Directive 2014/53/EU · Del. Reg. 2022/30Generate my documentation — €99
ACTIVE — Enforcement tracker · Deadline dashboard · Transposition status — Updated weekly from EUR-Lex, Safety Gate, OEIL & 12 official sourcesView regulatory intelligence →

Your IoT startup is scaling into Europe. Your investors expect EU revenue by Q3. But from 1 August 2025, every connected device you sell in the EU needs cybersecurity documentation under Art. 21 of Directive 2014/53/EU — and no amount of Series A funding makes the regulation optional.

You built a connected device — smart home, industrial sensor, wearable. The US market is live. Europe is the growth plan. Then your EU partner sends a compliance checklist: cybersecurity documentation under Delegated Regulation (EU) 2022/30. Your FCC lab has never heard of Art. 3(3)(d). An EU consultancy quotes $15,000–20,000 per product and 4 months. Your board meeting is in 6 weeks. REDCheck generates the 5 PDF documents covering Art. 21 and Annex V. 30 minutes. €99 per product. 100% in your browser.

Generate my RED documentation — €99Free: does my product need RED cybersecurity documentation?

€99 one-time payment · 5 PDF documents in ZIP · 30 minutes · 100% in your browser

Directive 2014/53/EU · Art. 3(3)(d)(e)(f) · Art. 21 + Annex V · Art. 18 + Annex VI · Art. 10(9) + Annex VII · Delegated Reg. (EU) 2022/30 · EN 18031-1, -2, -3

EU RED compliance for IoT startups: the numbers

EU regulatory compliance is not optional for startups. Directive 2014/53/EU applies to any radio equipment on the EU market, regardless of company size.

1 Aug 2025
Mandatory application date. No grace period for startups.
30 minutes
Time to generate the 5 PDF documents per product model
$15,000–20,000 vs €99
EU consultancy vs REDCheck per product. Capital preservation for startups.

What REDCheck does with your product data

You enter your product specifications. REDCheck structures the cybersecurity documentation requirement by requirement, following the EN 18031 categories.

1
Company details
Legal name, role under Directive 2014/53/EU, country, EU contact.
2
Product classification
Determines applicable requirements: Art. 3(3)(d), (e) and/or (f).
3
Cybersecurity assessment
EN 18031 categories: access control, authentication, secure comms, updates, vulnerability management.
4
Risk assessment
Structured risk table per applicable requirement.
5
EU Declaration of Conformity
Art. 18 + Annex VI. Basis for CE marking.
6
Download ZIP
5 PDFs. Add to technical file. Retain 10 years (Art. 10(4)).

Three mistakes IoT startups make about EU RED compliance

COMMON ERROR

"We'll deal with EU compliance after we validate product-market fit in Europe"

Delegated Regulation (EU) 2022/30 applies from 1 August 2025. If your product is on the EU market without cybersecurity documentation, it is non-compliant from day one. Compliance is a pre-launch prerequisite.

COMMON ERROR

"Our investors will fund a proper EU compliance engagement later"

At €99 per product, REDCheck generates the same documentation in 30 minutes. The question is not whether you can afford compliance — it is whether you can afford to burn $15,000 and 4 months of runway.

COMMON ERROR

"We comply with SOC 2 and GDPR — that covers EU radio equipment"

SOC 2 is a US audit framework. GDPR covers data processing. Neither addresses Art. 3(3)(d), (e) and (f). These are product-level obligations on the physical device. EN 18031 is the relevant European standard.

What's in the ZIP

5 PDF documents per product model. Each cites the exact article of Directive 2014/53/EU that it covers.

1

Product Classification

Art. 1, Del. Reg. (EU) 2022/30 + Art. 3(3), Dir. 2014/53/EU.

2

Cybersecurity Technical Documentation

Art. 21 + Annex V.

3

Risk Assessment

Arts. 3(3)(d) and (e).

4

EU Declaration of Conformity

Art. 18 + Annex VI.

5

Simplified Declaration + Label

Art. 10(9) + Annex VII.

Look before you buy — Download sample dossier (PDF, fictitious product)

Generated from your data, in your browser. No product data leaves your computer.

