annex V of Directive 2014/53/EU based on the information you enter. The truthfulness, accuracy and completeness of that information is your responsibility as manufacturer of the radio equipment.
We guarantee that the document structure follows Art. 21 and Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case, nor by a commercial buyer in a procurement process.
REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.
Five PDF documents. Art. 21 and Annex V fully structured. Directive 2014/53/EU. Your product data never leaves your computer.