WEIMI / EU EQUIPMENT BUYING BRIEF
The published date
is not the repeal date.
Wireless configuration. Applicable scope. A file that survives the transition.
EU PROCUREMENT CHAPTER 1
Introduction
A connected vending quote can name Wi-Fi, a cloud dashboard and an optional payment terminal while saying very little about the radio equipment evidence for the delivered configuration. The problem becomes sharper when a buyer sees that the EU has published a repeal of its delegated radio cybersecurity regulation. Does that mean a 2026 order no longer needs the relevant review? The official text answers that timing question: the repeal takes effect on 11 December 2027, not when it was published in 2026.
This article helps equipment buyers structure an EU-facing procurement file around that transition. Its focus is the model, radio configuration, applicable requirements and documented date assumptions. It is separate from an incident-reporting plan or a venue Wi-Fi survey. Those operational reviews matter, but neither determines the regulatory evidence for placing a proposed product on the market.
We use three actual WEIMI public listings as functional candidates: a single-door AI vision fridge, a WM22 snacks-and-drinks machine and a WM22-W employee-system dispenser. They are a procurement shortlist based on published functions. We have not assessed their conformity, tested their cybersecurity or reviewed their confidential technical files. No product in this guide receives an EU compliance approval.
EU PROCUREMENT CHAPTER 2
Quick Answer
For a 2026 EU connected-vending order, ask the supplier for a configuration-specific radio-equipment scope assessment and the corresponding conformity documentation. Do not treat the 2026 publication of Regulation (EU) 2026/339 as an immediate cancellation of the cybersecurity requirements activated by Regulation (EU) 2022/30.
The consolidated 2022/30 text sets application from 1 August 2025. Article 1(1) concerns radio equipment that can itself communicate over the internet, directly or via other equipment. Other paragraphs activate additional requirements under specified data-processing and money-transfer conditions. A buyer should obtain the supplier’s reasoned mapping for the proposed architecture rather than applying every paragraph to every machine by default.
The repeal is effective from 11 December 2027. The repeal regulation also explains that market surveillance and control are not removed for equipment placed on the Union market in the stated 1 August 2025–10 December 2027 period and subject to those requirements. Keep dated evidence; a future transition does not make the current file disposable.
EU PROCUREMENT CHAPTER 3
Comparison Table
This comparison identifies what each public workflow makes worth asking. It does not claim that any candidate has already completed the necessary conformity review. Connectivity and peripherals must be specified in the order.
| Candidate | Public workflow | Radio / data review question | Acceptance boundary |
|---|---|---|---|
| Single-door AI vision fridge | Packaged retail, camera checkout, cloud management | Which Wi-Fi or cellular configuration, recognition processing and payment components are delivered? | Architecture and applicable conformity evidence remain to be obtained |
| WM22 snacks & drinks | Touchscreen selection, configurable dispensing, remote operation | Which communications hardware and terminal options belong to the quoted unit? | Do not infer a tested radio configuration from a touchscreen or cloud description |
| WM22-W PPE employee system | Staff-card permissions, issue limits, downloadable reports | How do listed 4G/Wi-Fi, employee records and the proposed integration fit the assessment? | Employee-system functionality is not privacy or radio-conformity certification |
EU PROCUREMENT CHAPTER 4
Who Should Buy This
This brief is intended for EU importers, distributors and operators ordering connected machines, as well as purchasing teams preparing a multi-site equipment specification. It is particularly relevant when a standard cabinet receives a different communications module, payment terminal or software integration for the destination market.
Bring the supplier’s compliance contact into the conversation alongside sales and venue IT. Sales can explain the proposed functions, the technical team can describe the communications architecture, and the responsible compliance reviewer can identify the relevant evidence. A venue network approval and a product conformity review have different purposes. Neither should silently stand in for the other.
International buyers outside the EU can use the evidence structure without assuming the EU timeline applies to their country. Request the destination-specific requirements. The same family name can cover different commercial configurations, and a statement made for one market may not describe the equipment supplied to another.
EU PROCUREMENT CHAPTER 5
How We Evaluate Smart Vending Machines
The evaluation is a public-source desk review. We read the European Commission RED overview, the consolidated Regulation (EU) 2022/30 text identified by EUR-Lex and the authentic repeal Regulation (EU) 2026/339. We also checked the three public product pages. We did not conduct penetration testing, certify software, inspect radio test reports or evaluate a notified body’s work for a WEIMI model.
