Directive 2014/53/EU · Del. Reg. 2022/30Generate my documentation — €99
ACTIVE — Enforcement tracker · Deadline dashboard · Transposition status — Updated weekly from EUR-Lex, Safety Gate, OEIL & 12 official sourcesView regulatory intelligence →

You manufacture WiFi or BLE smart locks and sell them in Europe. Your lock controls physical access to a home or business. A cybersecurity failure is not a data leak — it is an open door. Art. 3(3)(d) and Art. 3(3)(e) of Directive 2014/53/EU apply from 1 August 2025.

Your smart lock uses WiFi, BLE or both. It connects to a companion app. It stores access codes, user schedules, entry logs. Art. 3(3)(d) applies because the lock communicates over the internet. Art. 3(3)(e) applies because access logs and user schedules linked to user accounts are personal data under GDPR Art. 4(1). Smart locks face the highest scrutiny because a cybersecurity vulnerability has physical safety consequences. REDCheck generates the 5 PDF documents. 30 minutes. €99 per product.

Generate my RED documentation — €99Free: does my smart lock need RED cybersecurity documentation?

€99 one-time payment · 5 PDF documents in ZIP · 30 minutes · 100% in your browser

Directive 2014/53/EU · Art. 3(3)(d)(e)(f) · Art. 21 + Annex V · Art. 18 + Annex VI · Art. 10(9) + Annex VII · Delegated Reg. (EU) 2022/30 · EN 18031-1, -2, -3

EU cybersecurity documentation for smart locks: the numbers

Smart locks sit at the intersection of physical security and cybersecurity. A compromised smart lock is not a data breach — it is a break-in.

Physical + cyber
Smart locks combine physical access control with network connectivity. Cybersecurity documentation is not optional.
Art. 3(3)(d) + (e)
Network protection + personal data. Access logs and user schedules are personal data.
€99
Per product model. Same documentation whether WiFi-only, BLE-only or dual-radio.

What REDCheck does with your product data

You enter your product specifications. REDCheck structures the cybersecurity documentation requirement by requirement, following the EN 18031 categories.

1
Company details
Legal name, role under Directive 2014/53/EU, country, EU contact.
2
Product classification
Determines applicable requirements: Art. 3(3)(d), (e) and/or (f).
3
Cybersecurity assessment
EN 18031 categories: access control, authentication, secure comms, updates, vulnerability management.
4
Risk assessment
Structured risk table per applicable requirement.
5
EU Declaration of Conformity
Art. 18 + Annex VI. Basis for CE marking.
6
Download ZIP
5 PDFs. Add to technical file. Retain 10 years (Art. 10(4)).

Three mistakes smart lock manufacturers make about RED cybersecurity

COMMON ERROR

"Our smart lock is BLE-only — no internet, no cybersecurity requirements"

If your BLE lock syncs to a smartphone app that connects to the internet, the lock communicates indirectly over the internet. Art. 1(1): 'directly or via any other equipment.' Art. 3(3)(d) applies.

COMMON ERROR

"Access codes are not personal data"

Access codes associated with user accounts (email, name, phone number) are personal data under GDPR Art. 4(1). Entry logs showing when a specific user unlocked the door are personal data. Art. 3(3)(e) applies.

COMMON ERROR

"Physical security standards (EN 15684, EN 14846) cover cybersecurity"

Physical lock standards cover mechanical resistance and durability. Art. 3(3)(d) and (e) cover network protection, authentication, encryption, software updates. These are SEPARATE requirements.

What's in the ZIP

5 PDF documents per product model. Each cites the exact article of Directive 2014/53/EU that it covers.

1

Product Classification

Art. 1, Del. Reg. (EU) 2022/30 + Art. 3(3), Dir. 2014/53/EU.

2

Cybersecurity Technical Documentation

Art. 21 + Annex V.

3

Risk Assessment

Arts. 3(3)(d) and (e).

4

EU Declaration of Conformity

Art. 18 + Annex VI.

5

Simplified Declaration + Label

Art. 10(9) + Annex VII.

