Directive 2014/53/EU · Del. Reg. 2022/30Generate my documentation — €99
ACTIVE — Enforcement tracker · Deadline dashboard · Transposition status — Updated weekly from EUR-Lex, Safety Gate, OEIL & 12 official sourcesView regulatory intelligence →

Your EU importer is asking for cybersecurity documentation for your WiFi smart plugs. Without it, your products cannot be legally marketed in Europe from 1 August 2025. The documentation is your responsibility as manufacturer under Art. 10 of Directive 2014/53/EU.

You manufacture WiFi smart plugs. Your importers in Germany, the Netherlands or Italy are now requesting cybersecurity technical documentation under Delegated Regulation (EU) 2022/30. A Notified Body quotes €5,000–10,000 per product model and 3–6 months of waiting time. You have 14 models. REDCheck generates the 5 PDF documents that cover your obligations under Art. 21 and Annex V for each model. 30 minutes. €99 per product. 100% in your browser — your product data never leaves your computer.

Generate my RED documentation — €99Free: does my smart plug need RED cybersecurity documentation?

€99 one-time payment · 5 PDF documents in ZIP · 30 minutes · 100% in your browser

Directive 2014/53/EU · Art. 3(3)(d)(e)(f) · Art. 21 + Annex V · Art. 18 + Annex VI · Art. 10(9) + Annex VII · Delegated Reg. (EU) 2022/30 · EN 18031-1, -2, -3

Cybersecurity documentation for smart plugs: the numbers

Delegated Regulation (EU) 2022/30 activated the cybersecurity requirements of Art. 3(3)(d) and (e) for all internet-connected radio equipment — including WiFi smart plugs. The obligations are in force.

1 Aug 2025
Application date of Delegated Reg. (EU) 2022/30 — cybersecurity requirements are now mandatory
5 documents
Product classification, technical documentation, risk assessment, EU declaration of conformity, simplified declaration + label
€5,000–10,000
Typical cost at a Notified Body per product model. REDCheck: €99

What REDCheck does with your smart plug data

You enter your product specifications. REDCheck structures the cybersecurity documentation requirement by requirement, following the EN 18031 categories.

1
Company details
Legal name, role under Directive 2014/53/EU (manufacturer, Art. 10), country of manufacture, EU contact.
2
Product classification
Determines which essential requirements apply: Art. 3(3)(d) (network protection) for all internet-connected equipment. Art. 3(3)(e) (personal data) if your smart plug processes personal data via its app.
3
Cybersecurity assessment
Requirement-by-requirement review mapped to EN 18031-1 (network) and EN 18031-2 (personal data) categories: access control, authentication, secure communications, software updates, vulnerability management.
4
Risk assessment
Assessment of implementation status for each applicable requirement of Arts. 3(3)(d) and (e). Maps your answers to a structured risk table.
5
EU Declaration of Conformity
Formal declaration under Art. 18 and Annex VI. Signed by the manufacturer. Basis for CE marking under Arts. 19–20.
6
Download ZIP
5 PDF documents generated in your browser. Add to your technical file alongside test reports and user manual. Retain for 10 years (Art. 10(4)).

Three mistakes smart plug manufacturers make about RED cybersecurity

COMMON ERROR

"We already have CE marking, so we comply"

CE marking for electromagnetic compatibility (Art. 3(1)(b)) and electrical safety (Art. 3(1)(a)) has been mandatory since 2016. The cybersecurity requirements of Art. 3(3)(d) and (e) are SEPARATE obligations activated by Delegated Regulation (EU) 2022/30 from 1 August 2025. Your existing CE marking does not cover them. The technical documentation under Art. 21 must now include cybersecurity.

COMMON ERROR

"Our smart plug is simple — cybersecurity doesn't apply"

Art. 1(1) of Delegated Regulation (EU) 2022/30 applies Art. 3(3)(d) to ANY radio equipment that can communicate over the internet, directly or indirectly. A WiFi smart plug communicates over the internet via your home router. Complexity is irrelevant. A €3 smart plug has the same documentation obligation as a €300 industrial gateway.

