CRA COMPLIANCE · EN

Cyber Resilience Act — from your first assessment to retained evidence

Understand your product's scope, classify its core functionality and organise operational work. CRACompliance connects free checkers, focused assessments, implementation materials and a product evidence workspace.

Start with the facts

One product does not always mean one identical release at every customer. Identify the product, release and deployment before interpreting a vulnerability or reporting obligation.

Check scope before classification and conformity route selection.
Track an SBOM against the release it actually describes.
Record findings, human decisions, remediation and supporting evidence.

Article 14 is operational

Manufacturers' reporting obligations apply from 11 September 2026. Capture awareness independently of the SRP interface and preserve the legal 24-hour and 72-hour clocks. Most other CRA obligations apply from 11 December 2027.

Choose the next step

Use a free checker to identify uncertainty, a self-assessment to structure gaps, an implementation pack to prepare procedures, or Workspace for ongoing product and evidence work. None replaces the manufacturer's decisions or a required third-party assessment.