Cyber Resilience Act, explained

Short articles on the EU CRA: every claim checked against the Official Journal text (CELEX 32024R2847), the same corpus the free applicability check runs on.

Deadlines

CRA timeline: what applies when

Market surveillance is already live, reporting duties start September 2026, full application December 2027, plus the work you must do before each date.

Scope

Does the CRA apply to SaaS?

Pure cloud services usually escape; shipped client software doesn't. Where the line actually sits.

Enforcement

CRA fines explained: €15M, €10M, and who owes which

Article 64 has two brackets. Which one applies to you depends on your role: manufacturers face the larger one.