Scope
Summary
This Regulation applies to products with digital elements whose intended or reasonably foreseeable use includes a data connection to a device or network, with carve-outs for medical devices, vehicles, aviation-certified products, maritime equipment, spare parts, and national security/defence products.
scopeexclusionsmedical devicesnational security
Read the full official text: https://www.cyberresilienceact.eu/regulation.html
Track CRA article 2 as evidence
eurocompliant maps this obligation to a checklist task and the evidence that satisfies it, alongside every other framework you follow.
Start free trial