Directive 2014/53/EU · Del. Reg. 2022/30Generate my documentation — €99
ACTIVE — Enforcement tracker · Deadline dashboard · Transposition status — Updated weekly from EUR-Lex, Safety Gate, OEIL & 12 official sourcesView regulatory intelligence →

Your FCC certification does not cover EU cybersecurity requirements. Directive 2014/53/EU and Delegated Regulation (EU) 2022/30 require separate documentation for your smart home hub before it can be marketed in Europe.

You sell a WiFi + Zigbee + BLE smart home hub. FCC certified, selling well in the US. Amazon DE, FR and IT account for 18% of revenue. Then the email arrives: 'Missing cybersecurity documentation under Directive 2014/53/EU. Provide within 30 days.' Your European consultancy quotes $15,000–$20,000 and 3–6 months. REDCheck generates the 5 PDF documents your hub needs under Art. 21 and Annex V. 30 minutes. €99. No consultant required.

Generate my RED documentation — €99Free: does my product need RED cybersecurity documentation?

€99 one-time payment · 5 PDF documents in ZIP · 30 minutes · 100% in your browser

Directive 2014/53/EU · Art. 3(3)(d)(e)(f) · Art. 21 + Annex V · Art. 18 + Annex VI · Art. 10(9) + Annex VII · Delegated Reg. (EU) 2022/30 · EN 18031-1, -2, -3

EU cybersecurity requirements for US smart home hubs: the data

Delegated Regulation (EU) 2022/30 activated the cybersecurity requirements of Art. 3(3)(d) and (e) for all internet-connected radio equipment marketed in the EU.

0%
Percentage of FCC cybersecurity requirements that satisfy Art. 3(3)(d) and (e) of Directive 2014/53/EU. They are entirely separate regulatory frameworks
5 documents
Classification, technical documentation, risk assessment, EU declaration of conformity, simplified declaration + label
30 days
Typical deadline Amazon gives to provide missing documentation before listing suspension

What REDCheck does with your smart home hub data

You enter your product specifications. REDCheck structures the cybersecurity documentation requirement by requirement, following the EN 18031 categories.

1
Company details
Legal name, role under Directive 2014/53/EU (manufacturer, Art. 10), country of manufacture, EU contact.
2
Product classification
Determines which essential requirements apply: Art. 3(3)(d) (network protection) for all internet-connected equipment. Art. 3(3)(e) (personal data) if your hub processes personal data.
3
Cybersecurity assessment
Requirement-by-requirement review mapped to EN 18031-1 (network) and EN 18031-2 (personal data) categories: access control, authentication, secure communications, software updates, vulnerability management.
4
Risk assessment
Assessment of implementation status for each applicable requirement of Arts. 3(3)(d) and (e). Maps your answers to a structured risk table.
5
EU Declaration of Conformity
Formal declaration under Art. 18 and Annex VI. Signed by the manufacturer. Basis for CE marking under Arts. 19–20.
6
Download ZIP
5 PDF documents generated in your browser. Add to your technical file alongside test reports and user manual. Retain for 10 years (Art. 10(4)).

Three mistakes US companies make about EU cybersecurity

COMMON ERROR

"FCC certification covers cybersecurity"

FCC Part 15 regulates electromagnetic emissions and radio frequency interference. It does not address cybersecurity, personal data protection or network protection. The EU cybersecurity requirements under Art. 3(3)(d), (e) and (f) of Directive 2014/53/EU have no equivalent in FCC regulations. They are completely separate obligations.

COMMON ERROR

"Our Zigbee hub doesn't connect to the internet"

If your hub connects to a WiFi network that has internet access, it communicates over the internet indirectly. Art. 1(1) of Delegated Regulation (EU) 2022/30 covers both direct and indirect internet connectivity. A Zigbee/BLE hub that bridges to the cloud via WiFi is internet-connected radio equipment.

COMMON ERROR

"We can wait — the EU is a small market for us"

Amazon processes listing suspensions automatically. Once your 30-day notice expires, listings come down across all EU Amazon stores simultaneously. Reinstating requires documentation upload, review and re-approval — typically 2–6 weeks of zero EU revenue.

What's in the ZIP

5 PDF documents generated from your smart home hub data. Each cites the exact article of Directive 2014/53/EU that it covers.

1

Product Classification

Art. 1, Del. Reg. (EU) 2022/30 + Art. 3(3), Dir. 2014/53/EU.

2

Cybersecurity Technical Documentation

Art. 21 + Annex V. Requirement-by-requirement documentation.

3

Risk Assessment

Arts. 3(3)(d) and (e). Structured risk table.

4

EU Declaration of Conformity

Art. 18 + Annex VI.

5

Simplified Declaration + Label

Art. 10(9) + Annex VII.

Look before you buy — Download sample dossier (PDF, fictitious product) — Real structure, real articles, real format. Fictitious data.

Generated from your data, in your browser. No product data leaves your computer.

What you pay

🧾 EU CYBERSECURITY CONSULTANCY FROM THE US
$15,000–$20,000
3–6 months. Does not include lab testing.
✓ REDCHECK
€99
5 documents. 30 minutes. Self-service.

Technical documentation and third-party testing: two layers

● LAYER 1

Cybersecurity technical documentation (Annex V)

5 PDF documents. 30 min. €99 per product. The documentation that Art. 21 requires BEFORE your product can bear CE marking.

