Directive 2014/53/EU · Del. Reg. 2022/30Generate my documentation — €99
ACTIVE — Enforcement tracker · Deadline dashboard · Transposition status — Updated weekly from EUR-Lex, Safety Gate, OEIL & 12 official sourcesView regulatory intelligence →

Your product has FCC Part 15, UL listing and CE marking for EMC and electrical safety. None of these cover the cybersecurity requirements of Art. 3(3)(d), (e) and (f) of Directive 2014/53/EU. These are separate obligations with separate documentation — and they are mandatory from 1 August 2025.

You assumed that CE marking covers cybersecurity because it covers everything else. It did not — until Delegated Regulation (EU) 2022/30 activated Art. 3(3)(d), (e) and (f) on 1 August 2025. Now CE marking requires cybersecurity documentation in addition to EMC and safety. Your existing CE covers Art. 3(1)(a) and 3(1)(b). It does NOT cover Art. 3(3)(d)(e)(f). The gap is specific: access control, authentication, secure boot, firmware integrity, secure updates, vulnerability management, personal data protection. REDCheck fills this gap with 5 PDF documents. 30 minutes. €99.

Generate my RED documentation — €99Free: does my product need RED cybersecurity documentation?

€99 one-time payment · 5 PDF documents in ZIP · 30 minutes · 100% in your browser

Directive 2014/53/EU · Art. 3(3)(d)(e)(f) · Art. 21 + Annex V · Art. 18 + Annex VI · Art. 10(9) + Annex VII · Delegated Reg. (EU) 2022/30 · EN 18031-1, -2, -3

The numbers

FCC Part 15
Covers radio frequency emissions and interference. Does NOT address cybersecurity, access control, authentication or personal data protection
Art. 3(3)(d)(e)(f)
Network protection, personal data/privacy, fraud protection — three essential requirements NOT covered by any US certification
1 Aug 2025
Date these requirements became mandatory. Your pre-2025 CE marking does not include them

What REDCheck does with your product data

You enter your product specifications. REDCheck structures the documentation requirement by requirement.

1
Company details
Legal name, role, country, EU contact.
2
Product classification
Determines applicable requirements.
3
Cybersecurity assessment
EN 18031 mapped requirements.
4
Risk assessment
Structured risk table.
5
EU Declaration of Conformity
Art. 18 + Annex VI.
6
Download ZIP
5 PDF documents. Retain 10 years.

Common mistakes

COMMON ERROR

"FCC includes security testing"

FCC Part 15 tests for unintentional radio emissions, conducted emissions and radiated emissions. It does not test for access control, authentication mechanisms, password policies, firmware integrity, secure update protocols, data encryption or vulnerability management. FCC is electromagnetic — EU cybersecurity is information security.

COMMON ERROR

"Our CE marking from 2023 is still valid"

Your CE marking from 2023 is valid for EMC and safety. However, from 1 August 2025, the EU Declaration of Conformity must also cover Arts. 3(3)(d)(e)(f). Your 2023 declaration does not include cybersecurity. It must be updated.

COMMON ERROR

"We'll add cybersecurity to our existing CE declaration"

You cannot simply add a line. Art. 18 requires demonstrating fulfilment of Art. 3 essential requirements. Demonstrating cybersecurity conformity requires technical documentation under Art. 21 + Annex V covering cybersecurity specifically. REDCheck generates this documentation.

What's in the ZIP

5 PDF documents per product model.

1

Product Classification

Art. 1, Del. Reg. (EU) 2022/30 + Art. 3(3), Dir. 2014/53/EU.

2

Cybersecurity Technical Documentation

Art. 21 + Annex V.

3

Risk Assessment

Arts. 3(3)(d) and (e).

4

EU Declaration of Conformity

Art. 18 + Annex VI.

5

Simplified Declaration + Label

Art. 10(9) + Annex VII.

Look before you buy — Download sample dossier (PDF, fictitious product)

Generated from your data, in your browser. No product data leaves your computer.

What you pay

🧾 EU CYBERSECURITY CONSULTANT TO FILL THE GAP
$8,000–$15,000
Per model. 2–4 months. To add what FCC doesn't cover.
✓ REDCHECK
€99
5 documents. 30 minutes. The exact gap between FCC and CE cybersecurity.