Look before you buy — Download sample dossier (PDF, fictitious product)

Generated from your data, in your browser. No product data leaves your computer.

What you pay

🧾 EU CONSULTANCY
$10,000
Per model. Months.
✓ REDCHECK
€99
5 documents. 30 minutes.

Technical documentation and third-party testing: two layers

● LAYER 1

Cybersecurity technical documentation (Annex V)

5 PDF documents. 30 min. €99. Art. 21 prerequisite for any conformity route.

∅ LAYER 2

Conformity assessment by a Notified Body

If you fully apply EN 18031, self-declare via Module A (Annex II). If not, Art. 17(4) requires third-party involvement.

We do not sell testing. We do not sell consulting. We sell the tool that structures your cybersecurity documentation.

What happens without cybersecurity documentation

Smart locks face heightened scrutiny because cybersecurity failures have physical safety consequences.

🇪🇺
Market withdrawal
Immediate

Arts. 40(1), 40(4) and 43.

🇩🇪
Germany
€3,000–€30,000

Produktsicherheitsgesetz. Physical safety implications increase enforcement priority.

🛒
Amazon / marketplace removal
Revenue loss

Amazon requires conformity documentation for smart lock listings.

Alternatives

AlternativeCostWhat you get
EU consultancy$10,000/modelMonths. Custom report.
Assume physical standards cover cybersecurity$0They do not. Separate requirements.
Assemble documentation yourself$0 (your time)EN 18031 + physical lock standards = complex.
REDCheck€995 documents, 30 min, per model

Manufacturing more than one smart lock model?

Professional Pack: €999 for 70 generations.

Request volume pricing
Reply within one business day.

What REDCheck guarantees and what it does not

REDCheck generates a document structured under Art. 21 and Annex V of Directive 2014/53/EU based on the information you enter. The truthfulness, accuracy and completeness of that information is your responsibility as manufacturer of the radio equipment.

We guarantee that the document structure follows Art. 21 and Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date.

REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.

Frequently asked questions

Our smart lock also has NFC for guest access cards. Does Art. 3(3)(f) apply?
Art. 3(3)(f) applies only if the NFC enables money transfers. If NFC is only for access control (opening the door), Art. 3(3)(f) does NOT apply.
We sell to hotels and businesses, not consumers. Does the Regulation still apply?
Yes. Delegated Regulation (EU) 2022/30 makes no consumer/commercial distinction. A hotel room smart lock has the same obligation as a retail product.
Can we use Module A (self-declaration)?
Yes, if you fully apply EN 18031. Art. 17(3)(a) allows Module A.
What happens when the CRA replaces RED?
Delegated Regulation (EU) 2022/30 will be repealed from 11 December 2027.
Is it a subscription?
No. One-time payment. Each license includes a 30-day editing window and up to 10 regenerations. The 5 PDF documents you download are yours permanently.
Can I request a refund?
Under Art. 16(m) of Directive (EU) 2011/83 on consumer rights, by activating the license you give express consent to the immediate generation of the digital content, waiving the 14-day right of withdrawal. Refunds are accepted only for reproducible technical failures reported to hello@solidwaretools.com within 14 days of purchase.
What if the regulation changes?
If Directive 2014/53/EU, Delegated Regulation (EU) 2022/30 or the EN 18031 standards change during your license validity period, you can regenerate the documents with the updated version of the generator at no additional cost.
⚠️ Important notice: REDCheck is a documentary self-assessment tool, not legal advice or a third-party audit. The document is generated from the data you enter. The accuracy of the data is your responsibility under Art. 10(1) of Directive 2014/53/EU. REDCheck does not replace a conformity assessment by a Notified Body where required under Art. 17(4) of the Directive.

A compromised lock is an open door. Generate the cybersecurity documentation in 30 minutes.

Five PDF documents. Art. 21 and Annex V fully structured. Directive 2014/53/EU. Your product data never leaves your computer.

€99 per product
One-time payment · No subscription · 30 minutes · 10 regenerations · 30-day editing window · Professional Pack: €999
Generate my RED documentation — €99
✓ Last regulatory check: 6 May 2026 · No substantive changes detected · View history