You are a cybersecurity consultancy serving manufacturers of connected products — smart home devices, BLE wearables, WiFi sensors, industrial IoT gateways, smart locks. Delegated Regulation (EU) 2022/30 activates Article 3(3), points (d), (e) and (f) of Directive 2014/53/EU. Your clients need formal cybersecurity documentation structured per Annex V, not a vulnerability scan. REDCheck Professional Pack: 70 licenses, €999 one-time. 8 structured PDF documents per product. Generated in your browser in 20 minutes.
€999 · One-time · 70 dossiers · 8 PDFs each · Your data never leaves your browser
You know IoT security. You advise manufacturers on vulnerabilities, threat models, and secure design. Since August 2025, every internet-connected radio product needs formal cybersecurity documentation per Annex V — structured, traceable, ready for market surveillance. The clients asking for a pentest today will ask for Art. 3.3 documentation tomorrow.
REDCheck Professional Pack is built for cybersecurity professionals who serve IoT manufacturers and need to formalize Art. 3.3 documentation as a scalable service offering.
Three inputs. Four answers. No signup required.
Every license generates a complete Art. 3.3 cybersecurity documentation package. Each document cites the specific article of Directive 2014/53/EU and Delegated Regulation (EU) 2022/30 it complies with. The output is the formal regulatory deliverable — the pentest and security assessment remain the consultant's domain.
Determines which points apply to the product: (d) network protection, (e) privacy and data protection, (f) fraud protection. Based on Delegated Regulation (EU) 2022/30, Articles 1 and 2.
Complete technical file structure for cybersecurity aspects. Product description, design, development methodology. Article 21 of Directive 2014/53/EU.
Art. 3.3(d) — radio equipment does not harm the network or its functioning nor misuse network resources. Aligned with EN 18031-1.
Art. 3.3(e) — safeguards for personal data and privacy of user and subscriber. Aligned with EN 18031-2.
Art. 3.3(f) — features ensuring protection from fraud when the equipment enables monetary transfers. Aligned with EN 18031-3.
Per Annex VI of Directive 2014/53/EU. Manufacturer identification, product identification, applicable essential requirements, conformity assessment reference.
Per Annex VII of Directive 2014/53/EU. Short-form declaration with URL reference to the full Declaration of Conformity. Article 10.9.
Printable label with CE marking, manufacturer contact details, product identification. Articles 19 and 20 of Directive 2014/53/EU.
See before you buy — Download sample dossier (PDF, fictional company) — Real structure, real articles, real format. Fictional data.
Article 21 of Directive 2014/53/EU requires technical documentation per Annex V — a structured file with product description, design documentation, conformity assessment references, and test reports. A penetration test or vulnerability scan is valuable supporting evidence, but it does not satisfy the documentation requirement on its own. The importer needs both: the security analysis AND the formal dossier.
When a manufacturer receives a request from an importer or distributor for Art. 3.3(d)(e)(f) documentation, they need a deliverable structured per Annex V — not a slide deck. A cybersecurity consultancy that cannot produce formal regulatory documentation sends the client to a CE marking firm. That CE marking firm will bundle all directives and take the entire account.
Drafting Art. 3.3 documentation manually for each client takes 15-20 hours per product. At 50+ manufacturers, a senior engineer spends 1,000+ hours on documentation alone. The bottleneck is not expertise — it is production capacity. Without a structured tool, the service does not scale.
8 structured PDF documents per product. Network protection assessment (Art. 3.3(d)), privacy and data protection assessment (Art. 3.3(e)), anti-fraud assessment (Art. 3.3(f)), Declaration of Conformity, CE marking guidance. Generated from input data in 20 minutes. Article-by-article traceability to Directive 2014/53/EU and Delegated Regulation (EU) 2022/30.
Penetration testing, threat modelling, vulnerability scanning, firmware reverse engineering, secure boot implementation, SBOM generation from source code, EN 18031 laboratory testing, radio protocol security analysis. These are implementation-level services. REDCheck documents the cybersecurity posture — it does not assess it.
REDCheck structures and documents. The consultancy assesses, tests, and advises. The two layers complement each other — the security consultant fills the dossier with substance, and REDCheck provides the regulatory structure.
These are the consequences under Directive 2014/53/EU for radio equipment that does not comply with the essential requirements of Article 3(3). This is the argument to present when a client asks why formal documentation matters alongside a security assessment.
Article 40 of Directive 2014/53/EU. Market surveillance authorities can require corrective measures, withdrawal from the market, or product recall for non-compliant radio equipment.
Article 46 of Directive 2014/53/EU. Member States impose penalties for non-compliance, which may include criminal penalties for serious infringements.
Article 43 of Directive 2014/53/EU. Missing or incomplete technical documentation, absent EU Declaration of Conformity, or improper CE marking triggers formal non-compliance proceedings and prohibition from the market.
The clients face these consequences. The consultancy offers the documentation that prevents them.
| Option | Cost for 70 clients | Total time | Output quality |
|---|---|---|---|
| Manual drafting (Word templates) | Professional time only | 1,400+ hours | Variable, no Annex V-specific structure |
| Outsource to CE marking firm | €84,000-€140,000 | Depends on provider | High, but cost-prohibitive at scale |
| Enterprise SaaS platform | €8,000-€20,000/year | 2-4 weeks setup | High, requires integration |
| REDCheck Professional Pack | €999 (one-time) | ~23 hours total | Structured, Art. 3.3(d)(e)(f), article-by-article |
REDCheck generates a structured documentation package covering Article 3(3), points (d), (e) and (f) of Directive 2014/53/EU, as activated by Delegated Regulation (EU) 2022/30, according to Article 21 and Annex V, from the information that the user enters. The truthfulness, accuracy and completeness of that information is the responsibility of the manufacturer — or of the consultant entering data on their behalf.
We guarantee that the document structure follows Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case, nor by a commercial buyer in a procurement process.
REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.
70 licenses. 8 PDF documents per product. Art. 3.3(d)(e)(f) structure. Browser-side. One payment.