Directive 2014/53/EU · Del. Reg. 2022/30Generate my documentation — €99
ACTIVE — Enforcement tracker · Deadline dashboard · Transposition status — Updated weekly from EUR-Lex, Safety Gate, OEIL & 12 official sourcesView regulatory intelligence →

You manufacture drones in the United States with WiFi or cellular connectivity and sell them in Europe. The aviation exemption under Regulation (EU) 2018/1139 covers Art. 3(3)(e) and (f) — but NOT Art. 3(3)(d). Network protection is mandatory from 1 August 2025.

Your drone has WiFi for live video streaming, a 4G/5G modem for remote control, or both. It communicates over the internet. Art. 3(3)(d) requires that the device does not harm the network. You checked the exemptions: Art. 2(2)(a) exempts products under Regulation (EU) 2018/1139 from Art. 3(3)(e) and (f). But Art. 3(3)(d) — network protection — is NOT included in that exemption. REDCheck generates the 5 PDF documents. 30 minutes. €99.

Generate my RED documentation — €99Free: does my drone need RED cybersecurity documentation?

€99 one-time payment · 5 PDF documents in ZIP · 30 minutes · 100% in your browser

Directive 2014/53/EU · Art. 3(3)(d)(e)(f) · Art. 21 + Annex V · Art. 18 + Annex VI · Art. 10(9) + Annex VII · Delegated Reg. (EU) 2022/30 · EN 18031-1, -2, -3

EU cybersecurity documentation for drones: the numbers

Drones occupy a unique position under Delegated Regulation (EU) 2022/30. The aviation exemption covers Art. 3(3)(e) and (f) but leaves Art. 3(3)(d) fully in scope.

Art. 3(3)(d) applies
Network protection is NOT covered by the aviation exemption. Your drone needs cybersecurity documentation.
Art. 2(2)(a)
Aviation exemption: only Arts. 3(3)(e) and (f) are exempt for products under Reg. 2018/1139. Not (d).
€99
Per drone model. Documentation covering Art. 3(3)(d) network protection.

What REDCheck does with your product data

You enter your product specifications. REDCheck structures the cybersecurity documentation requirement by requirement, following the EN 18031 categories.

1
Company details
Legal name, role under Directive 2014/53/EU, country, EU contact.
2
Product classification
Determines applicable requirements: Art. 3(3)(d), (e) and/or (f).
3
Cybersecurity assessment
EN 18031 categories: access control, authentication, secure comms, updates, vulnerability management.
4
Risk assessment
Structured risk table per applicable requirement.
5
EU Declaration of Conformity
Art. 18 + Annex VI. Basis for CE marking.
6
Download ZIP
5 PDFs. Add to technical file. Retain 10 years (Art. 10(4)).

Three mistakes drone manufacturers make about RED cybersecurity

COMMON ERROR

"Drones are aviation — fully exempt from RED cybersecurity"

PARTIALLY WRONG. Art. 2(2)(a) exempts from Art. 3(3)(e) and (f). It does NOT exempt from Art. 3(3)(d). If your drone communicates over the internet, Art. 3(3)(d) applies in full.

COMMON ERROR

"Consumer drones under 250g are exempt from all aviation regulation"

EASA categories are based on risk level. Even in the Open category, a drone is radio equipment under Directive 2014/53/EU if it emits radio waves. Art. 3(3)(d) applies regardless of EASA category.

COMMON ERROR

"FCC Part 107 compliance covers EU requirements"

FAA Part 107 governs US unmanned aircraft operations. FCC Part 15 covers radio emissions. Neither addresses Art. 3(3)(d). EU and US drone regulations are separate systems.

What's in the ZIP

5 PDF documents per product model. Each cites the exact article of Directive 2014/53/EU that it covers.

1

Product Classification

Art. 1, Del. Reg. (EU) 2022/30 + Art. 3(3), Dir. 2014/53/EU.

2

Cybersecurity Technical Documentation

Art. 21 + Annex V.

3

Risk Assessment

Arts. 3(3)(d) and (e).

4

EU Declaration of Conformity

Art. 18 + Annex VI.

5

Simplified Declaration + Label

Art. 10(9) + Annex VII.

Look before you buy — Download sample dossier (PDF, fictitious product)

Generated from your data, in your browser. No product data leaves your computer.

What you pay

🧾 EU CONSULTANCY
$10,000–18,000
Per drone model. Months. Drone regulation expertise is scarce.
✓ REDCHECK
€99
5 documents. 30 minutes. Covers Art. 3(3)(d) network protection.

