Regulation (EU) 2024/2847

Does the Cyber Resilience Act apply to you?

Forty-one percent of the affected market has not determined whether the CRA applies to them. This answers that, with the article each step rests on and a quote from the Official Journal, so the answer is checkable rather than assertable.

Free, no account, and nothing is stored: the determination is computed in your browser and disappears when you close the tab. It is not legal advice. It runs the same engine as legalithm cra classify, imported rather than reimplemented, so the two cannot disagree.

Article 3(1)
Article 2(1)

Direct or indirect, logical or physical, to a device or a network. Intended or reasonably foreseeable use, not just the documented one.

Article 3(22)

Paid or free. A free tool distributed by a company is still commercial; a hobby project usually is not.

Article 2(1)
Article 2(2)-(4)

These displace the CRA entirely rather than sitting alongside it.

Articles 7, 32

These set the conformity route. Most products are in neither.

Articles 13-21
Article 21

If so, you take on the manufacturer's obligations whatever your role says.

Not enough answered yet

Article 2(1) turns on the data connection test, which was not answered.

Record this determination

This page decides nothing on your behalf and stores nothing. Run this to put the determination in your own append-only record, where it is dated and attributed.

legalithm cra classify --kind software
How it decided (1 step)
  1. Is there a data connection in intended or reasonably foreseeable use?

    Not answered

    Article 2(1)

    This Regulation applies to products with digital elements made available on the market, the intended purpose or reasonably foreseeable use of which includes a direct or indirect logical or physical data connection to a device or network.

Engine cra-classify/0.1.0. The same engine the CLI runs, so a verdict here and a verdict there cannot disagree.

A determination is a starting point, not a conformity decision. Where it says the CRA applies, the obligations that follow are the manufacturer's, and this tool does not discharge them.

Next: check an existing record, or read what the CRA requires.