Evaluate the evidence chain, then the product fit
Start with the intended dispensing journey and the exact configuration. Next, connect cabinet identity, communications equipment, supplied software and peripherals to the supplier’s applicability assessment. Ask what is covered by the declaration and supporting evidence, and where another provider’s documentation is required. Record unresolved mappings instead of turning a document bundle into a pass mark.
An additional certificate with an impressive seal is not necessarily the document the assessment requires. The Commission’s RED page warns that voluntary or additional certificates are generally not a recognised means of proving compliance under EU harmonisation law, while distinguishing legitimate notified-body conformity assessment within the body’s notified competence. This does not mean every product needs the same third-party route. Ask which procedure applies and why.
The criterion for a useful answer is traceability: can a reviewer connect the evidence to the offered model and configuration? This article provides questions for that review and no verdict on any supplier’s conformity status.
EU PROCUREMENT CHAPTER 6
Key Buying Factors
1 / Map direct and indirect internet communication
The wording of Article 1(1) includes communication directly or via other equipment. Therefore, “the cabinet uses a gateway” is not, by itself, a complete scope explanation. Ask how each radio element communicates and which product is being assessed. A router, controller and payment terminal may have separate identities even when the buyer receives one invoice.
2 / Establish the data and transaction conditions
Article 1(2) is conditional on the specified ability to process personal, traffic or location data and identifies categories including internet-connected radio equipment. Article 1(3) concerns internet-connected radio equipment enabling transfers of money, monetary value or defined virtual currency. Have the responsible reviewer map the actual design to the text, including applicable derogations. Do not assume that an employee badge, camera or cashless logo settles the complete analysis.
3 / Freeze the offered configuration
Put communications hardware, terminal option, controller designation and software baseline into the proposal record. A module document may be relevant evidence, but its presence does not establish that the complete assembled configuration has been assessed appropriately. Ask the supplier to explain the relationship rather than accepting either “module certificate proves everything” or “all module evidence is irrelevant.”
4 / Preserve the market-date reasoning
Order, manufacture, shipment, installation and placing on the market are different milestones. Do not substitute a purchase-order date for a regulatory milestone without a reasoned assessment. For an order spanning late 2027, ask the responsible economic operator to document its date assumptions and the applicable evidence route. This guide does not decide that date for a shipment.
5 / Use standards references precisely
If a supplier relies on harmonised standards, request the exact references, versions and applicability explanation, including relevant limitations. A generic “EN compliant” line is too vague for model matching. This article does not prescribe a current harmonised-standard list or claim that using a named standard automatically resolves every requirement.
EU PROCUREMENT CHAPTER 7
Best Smart Vending Machines
The best candidate depends on whether the project needs open-door packaged retail, controlled dispensing or staff-authorised supply issue. These three listings offer different operating routes. They are not a security ranking, independent test result or declaration that the regulatory questions are closed.
FUNCTIONAL CANDIDATE 1
WEIMI Single-Door AI Vision Smart Fridge
The public page describes an open-door packaged-drinks and compatible-snacks workflow, camera-based checkout and cloud management. It lists Wi-Fi or 3G/4G SIM connectivity subject to local network compatibility, and requires project confirmation of the payment terminal and transaction workflow. This makes it a relevant candidate for a browsable retail assortment with several items in one shopping session.
The procurement file should connect the communications option to the recognition and payment architecture actually offered. Ask where the relevant processing occurs, what records are associated with transactions and which supplier owns each element. These are scope inputs, not claims that the camera performs facial recognition or that every data field is personal data.
Before selecting it, use real packaged products for recognition and take-and-return demonstrations. Confirm cooling for the actual stock. The cabinet does not squeeze juice; a product-page label cannot turn it into a beverage-preparation machine. A successful checkout demo also does not prove radio cybersecurity conformity.
Read the public product listingFUNCTIONAL CANDIDATE 2
WEIMI WM22 Touchscreen Snacks & Drinks Machine
The WM22 listing describes a 21.5-inch touchscreen, remote-operation functions and optional slot arrangements including spiral, conveyor belt, direct push and hanging slots. It is a starting point for a defined assortment where the customer selects a product and the configured mechanism delivers it.
The selected channels and payment options belong in the quotation. So does the communications hardware: a cloud-management description alone is not the identity of the radio equipment to be assessed. Ask the supplier to link the offered communications and terminal configuration to the conformity file, rather than assuming the familiar WM22 model name answers every scope question.