Technical documentation and third-party testing: two layers

● LAYER 1

Cybersecurity technical documentation (Annex V)

5 documents. 30 min. €99. Art. 21 requirement.

∅ LAYER 2

Conformity assessment by a Notified Body

If you fully apply EN 18031, self-declare. Otherwise Art. 17(4) requires third-party involvement.

We do not sell testing. We do not sell consulting. We sell the tool that structures your cybersecurity documentation.

What happens without cybersecurity documentation

Art. 46 of Directive 2014/53/EU requires effective, proportionate and dissuasive penalties.

🇪🇺
Incomplete CE marking
Art. 43

Art. 43(1)(e): an EU Declaration of Conformity that has not been drawn up correctly is a formal non-compliance. Art. 43(2): Member States shall take measures to restrict or prohibit the product.

🇩🇪
Germany
€3,000–€30,000

Produktsicherheitsgesetz. Incomplete CE declaration = non-compliance.

🛒
Amazon EU
Documentation gap flagged

Amazon EU compliance checks are increasingly verifying cybersecurity-specific documentation beyond basic CE.

Alternatives

AlternativeCostWhat you get
EU cybersecurity consultant$8,000–15,000/model2–4 months. Fills the FCC-CE gap.
Update CE via your existing EMC labVariableMost EMC labs do not cover cybersecurity.
Assume existing CE is sufficient€0It is not. Art. 43 non-compliance.
REDCheck€995 documents, 30 min

Multiple products with existing CE but no cybersecurity documentation?

Professional Pack: €999 for 70 generations. Update your entire CE portfolio with cybersecurity documentation.

Request volume pricing
Reply within one business day.

What REDCheck guarantees and what it does not

REDCheck generates a document structured under Art. 21 and Annex V of Directive 2014/53/EU based on the information you enter. The truthfulness, accuracy and completeness of that information is your responsibility as manufacturer of the radio equipment.

We guarantee that the document structure follows Art. 21 and Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date.

REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.

Frequently asked questions

Does my existing CE marking become invalid?
Your existing CE marking remains valid for the requirements it covers. However, from 1 August 2025, the EU Declaration of Conformity must also cover cybersecurity. The marking itself does not change; the declaration behind it must be updated.
Can I combine my existing CE documentation with the REDCheck output?
Yes. REDCheck generates 5 cybersecurity-specific PDF documents. These go INTO your existing technical file alongside EMC test reports and safety assessment. You may need to update your master declaration to reference both existing and new cybersecurity conformity.
Is there a US equivalent of the EU cybersecurity requirement?
As of 2026, the US does not have a mandatory cybersecurity documentation requirement for consumer IoT equivalent to Art. 3(3)(d)(e)(f). The NIST Cybersecurity Framework is voluntary. The proposed US Cyber Trust Mark is a voluntary labeling program. The EU requirement is mandatory and backed by enforcement.
Is it a subscription?
No. One-time payment. Each license includes a 30-day editing window and up to 10 regenerations. The 5 PDF documents you download are yours permanently.
Can I request a refund?
Under Art. 16(m) of Directive (EU) 2011/83 on consumer rights, by activating the license you give express consent to the immediate generation of the digital content, waiving the 14-day right of withdrawal. Refunds are accepted only for reproducible technical failures reported to hello@solidwaretools.com within 14 days of purchase.
What if the regulation changes?
If Directive 2014/53/EU, Delegated Regulation (EU) 2022/30 or the EN 18031 standards change during your license validity period, you can regenerate the documents with the updated version of the generator at no additional cost.
⚠️ Important notice: REDCheck is a documentary self-assessment tool, not legal advice or a third-party audit. The document is generated from the data you enter. The accuracy of the data is your responsibility under Art. 10(1) of Directive 2014/53/EU. REDCheck does not replace a conformity assessment by a Notified Body where required under Art. 17(4) of the Directive.

FCC covers emissions. CE now covers cybersecurity. Fill the gap in 30 minutes. €99 per product.

Five PDF documents. Art. 21 and Annex V. Directive 2014/53/EU. Your product data never leaves your computer.

€99 per product
One-time payment · No subscription · 30 minutes · 10 regenerations · 30-day editing window · Professional Pack: €999
Generate my RED documentation — €99
✓ Last regulatory check: 6 May 2026 · No substantive changes detected · View history