Cyber Resilience Act product classifier

Answer five questions and get the likely scope and category under Regulation (EU) 2024/2847, the route to conformity assessment and the duties that follow. Nothing is sent anywhere.

Do you make the product available on the EU market (sell, give away as part of a business, or distribute in the EU)? Is it software or hardware with a data connection to a device or network, directly or indirectly (including the remote backend that is part of the product)? Is it covered by sector rules that take it out of the Regulation (medical devices and in vitro diagnostics, motor vehicles type-approved under Regulation 2019/2144, certified civil aviation products, marine equipment under Directive 2014/90/EU, like-for-like spare parts), or made exclusively for national security, defence or classified information? Is it free and open-source software? Which description fits the core functionality of the product best? (Annex III and Annex IV)

Information generated from your inputs, with article references to Regulation (EU) 2024/2847. It is not legal advice and does not replace your own assessment; check the references against the Official Journal.

Back to CRA File