What you pay

🧾 EU CONSULTANCY
$15,000–20,000
Per product. 4 months. Burns runway. Delays EU launch.
✓ REDCHECK
€99
5 documents. 30 minutes. Ship to Europe this week.

Technical documentation and third-party testing: two layers

● LAYER 1

Cybersecurity technical documentation (Annex V)

5 PDF documents. 30 min. €99. Art. 21 prerequisite for any conformity route.

∅ LAYER 2

Conformity assessment by a Notified Body

If you fully apply EN 18031, self-declare via Module A (Annex II). If not, Art. 17(4) requires third-party involvement.

We do not sell testing. We do not sell consulting. We sell the tool that structures your cybersecurity documentation.

What happens without cybersecurity documentation

Startups are not exempt from enforcement. Art. 46 makes no distinction by company size.

🇪🇺
Market withdrawal
Immediate

Arts. 40(1), 40(4) and 43 of Directive 2014/53/EU.

🛒
Amazon listing suspension
Revenue loss

Amazon requires conformity documentation for active EU listings.

📉
Board and investor impact
Strategic

Losing EU market access after promising European growth is a conversation no CTO wants. €99 prevents it.

Alternatives

AlternativeCostWhat you get
EU consultancy$15,000–20,000/product4 months. Custom report. Burns runway.
Delay EU launch$0 (lost revenue)Competitors enter first. Board loses confidence.
Ask your FCC labN/AThey don't do EU cybersecurity documentation.
REDCheck€995 documents, 30 min. Launch on schedule.

Launching more than one product in the EU?

Professional Pack: €999 for 70 generations.

Request volume pricing
Reply within one business day.

What REDCheck guarantees and what it does not

REDCheck generates a document structured under Art. 21 and Annex V of Directive 2014/53/EU based on the information you enter. The truthfulness, accuracy and completeness of that information is your responsibility as manufacturer of the radio equipment.

We guarantee that the document structure follows Art. 21 and Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date.

REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.

Frequently asked questions

We're a 15-person startup. Do the same rules apply to us as to Samsung?
Yes. Art. 10 does not distinguish by company size. The technical documentation requirement, conformity assessment and EU declaration of conformity are identical for a startup and a multinational.
We use AWS IoT Core for device management. Is that relevant?
Your cloud architecture affects the cybersecurity assessment. How your device authenticates with AWS, handles OTA updates, whether data is encrypted in transit — all EN 18031 categories. REDCheck walks you through them.
Can we use Module A (self-declaration)?
Yes, if you fully apply EN 18031. Art. 17(3)(a) allows Module A when harmonised standards are fully applied.
What happens when the CRA replaces RED?
Delegated Regulation (EU) 2022/30 will be repealed from 11 December 2027. REDCheck covers 1 August 2025 to 11 December 2027.
Is it a subscription?
No. One-time payment. Each license includes a 30-day editing window and up to 10 regenerations. The 5 PDF documents you download are yours permanently.
Can I request a refund?
Under Art. 16(m) of Directive (EU) 2011/83 on consumer rights, by activating the license you give express consent to the immediate generation of the digital content, waiving the 14-day right of withdrawal. Refunds are accepted only for reproducible technical failures reported to hello@solidwaretools.com within 14 days of purchase.
What if the regulation changes?
If Directive 2014/53/EU, Delegated Regulation (EU) 2022/30 or the EN 18031 standards change during your license validity period, you can regenerate the documents with the updated version of the generator at no additional cost.
⚠️ Important notice: REDCheck is a documentary self-assessment tool, not legal advice or a third-party audit. The document is generated from the data you enter. The accuracy of the data is your responsibility under Art. 10(1) of Directive 2014/53/EU. REDCheck does not replace a conformity assessment by a Notified Body where required under Art. 17(4) of the Directive.

Your investors funded European growth, not European compliance delays. Generate the documentation in 30 minutes.

Five PDF documents. Art. 21 and Annex V fully structured. Directive 2014/53/EU. Your product data never leaves your computer.

€99 per product
One-time payment · No subscription · 30 minutes · 10 regenerations · 30-day editing window · Professional Pack: €999
Generate my RED documentation — €99
✓ Last regulatory check: 6 May 2026 · No substantive changes detected · View history