Does EU CRA apply to your company?
Required by law when: We sell into the EU or handle EU residents' data + We ship software or connected products into the EU (not browser-only SaaS)
EU CRA (Reg. 2024/2847) — products with digital elements on the EU market; 24-hour early warning of actively exploited vulnerabilities from 2026-09-11, full conformity 2027-12-11
See the full list for this profileA prioritization aid, not legal advice. Every basis is shown so your counsel can check it.