CONNECTED PRODUCTS
Cyber Resilience Act preflight for products with digital elements
CRA is phased. Reporting obligations apply from 11 September 2026; most product requirements apply from 11 December 2027.
Decision boundaryThis is a preflight. “Likely applies” still requires the official source and product facts to confirm legal scope.
QUICK ANSWER
What matters before you rely on a listing or supplier file
CRA is not one single start date. Reporting obligations began earlier than the main product requirements, so a connected-product preflight must keep current and upcoming duties separate.
WHAT TO VERIFY
The scanner focuses on these evidence questions
- Product with digital elements?
- Current reporting-process readiness
- Upcoming secure-by-design layer
- Do not mark 2027 duties as already fully applicable
INTERACTIVE PREFLIGHT
Build an evidence-gap map for your product
Answer what you know. The engine maps product features, role and sales channel to rule cards and compares them with evidence you say you already have. It does not inspect or authenticate a document.
Rules 2026.09.27-2Verified 2026-09-27
Boundary: this is an automated evidence-gap preflight, not a legal determination, conformity assessment, certificate or guarantee that a product may be sold.
Open source directory