Test the product path with actual packs and request pickup, delivery-failure and payment-exception behaviour. These functional checks help select the cabinet. They should be retained alongside, rather than mistaken for, the market-specific conformity review. We do not use inconsistent generic capacity or energy claims from the public page to establish a guaranteed specification.
Read the public product listingFUNCTIONAL CANDIDATE 3
WEIMI WM22-W PPE Employee-System Vending Machine
The listing identifies the WM22-W PPE model and describes staff-card access, role-based purchasing permissions, configurable issue limits and remotely downloadable transaction reports. Its specification table names a 4G/Wi-Fi module. It is relevant to a controlled workplace-supplies programme with an approved item list and a named policy owner.
Employee-linked records and a proposed integration make the data-processing map especially important. Ask which records are held at the cabinet and elsewhere, which supplied components communicate over the internet and how the responsible reviewer applies the relevant requirements. The availability of an SDK or interface discussion does not establish that a specific corporate integration is already delivered or approved.
Test permitted and denied users, issue limits and account changes using a scoped demonstration. Preserve the employer’s safety and emergency-access arrangements. The dispenser is not PPE certification, and workplace access controls do not by themselves establish GDPR or radio-equipment conformity.
Read the public product listingEU PROCUREMENT CHAPTER 8
Feature Comparison
| Evidence field | AI fridge | WM22 refreshments | WM22-W supplies |
|---|---|---|---|
| Functional selection | Open-door camera checkout listed | Touchscreen and configured dispensing listed | Staff-card permissions and limits listed |
| Published connectivity | Wi-Fi / 3G/4G SIM listed with compatibility condition | Remote management listed; exact radio hardware to confirm | 4G/Wi-Fi module listed |
| Data-map starting point | Recognition session, transaction and cloud components | Controller, product selection, terminal and cloud components | Employee-linked issue records, permissions and integration |
| Conformity conclusion | Not established by this guide | Not established by this guide | Not established by this guide |
Avoid making the absence of a public detail into a negative product claim. Ask for the missing item in the technical offer. Equally, do not treat a publicly described function as proof of an unlisted security control, support duration, market approval or certification.
EU PROCUREMENT CHAPTER 9
Cost & ROI Analysis
The reviewed product pages do not establish a universal cost for a radio-equipment conformity review. Obtain quotations for the exact assessment scope and separate them from machine price, payment integration, connectivity service and installation. Some evidence work may already be included in the supplier’s offer; avoid paying twice for a vaguely named “certificate package.”
Hypothetical evidence-review allowance
Assume a six-cabinet pilot needs 12 hours of technical/compliance review at €85 per hour, three hours of supplier coordination at €55 per hour and two hours of record assembly at €40 per hour. The assumed total is €1,020 + €165 + €80 = €1,265, or about €210.83 per cabinet when allocated equally. These are invented planning rates and hours, not WEIMI prices, market averages or a complete conformity-assessment budget.
| Scenario input | Hypothetical cost | Interpretation |
|---|---|---|
| Initial review allowance | €1,265 | Budget input only; scope and supplier inclusion must be confirmed |
| One later configuration change: 4 hours × €85 plus 2 × €55 | €450 | Illustrates possible review effort, not an automatic legal retesting requirement |
| Assumed €900 reserve minus initial allowance | −€365 | Shows the reserve would be insufficient under these assumptions |
Do not attach a revenue uplift, avoided fine or guaranteed customs saving to this worksheet. ROI needs actual operating contribution and investment inputs. The commercial benefit sought here is a clearer decision and fewer unresolved configuration questions, not a numerical promise that documentation produces sales.
For a portfolio purchase, separate common evidence from country, site or configuration-specific work. Reusing a documented identical configuration can simplify administration, but changing the radio module or payment arrangement may require a fresh applicability review. Request the supplier’s view before extrapolating one pilot file to the whole fleet.
EU PROCUREMENT CHAPTER 10
Best Choice by Scenario
A 2026 EU pilot with wireless cloud management
Choose the functional format that fits the assortment, then obtain the current configuration-specific RED assessment. The announced future repeal does not justify leaving current evidence blank. A pilot can begin with a small, clearly identified configuration rather than a large bundle of unselected options.
An employee-supplies station with named records
The WM22-W is the functional starting point when staff authorisation and issue limits matter. Resolve the personal-data and communications architecture with the responsible reviewer before treating the integration as an accepted scope. The review should describe actual fields and components, not infer a compliance answer from the phrase “employee system.”