COMMON ERROR

"The importer handles compliance, not the manufacturer"

Art. 10(1) and 10(3) of Directive 2014/53/EU place the obligation to design, manufacture and draw up technical documentation squarely on the manufacturer. The importer (Art. 12) must VERIFY that the manufacturer has done this — but cannot do it on your behalf. If your importer requests documentation, the obligation is yours.

What's in the ZIP

5 PDF documents generated from your smart plug data. Each cites the exact article of Directive 2014/53/EU that it covers.

1

Product Classification

Art. 1, Del. Reg. (EU) 2022/30 + Art. 3(3), Dir. 2014/53/EU.

2

Cybersecurity Technical Documentation

Art. 21 + Annex V. Requirement-by-requirement documentation.

3

Risk Assessment

Arts. 3(3)(d) and (e). Structured risk table.

4

EU Declaration of Conformity

Art. 18 + Annex VI.

5

Simplified Declaration + Label

Art. 10(9) + Annex VII.

Look before you buy — Download sample dossier (PDF, fictitious product) — Real structure, real articles, real format. Fictitious data.

Generated from your data, in your browser. No product data leaves your computer.

What you pay

🧾 NOTIFIED BODY / LAB IN CHINA
¥35,000–85,000
Per product model. 3–6 months. Queue time. 14 models = ¥490,000–1,190,000.
✓ REDCHECK
€99
5 documents. 30 minutes per model. 14 models = €1,386.

Technical documentation and third-party testing: two layers

● LAYER 1

Cybersecurity technical documentation (Annex V)

5 PDF documents. 30 min. €99 per product. The documentation that Art. 21 requires BEFORE your product can bear CE marking.

∅ LAYER 2

Conformity assessment by a Notified Body

If you fully apply EN 18031, you can self-declare via Module A (Annex II) without a Notified Body. If you partially apply or don't apply the harmonised standards, Art. 17(4) requires third-party involvement. REDCheck does not replace a Notified Body — it generates the documentation that is a prerequisite for any conformity route.

We do not sell testing. We do not sell consulting. We sell the tool that structures your cybersecurity documentation under Art. 21 and Annex V.

What happens without cybersecurity documentation

Art. 46 of Directive 2014/53/EU requires Member States to establish penalties that are effective, proportionate and dissuasive, including criminal penalties for serious infringements.

🇪🇺
Market withdrawal and sales prohibition
Immediate

Market surveillance authorities can require withdrawal, prohibit sale or order a recall of radio equipment that does not meet the essential requirements of Art. 3 — including the cybersecurity requirements activated by Delegated Reg. (EU) 2022/30. Arts. 40(1), 40(4) and 43 of Directive 2014/53/EU.

🇩🇪
Germany — Produktsicherheitsgesetz
€3,000–€30,000

Administrative fines under §19. Up to 1 year of imprisonment for serious offences under §20. Germany is the largest single market for Chinese electronics in the EU.

🛒
Amazon and marketplace listing removal
Revenue loss

Amazon, eBay and European marketplaces require conformity documentation as a condition to maintain active listings. Without an EU declaration of conformity covering Arts. 3(3)(d) and (e), the product may be suspended immediately. No right to compensation.

Alternatives

AlternativeCostWhat you get
Notified Body / lab in China¥35,000–85,000 per model3–6 months. Full third-party assessment.
EU-based cybersecurity consultancy€5,000–15,000 per modelCustom report. Weeks of wait.
Assemble documentation yourself€0 (your time)EN 18031 has 600+ pages across 3 parts. No guidance.
REDCheck€995 documents, 30 min, per model

Manufacturing more than one WiFi smart plug model?

If you document 10 or more product models, write to us for the Professional Pack: €999 for 70 generations with a single license key. One generation per product model.

