# EN 18031 Published articles for EN 18031. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## A Case Study: Building an EN 18031-Compliant IoT Solution with ESP32-C5 and ESP RainMaker DevFeed: [A Case Study: Building an EN 18031-Compliant IoT Solution with ESP32-C5 and ESP RainMaker]() Original publisher: [Read original article]() Author: John Lee Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [Blog on Developer Portal]() Topics: [ESP32](), [Internet of things](), [Security](), [Cloud](), [Security & Privacy](), [Espressif](), [Authentication](), [Authorization]() Tags: [access-control](), [authentication](), [blog](), [compliance](), [connectivity](), [cryptographic](), [data](), [data-management](), [documentation](), [en-18031](), [esp-rainmaker](), [esp32-c5](), [espressif](), [eu](), [firmware](), [iot](), [privacy](), [rainmaker](), [regulatory](), [security](), [standards](), [storage]() ### AI overview This case study describes an ESP32-C5 and ESP RainMaker device-to-cloud IoT implementation assessed against EN 18031 cybersecurity and privacy requirements for products targeting the EU market. ### Source excerpt This case study assesses device-to-cloud IoT implementation of products based on ESP32-C5 and ESP RainMaker against the EN 18031 security requirements for the EU market. ## EU Cyber Resilience Act: Vulnerability Reporting Obligations DevFeed: [EU Cyber Resilience Act: Vulnerability Reporting Obligations]() Original publisher: [Read original article]() Author: John Lee Published: 2026-09-09T00:00:00Z Content type: article Language: en Sources: [Blog on Developer Portal]() Topics: [cyber resilience act](), [Vulnerabilities](), [Espressif](), [ESP32](), [ESP-IDF](), [Security](), [EN 18031]() Tags: [blog](), [cyber-resilience-act](), [en-18031](), [esp-idf](), [esp32](), [espressif](), [eu](), [iot](), [security](), [vulnerability]() ### AI overview This article explains that the Cyber Resilience Act's vulnerability-reporting obligations begin on 11 September 2026 for connected products sold in the EU, including products already on the market. It outlines Article 14 duties, reporting recipients and the role of Espressif's platform layer for products built on ESP32. ### Source excerpt The CRA's vulnerability reporting obligations start on 11 September 2026 and apply to products already on the market, including ones sold years ago. What Article 14 requires, which duties run to whom, how reporting works through the ENISA Single Reporting Platform, and where the Espressif platform layer fits. ## RED DA Assessment Tool for ESP-IDF EN 18031 Self-Assessment DevFeed: [RED DA Assessment Tool for ESP-IDF EN 18031 Self-Assessment]() Original publisher: [Read original article]() Author: John Lee Published: 2026-03-17T00:00:00Z Content type: tutorial Language: en Sources: [Blog on Developer Portal]() Topics: [EN 18031](), [ESP32](), [ESP-IDF](), [Internet of things]() Tags: [blog](), [compliance](), [en-18031](), [esp-idf](), [esp32](), [iot](), [red-directive](), [regulatory](), [sbom]() ### AI overview This tutorial explains Espressif's RED DA Assessment Tool for ESP-IDF projects. The web application reads configuration files, scans an SBOM for known vulnerabilities, pre-fills a security questionnaire, and generates documentation for RED Delegated Act EN 18031 self-assessment. ### Source excerpt The RED DA Assessment Tool simplifies the process of achieving cybersecurity compliance for ESP32 devices in line with the EU's EN 18031 standards. This article explains how the tool helps you gather, validate, and generate all necessary documentation for RED Delegated Act self-assessment, including uploading configuration and SBOM files, completing risk assessments, mapping technical requirements, and preparing a declaration of conformity--making self-declaration fast, accurate, and accessible for IoT developers. ## ESP-ZeroCode adds RED-DA documentation support for Matter device firmware DevFeed: [ESP-ZeroCode adds RED-DA documentation support for Matter device firmware]() Original publisher: [Read original article]() Author: John Lee Published: 2025-12-08T00:00:00Z Content type: article Language: en Sources: [Blog on Developer Portal]() Topics: [Espressif](), [Matter](), [EN 18031](), [Red](), [Development](), [Framework](), [Security]() Tags: [blog](), [compliance](), [cryptography](), [en-18031](), [espressif](), [firmware](), [matter](), [ota](), [product-development](), [redda](), [zerocode]() ### AI overview Espressif describes an ESP-ZeroCode integration that generates Matter device firmware alongside a RED-DA-oriented documentation starter package. The package includes pre-filled templates covering platform security, network and secure-update mechanisms, and EN 18031 mappings; manufacturers must add device-specific information to complete the technical file. ### Source excerpt In this blog we will introduce how combining the Espressif RED-DA compliance framework along with the ESP ZeroCode platform can help accelerate your product development ## RED DA Compliance (Part 2): Espressif's Platform Support, Templates, and Pathways for Conformity DevFeed: [RED DA Compliance (Part 2): Espressif's Platform Support, Templates, and Pathways for Conformity]() Original publisher: [Read original article]() Author: John Lee Published: 2025-07-09T00:00:00Z Content type: article Language: en Sources: [Blog on Developer Portal]() Topics: [EN 18031](), [Espressif](), [Documentation](), [ESP32](), [Security](), [Embedded Software Dev]() Tags: [blog](), [compliance](), [developers](), [documentation](), [en-18031](), [esp-idf](), [esp32](), [espressif](), [eu](), [firmware](), [iot](), [partner](), [platforms](), [requirements](), [security](), [specifications](), [standard](), [technical](), [third-party]() ### AI overview Espressif's Part 2 guide describes documentation templates and support pathways for helping manufacturers prepare RED Delegated Act compliance documentation for ESP32-based products under the EN 18031 standard. The article covers self-assessment, third-party assessment, product risk documentation, applicable standards, declarations of conformity, and technical specifications. ### Source excerpt Espressif is streamlining RED Delegated Act (RED-DA) compliance by providing pre-certified firmware platforms, documentation templates, and partner support to help developers meet the upcoming EN 18031 standard. With flexible pathways including self-declaration and third-party assessments, developers can accelerate EU market readiness for Aug 2025 and beyond. ## RED DA (EN 18031) Certification Compliance: What You Need to Know DevFeed: [RED DA (EN 18031) Certification Compliance: What You Need to Know]() Original publisher: [Read original article]() Author: John Lee Published: 2025-04-08T00:00:00Z Content type: tutorial Language: en Sources: [Blog on Developer Portal]() Topics: [EN 18031](), [Cybersecurity](), [Espressif]() Tags: [blog](), [compliance](), [cybersecurity](), [en-18031](), [esp-idf](), [esp32](), [espressif](), [eu](), [guide](), [iot](), [regulatory](), [requirements](), [security](), [standards](), [wireless]() ### AI overview This guide explains how manufacturers of wireless-enabled products based on Espressif modules can assess compliance with the EU Radio Equipment Directive Delegated Act on Cybersecurity, EN 18031, and prepare for certification. It covers requirements for network connection protection, personal data and privacy, and financial fraud prevention, as well as the role of harmonized standards. ### Source excerpt This guide helps manufacturers of wireless-enabled products based on Espressif modules understand the RED DA (EN 18031) cybersecurity requirements, identify their product's category, and determine the right path to certification before launching in the EU market.