A retail rollout crossing December 2027
Request a delivery and market-placement plan that distinguishes the equipment groups and date assumptions. The Commission states that the CRA’s main obligations apply from 11 December 2027, when the delegated RED cybersecurity repeal becomes effective. Do not write that as a universal grace period for all CRA obligations or an exemption for every older cabinet.
A wired-only proposed configuration
Have the supplier document whether the product actually contains radio equipment and the applicable legislation. This article’s delegated-radio discussion cannot decide the status of a wired-only unit from a sales label. Removing Wi-Fi from one menu is not proof that no radio hardware remains.
EU PROCUREMENT CHAPTER 11
Applications
For a distributor, attach a configuration register to each purchase batch: cabinet model, communications module, terminal option, software baseline, responsible economic operator and evidence reference. Link substitutions to that register before dispatch. This helps prevent a replacement module from inheriting an earlier file simply because the exterior cabinet looks the same.
For a venue operator, keep the installation network plan separate but cross-referenced. The venue can decide how equipment joins its network while the product supplier explains its conformity scope. Capture dependencies such as an external gateway without implying that the gateway removes indirect internet communication from the regulatory wording.
For a manufacturing site, document the WM22-W employee-system integration as an explicit configuration rather than a generic “API supported” line. A requested interface, a delivered interface and an approved data process are different milestones. Assign an owner to each before using reports in the operating workflow.
For a purchase scheduled around the future transition, preserve today’s evidence and update the review at relevant milestones. Recital 5 of the repeal regulation explains the continued market-surveillance position for relevant equipment placed on the market during the stated earlier period. Do not discard the file when a later regulation becomes applicable.
EU PROCUREMENT CHAPTER 12
FAQ
Has the RED cybersecurity delegated regulation already been cancelled for a 2026 order?
The repeal regulation was published in 2026, but its Article 1 sets repeal with effect from 11 December 2027. The current procurement review should preserve that distinction.
Does using a gateway automatically remove the equipment from the internet-connected category?
Article 1(1) explicitly includes radio equipment communicating over the internet directly or via other equipment. Obtain a configuration-specific scope assessment; a gateway is not a complete answer on its own.
Does every vending machine trigger all three activated requirements?
No such conclusion is established here. The text uses different conditions for network protection, specified data processing and money transfer, with derogations. The responsible reviewer must map the actual product and architecture.
Does a radio-module certificate prove the whole delivered machine is compliant?
Module evidence may be relevant, but the supplier must explain how it fits the conformity assessment of the offered configuration. This guide does not accept or reject a complete technical file.
Does the future repeal erase evidence duties for earlier equipment?
The repeal regulation explains that Union market surveillance and control are not affected for equipment placed on the market in the specified earlier period and subject to the relevant requirements. Keep the associated records.
Are the three WEIMI products certified by this article?
No. They are functional candidates based on public listings. No conformity file, cybersecurity test or market approval for these products has been established here.
EU PROCUREMENT CHAPTER 13
Final Recommendation
Buy a clearly defined configuration and a traceable evidence explanation. For an EU wireless connected-vending proposal, request the applicable scope mapping, supplier documentation and market-date reasoning before approving substitutions. Keep functional acceptance, venue network approval and product conformity evidence visible as related but distinct decisions.
The most valuable date distinction in this brief is simple: a repeal published in 2026 takes effect in December 2027. That does not approve a product, remove all other RED requirements or settle every CRA obligation. Use the official text and the responsible reviewer for the actual order.
Sources and boundaries
European Commission RED overview · Consolidated Regulation (EU) 2022/30, identified version 27 October 2023 · Regulation (EU) 2026/339, Article 1 and recital 5
Official and product pages checked 8 October 2026. Consolidated EUR-Lex text is a documentation tool; authentic legal acts remain the authoritative texts. This brief gives purchasing questions and sourced date/scope information. It does not provide a model-specific legal classification, conformity approval, privacy assessment, current standards list or cybersecurity certification.
EU PROCUREMENT CHAPTER 14
CTA
Send WEIMI the destination country, intended retail or employee-issue workflow, product samples, cabinet quantity, proposed communications option and payment or identity integration. Include the expected delivery schedule and identify the contact responsible for the market-specific documentation review.
Request a configuration-specific quotation that connects the equipment identity, radio hardware, supplied software, applicable documentation and unresolved questions. Ask how a module, terminal or integration substitution would be handled before the order changes.
Request a documented configuration proposal →
A product shortlist starts the discussion. A documented configuration lets the buyer make the next decision with the right evidence.