Request volume pricing
Reply within one business day.

What REDCheck guarantees and what it does not

REDCheck generates a document structured under Art. 21 and Annex V of Directive 2014/53/EU based on the information you enter. The truthfulness, accuracy and completeness of that information is your responsibility as manufacturer of the radio equipment.

We guarantee that the document structure follows Art. 21 and Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case, nor by a commercial buyer in a procurement process.

REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.

Frequently asked questions — RED cybersecurity documentation for smart plugs

My smart plug connects via WiFi to the user's router. Does Art. 3(3)(d) apply?
Yes. Art. 1(1) of Delegated Regulation (EU) 2022/30 applies Art. 3(3)(d) to any radio equipment that can communicate over the internet, directly or indirectly. A WiFi smart plug communicates over the internet via the home router. Art. 3(3)(d) — network protection — applies.
Does Art. 3(3)(e) also apply to my smart plug?
It depends on whether your smart plug processes personal data as defined in Art. 4(1) of Regulation (EU) 2016/679 (GDPR). If your companion app collects email, location data or usage patterns, Art. 3(3)(e) applies under Art. 1(2)(a) of Delegated Regulation (EU) 2022/30. If your smart plug has no app and processes no personal data, only Art. 3(3)(d) applies.
Can I use Module A (self-declaration) instead of a Notified Body?
Yes, if you fully apply the harmonised standards EN 18031-1 and, where applicable, EN 18031-2. Art. 17(3)(a) of Directive 2014/53/EU allows internal production control (Module A, Annex II) when harmonised standards are fully applied. If you partially apply or do not apply the standards, Art. 17(4) requires Module B+C (Annex III) or Module H (Annex IV) with Notified Body involvement.
My EU importer says documentation is my responsibility. Is that correct?
Yes. Art. 10(1) and 10(3) of Directive 2014/53/EU require the manufacturer to ensure compliance and draw up technical documentation. The importer (Art. 12(2)) must verify that you have done this before placing the product on the EU market — but the obligation to produce the documentation is the manufacturer's.
What happens when the CRA replaces the RED cybersecurity requirements?
Delegated Regulation (EU) 2022/30 will be repealed with effect from 11 December 2027, when the Cyber Resilience Act — Regulation (EU) 2024/2847 — enters full application. REDCheck covers the window from 1 August 2025 to 11 December 2027. For CRA documentation from that date, SolidwareTools offers CRACheck.
Is it a subscription?
No. One-time payment. Each license includes a 30-day editing window and up to 10 regenerations. The 5 PDF documents you download are yours permanently.
Can I request a refund?
Under Art. 16(m) of Directive (EU) 2011/83 on consumer rights, by activating the license you give express consent to the immediate generation of the digital content, waiving the 14-day right of withdrawal. Refunds are accepted only for reproducible technical failures reported to hello@solidwaretools.com within 14 days of purchase.
What if the regulation changes?
If Directive 2014/53/EU, Delegated Regulation (EU) 2022/30 or the EN 18031 standards change during your license validity period, you can regenerate the documents with the updated version of the generator at no additional cost.
⚠️ Important notice: REDCheck is a documentary self-assessment tool, not legal advice or a third-party audit. The document is generated from the data you enter. The accuracy of the data is your responsibility under Art. 10(1) of Directive 2014/53/EU. REDCheck does not replace a conformity assessment by a Notified Body where required under Art. 17(4) of the Directive.

Your importer is waiting. Generate the cybersecurity documentation for your smart plug in your browser in 30 minutes.

Five PDF documents. Art. 21 and Annex V fully structured. Directive 2014/53/EU. Your product data never leaves your computer. The ZIP you download is yours permanently.

€99 per product
One-time payment · No subscription · 30 minutes · 10 regenerations · 30-day editing window · Professional Pack: €999
Generate my RED documentation — €99
✓ Last regulatory check: 6 May 2026 · No substantive changes detected · View history