How much does EN 18031 certification cost? I have lost count of how many exporters I have debated this with. Most people asking have no concept of budget direction or where to start estimating. Some online quotes are even more absurd, throwing out a single number without distinguishing product type or risk level. This article breaks it all down.
1. Testing Fees: The Rigid Core
EN 18031-1's 14 mechanism categories must all be tested. Based on lab data I have seen, TLS secure communication, full key lifecycle, signed firmware OTA, log auditing, and secure boot verification account for over 60% of the total labor hours. More wireless interfaces mean higher costs. Each additional Wi-Fi, Bluetooth, 4G, or LoRa interface requires a full set of communication link security test cases, adding 20% to 40%. On the flip side, multiple models in the same series with identical firmware and security architecture can use sampling tests, cutting overall test fees by 30% to 50%.
2. Notified Body Review Fees
Only applicable to the third-party path. Billed per person-day. Basic IoT sensors: 3 to 5 person-days. Children's watches and smart cameras: 6 to 10 person-days. Wireless POS and payment charging stations requiring hardware security element review: 12 to 20 person-days. Secondary review after remediation adds 50% of the base review fee. Many first-timers do not know this and assume one review is all it takes.
3. Software and Hardware Remediation Costs
The most commonly underestimated line item. Products with solid security foundations, where TLS and signed OTA are already in place, need near-zero remediation. Products with plaintext upgrades, no logging, and no key rotation face firmware reconstruction and development costs of 30,000 to 150,000 RMB. Children's devices lacking parental controls and payment devices without SE security chips face hardware revision costs of 50,000 to 200,000 RMB. The worst part: remediation is followed by separate retesting fees. Multiple rounds can double the cost.
4. Documentation Preparation
Security architecture description, threat model, penetration test report, and DPIA privacy assessment. NB review of documentation depth is not a formality. Basic -1 documentation: 8,000 to 25,000 RMB. Adding -2 with DPIA: another 10,000 to 30,000 RMB. Adding -3 financial transaction traceability: another 20,000 to 50,000 RMB. Most labs offer testing plus documentation bundles. Standalone documentation costs about 30% more.
Self-Assessment vs. NB: How to Choose
This depends on whether the (EU) 2025/138 restriction clauses are triggered. Products that enforce factory password changes, have no blank password login, and are not children's or payment devices can self-assess, generating only testing and documentation fees.
·Simple single-wireless IoT (smart bulbs, Bluetooth sensors): -1 only, self-assessment, 28,000 to 50,000 RMB.
·Multi-wireless smart home (Wi-Fi plus Bluetooth door locks and cameras): 50,000 to 90,000 RMB.
·Wearable fitness bands collecting location data: -1 plus -2, 80,000 to 140,000 RMB.
Where the NB Path Costs More
The NB path adds review fees on top of testing and documentation.
·Children's smart watches and baby monitors: -1 plus -2, 120,000 to 220,000 RMB.
·Multi-protocol industrial gateways: -1 only, 90,000 to 160,000 RMB.
·Wireless POS and payment charging stations: -1 plus -2 plus -3 full suite, 180,000 to 300,000 RMB. Only NB path available.
In the second half of 2026, lab capacity will tighten further. Rush reports within 30 days add 30% to 50% to testing fees.
Sub-standard stacking also matters. -1 is the mandatory base. -2 is privacy additive. -3 is payment additive. Each is billed separately with no volume discount. Payment devices requiring all three have the most test items and the highest SE review costs.
Real Product Examples
·Basic Bluetooth TWS earbuds, local listening only, no OTA, no data upload: exempt, zero cost.
·Smart TWS earbuds with app-based firmware upgrades, Wi-Fi plus Bluetooth, uploading fitness data: -1 plus -2, self-assessment 70,000 to 120,000 RMB, NB path 130,000 to 200,000 RMB.
·Connected payment POS, 4G, card payment, full -1 plus -2 plus -3: NB only, 180,000 to 300,000 RMB.
Annual Ongoing Compliance Costs
Many forget to budget for this. CoP (Conformity of Production) document review runs 5,000 to 15,000 RMB annually. Hardware or communication module changes trigger partial retesting of 20,000 to 80,000 RMB. Full document maintenance at the EU representative's office for 10 years costs 3,000 to 10,000 RMB per year.
Common Cost Misconceptions
1.Bluetooth earbuds are not universally exempt. Those with OTA and cloud uploads must do -1 and -2.
2.Series models are not billed as unit price times quantity. Identical firmware allows sampling and bundling.
3.Getting the EN 18031 certificate does not mean no further spending. Annual CoP and change retesting are ongoing fixed costs.
4.TLS encryption alone is not sufficient. Key lifecycle management and certificate validation are equally mandatory. Missing either means failure and additional remediation costs.
BlueAsia Testing is a Huawei HiCar authorized certification organization, recognized with the "Excellent Certification Organization" award in 2025. We provide EN 18031 cost estimation and budget optimization for exporters.
For EN 18031 cost consultation, contact BlueAsia Testing: 13632500972 (Benson)
相关新闻
