You are an electronics trade association, an IoT industry group, or an SME business cluster. Your member companies manufacture connected products — home automation, sensors, lighting systems, smart devices. Delegated Regulation (EU) 2022/30 activated the cybersecurity requirements of Article 3(3)(d), (e), and (f) of Directive 2014/53/EU on 1 August 2025. Many members believe their existing CE marking covers cybersecurity. It does not. REDCheck Professional Pack: 70 licenses, €999 one-time. 8 structured PDF documents per product. Distribute license codes to members. Each member generates their own dossier in 20 minutes.
€999 · One-time · 70 dossiers · 8 PDFs each · Your data never leaves your browser
Your members are asking for guidance. National authorities are reminding that Art. 3(3)(d)(e)(f) requirements are in force and inspections are beginning. The question is whether you offer a practical solution — or leave each member to figure it out individually.
REDCheck Professional Pack is built for organisations that represent manufacturers of connected products and want to offer Art. 3(3) cybersecurity documentation as a structured, practical member benefit.
Three inputs. Four answers. No signup required.
Every license generates a complete Art. 3(3) cybersecurity documentation package for one product. Each document cites the specific article of Directive 2014/53/EU and Delegated Regulation (EU) 2022/30 it addresses.
Classification per Delegated Regulation (EU) 2022/30: internet-connected, childcare, toy, wearable, payment-capable. Determines which Art. 3(3) requirements apply.
Assessment demonstrating the product does not harm the network or its functioning nor misuse network resources. Article 3(3)(d) of Directive 2014/53/EU.
Safeguards for the protection of personal data and privacy of the user and of the subscriber. Article 3(3)(e) of Directive 2014/53/EU.
Features ensuring protection from fraud for devices enabling transfer of money, monetary value, or virtual currency. Article 3(3)(f) of Directive 2014/53/EU.
Per Annex V of Directive 2014/53/EU. Product description, design, cybersecurity measures, conformity assessment references.
Module determination per Article 17(3) or 17(4) of Directive 2014/53/EU for the applicable Art. 3(3) cybersecurity requirements.
Per Annex VI. Manufacturer identification, product identification, applicable requirements, conformity assessment reference. Article 18.
Printable reference with CE marking requirements, manufacturer contact, applicable Art. 3(3) requirements. Articles 19 and 20.
See before you buy — Download sample dossier (PDF, fictional company) — Real structure, real articles, real format. Fictional data.
A product can have a valid CE mark for electromagnetic compatibility, electrical safety, and radio spectrum use and still lack any cybersecurity documentation. Delegated Regulation (EU) 2022/30 activated Article 3(3)(d), (e), and (f) as separate requirements on 1 August 2025. These requirements need their own technical documentation. The existing CE marking process does not produce it.
A 15-person manufacturer of smart lighting does not have a regulatory affairs department. They know they need CE marking because they have always needed it. They do not know they need separate cybersecurity documentation under Art. 3(3). When the association does not offer a practical solution, each member either ignores the requirement or pays €500-1,200 per product for external help. The association that provides a €14/product tool delivers immediate value.
Delegated Regulation (EU) 2022/30 has been applicable since 1 August 2025. The cybersecurity requirements of Art. 3(3)(d)(e)(f) are mandatory regardless of whether harmonised standards have been published. Article 17(4) provides the conformity assessment route when no harmonised standards are available. National authorities are not waiting for standards to begin inspections.
8 structured PDF documents per product. Network protection, privacy safeguards, fraud protection assessments, technical documentation, Declaration of Conformity, CE marking guidance. Generated by the member in 20 minutes from their product data. Article-by-article traceability to Directive 2014/53/EU and Delegated Regulation (EU) 2022/30.
Radio frequency testing, encryption implementation, firmware security hardening, penetration testing, protocol analysis, product certification. These are implementation-level services. REDCheck documents the cybersecurity posture — it does not create it.
REDCheck structures and documents. The association coordinates and distributes. The member implements. The three layers complement each other.
These are the consequences under Directive 2014/53/EU. This is the argument when the board asks whether Art. 3(3) documentation is a priority for the association.
Article 40 of Directive 2014/53/EU. Market surveillance authorities can require corrective measures, withdrawal from the market, or product recall if cybersecurity documentation is insufficient.
Article 43. Covers failure to produce technical documentation (Annex V), missing or incorrect EU Declaration of Conformity, and non-compliant CE marking.
Article 46. Member States impose penalties for infringement of the Directive, which may include criminal penalties for serious infringements. National authorities have begun issuing reminders that Art. 3(3)(d)(e)(f) is in force.
The members face these consequences individually. The association offers the solution collectively.
| Option | Cost for 70 products | Total time | Output quality |
|---|---|---|---|
| Each member drafts manually | Professional time × members | 560+ hours (distributed) | Variable — most SMEs lack template |
| Each member hires a consultant | €28,000–€84,000 (across members) | Depends on provider | High, but individually expensive |
| Association negotiates group rate with consultant | €20,000–€50,000 | Weeks to coordinate | High, requires data sharing |
| REDCheck Professional Pack | €999 (one-time) | ~23 hours total | Structured, Art. 3(3), article-by-article |
REDCheck generates a structured documentation package according to Article 3(3)(d), (e), and (f) of Directive 2014/53/EU and Delegated Regulation (EU) 2022/30 from the information that the user enters. The truthfulness, accuracy and completeness of that information is the responsibility of the manufacturer — the member company entering data.
We guarantee that the document structure follows Article 3(3) of Directive 2014/53/EU, Annex V for technical documentation, and Annex VI for the Declaration of Conformity, and that the legal references cited are correct as of the latest verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case.
REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.
70 licenses. 8 PDF documents per product. Art. 3(3)(d)(e)(f) structure. Browser-side. One payment.