∅ LAYER 2

Conformity assessment by a Notified Body

If you fully apply EN 18031, you can self-declare via Module A (Annex II) without a Notified Body. If you partially apply or don't apply the harmonised standards, Art. 17(4) requires third-party involvement. REDCheck does not replace a Notified Body — it generates the documentation that is a prerequisite for any conformity route.

We do not sell testing. We do not sell consulting. We sell the tool that structures your cybersecurity documentation under Art. 21 and Annex V.

What happens without cybersecurity documentation

Art. 46 of Directive 2014/53/EU requires Member States to establish penalties that are effective, proportionate and dissuasive.

🛒
Amazon EU listing suspension
30 days notice

Amazon EU requires cybersecurity conformity documentation. Missing documentation triggers a 30-day compliance notice, then automatic suspension across DE, FR, IT, ES and NL.

🇩🇪
Germany — largest EU market
€3,000–€30,000

Produktsicherheitsgesetz §19 fines. Up to 1 year imprisonment for serious offences (§20). Germany accounts for ~25% of EU Amazon electronics sales.

🇪🇺
EU-wide withdrawal
Immediate

Art. 40 of Directive 2014/53/EU. Market surveillance authorities can require withdrawal across all 27 Member States.

Alternatives

AlternativeCostWhat you get
EU consultancy hired from the US$15,000–20,0003–6 months. Custom report.
Ask your Hamburg importer to handle itVariableThey'll pass the cost on or drop you.
Lose EU revenue until compliance$0 in fees30+ days of zero EU sales = $X,XXX lost.
REDCheck€995 documents, 30 min

Selling multiple smart home products in the EU?

Hub, sensors, cameras, plugs — if you document 10+ products, the Professional Pack covers 70 generations for €999.

Request volume pricing
Reply within one business day.

What REDCheck guarantees and what it does not

REDCheck generates a document structured under Art. 21 and Annex V of Directive 2014/53/EU based on the information you enter. The truthfulness, accuracy and completeness of that information is your responsibility as manufacturer of the radio equipment.

We guarantee that the document structure follows Art. 21 and Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case, nor by a commercial buyer in a procurement process.

REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.

Frequently asked questions — EU cybersecurity for US smart home products

I have FCC certification. What exactly is missing for the EU?
FCC certification covers electromagnetic emissions (Part 15) and, for some products, radio frequency exposure (SAR). The EU cybersecurity requirements under Art. 3(3)(d) and (e) of Directive 2014/53/EU address network protection, access control, authentication, secure software updates, vulnerability management and personal data protection. These are separate from EMC and safety. You need: cybersecurity technical documentation (Art. 21 + Annex V), an EU declaration of conformity covering cybersecurity (Art. 18 + Annex VI), and a simplified declaration with label (Art. 10(9) + Annex VII).
Does my product need a Notified Body or can I self-declare?
If you fully apply the harmonised standards EN 18031-1, EN 18031-2 and, where applicable, EN 18031-3, you can use Module A (self-declaration, Annex II) under Art. 17(3)(a) of Directive 2014/53/EU. No Notified Body required. If you partially apply or do not apply the standards, Art. 17(4) requires a Notified Body (Module B+C or Module H). REDCheck generates the documentation for both routes.
My hub processes voice commands — does Art. 3(3)(e) apply?
If voice commands are linked to identifiable users (via accounts, email, device IDs), the processing constitutes personal data processing under Art. 4(1) of GDPR. Art. 1(2)(a) of Delegated Regulation (EU) 2022/30 applies Art. 3(3)(e) to internet-connected radio equipment that processes personal data. A smart home hub with voice recognition and user accounts triggers both Art. 3(3)(d) and (e).
Is it a subscription?
No. One-time payment. Each license includes a 30-day editing window and up to 10 regenerations. The 5 PDF documents you download are yours permanently.
Can I request a refund?
Under Art. 16(m) of Directive (EU) 2011/83 on consumer rights, by activating the license you give express consent to the immediate generation of the digital content, waiving the 14-day right of withdrawal. Refunds are accepted only for reproducible technical failures reported to hello@solidwaretools.com within 14 days of purchase.
What if the regulation changes?
If Directive 2014/53/EU, Delegated Regulation (EU) 2022/30 or the EN 18031 standards change during your license validity period, you can regenerate the documents with the updated version of the generator at no additional cost.
⚠️ Important notice: REDCheck is a documentary self-assessment tool, not legal advice or a third-party audit. The document is generated from the data you enter. The accuracy of the data is your responsibility under Art. 10(1) of Directive 2014/53/EU. REDCheck does not replace a conformity assessment by a Notified Body where required under Art. 17(4) of the Directive.

Don't wait for the consultant. Generate the cybersecurity documentation for your smart home hub in your browser in 30 minutes.

Five PDF documents. Art. 21 and Annex V fully structured. Directive 2014/53/EU. Your product data never leaves your computer. The ZIP you download is yours permanently.

€99 per product
One-time payment · No subscription · 30 minutes · 10 regenerations · 30-day editing window · Professional Pack: €999
Generate my RED documentation — €99
✓ Last regulatory check: 6 May 2026 · No substantive changes detected · View history