Technical documentation and the aviation exemption: what's covered

● IN SCOPE

Art. 3(3)(d) — network protection

Your drone must not harm the network. Documentation under Art. 21 and Annex V is required. REDCheck generates it.

∅ EXEMPT

Art. 3(3)(e) and (f) — personal data and fraud

If your drone falls under Regulation (EU) 2018/1139, Art. 2(2)(a) exempts it from Art. 3(3)(e) and (f). HOWEVER: if your drone is a consumer product NOT regulated under 2018/1139, this exemption does not apply and all three requirements are in scope.

REDCheck generates documentation covering all applicable requirements — whether (d) only or (d), (e) and (f).

What happens without cybersecurity documentation

Drones face dual regulatory scrutiny: aviation authorities (EASA) and radio equipment market surveillance authorities.

🇪🇺
Market withdrawal
Immediate

Arts. 40(1), 40(4) and 43 of Directive 2014/53/EU.

🇩🇪
Germany — BNetzA + LBA
€3,000–€30,000

BNetzA (radio equipment) + Luftfahrt-Bundesamt (aviation). Dual enforcement.

🛒
Amazon / marketplace removal
Revenue loss

Amazon requires conformity documentation for drone listings.

Alternatives

AlternativeCostWhat you get
EU drone compliance consultancy$10,000–18,000/modelScarce expertise. Months.
Assume full aviation exemption$0WRONG. Art. 3(3)(d) is NOT exempt.
Assemble documentation yourself$0 (your time)EN 18031-1 has 200+ pages.
REDCheck€995 documents, 30 min. Covers Art. 3(3)(d). If (e) and (f) apply, covers those too.

Manufacturing more than one drone model?

Professional Pack: €999 for 70 generations.

Request volume pricing
Reply within one business day.

What REDCheck guarantees and what it does not

REDCheck generates a document structured under Art. 21 and Annex V of Directive 2014/53/EU based on the information you enter. The truthfulness, accuracy and completeness of that information is your responsibility as manufacturer of the radio equipment.

We guarantee that the document structure follows Art. 21 and Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date.

REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.

Frequently asked questions

My drone uses 4G/5G for remote piloting. Is that 'internet-connected'?
Yes. A cellular modem communicates over the internet via the mobile network. Art. 1(1) applies Art. 3(3)(d). A 4G/5G connection is a direct internet connection.
My drone streams live video to a cloud server. Does Art. 3(3)(e) apply?
Depends on the aviation exemption. If your drone falls under Regulation (EU) 2018/1139, Art. 2(2)(a) exempts from Art. 3(3)(e). If your drone is a consumer product NOT under 2018/1139, Art. 3(3)(e) applies if the video contains personal data.
Does a consumer camera drone under 250g need this documentation?
If it communicates over the internet (WiFi or cellular), Art. 3(3)(d) applies regardless of weight. The 250g threshold is an EASA boundary, not a Directive 2014/53/EU boundary.
What happens when the CRA replaces RED?
Delegated Regulation (EU) 2022/30 will be repealed from 11 December 2027.
Is it a subscription?
No. One-time payment. Each license includes a 30-day editing window and up to 10 regenerations. The 5 PDF documents you download are yours permanently.
Can I request a refund?
Under Art. 16(m) of Directive (EU) 2011/83 on consumer rights, by activating the license you give express consent to the immediate generation of the digital content, waiving the 14-day right of withdrawal. Refunds are accepted only for reproducible technical failures reported to hello@solidwaretools.com within 14 days of purchase.
What if the regulation changes?
If Directive 2014/53/EU, Delegated Regulation (EU) 2022/30 or the EN 18031 standards change during your license validity period, you can regenerate the documents with the updated version of the generator at no additional cost.
⚠️ Important notice: REDCheck is a documentary self-assessment tool, not legal advice or a third-party audit. The document is generated from the data you enter. The accuracy of the data is your responsibility under Art. 10(1) of Directive 2014/53/EU. REDCheck does not replace a conformity assessment by a Notified Body where required under Art. 17(4) of the Directive.

The aviation exemption does not cover Art. 3(3)(d). Your drone needs network protection documentation. Generate it in 30 minutes.

Five PDF documents. Art. 21 and Annex V fully structured. Directive 2014/53/EU. Your product data never leaves your computer.

€99 per product
One-time payment · No subscription · 30 minutes · 10 regenerations · 30-day editing window · Professional Pack: €999
Generate my RED documentation — €99
✓ Last regulatory check: 6 May 2026 · No substantive changes detected · View history