CRA reporting obligations apply from 11 September 2026View the timeline
Evidence behind the tools

Official sources & regulatory basis

The source registry used by our decision rules and guides. Binding legislation and interpretative or operational guidance serve different purposes.

Review dates record when a source was checked. Before placing a product on the market, verify the applicable legislation, adopted measures and Official Journal references. Proposed or planned measures do not establish a current requirement.
European Commission

Exclusion for certain L-category vehicle products

Specific exclusion for products under Regulation 168/2013; the L1e designed-to-pedal exception must be checked.

Read the official source
Council

EU rules on periods, dates and time limits

General computation rules, calendar period ends and holiday provisions; relevant to distinguishing operational targets from statutory cutoffs.

Read the official source
European Parliament and Council

Cyber Resilience Act

Binding scope, economic roles, obligations, conformity routes, reporting and transition provisions.

Read the official source
European Commission

Technical descriptions of important and critical products

Technical descriptions of all Annex III and IV categories; effective 21 December 2025.

Read the official source
European Commission

Guidance on the application of the Cyber Resilience Act

Interpretative guidance on scope, open source, remote processing, modifications and reporting. Guidance does not replace the Regulation.

Read the official source
ENISA

Single Reporting Platform: frequently asked questions

Operational reporting guidance: manufacturer Article 14 reporting from 11 September 2026; steward Article 24(3) reporting from 11 December 2027 under Article 71(2).

Read the official source
European Commission

CRA implementation and conformity assessment

Current implementation context for standards, assessment routes and certification.

Read the official source