Cyber Resilience Act (CRA)
Developing or placing products with digital elements on the EU market? Explore questions about cybersecurity responsibilities, vulnerabilities and product documentation.
Read CRA guidanceEU REGULATIONS · REAL BUSINESS QUESTIONS
Whether you manufacture products, use AI or rely on suppliers, EU rules can raise practical questions. Explore topics relevant to your work and find guidance or an available English Practice Kit.
Developing or placing products with digital elements on the EU market? Explore questions about cybersecurity responsibilities, vulnerabilities and product documentation.
Read CRA guidanceUsing or providing AI systems? Explore roles, transparency questions and governance work that may be relevant to your business.
Explore AI Practice KitsWorking with connected products or related services? Explore questions about data access, information and contracts.
Explore product requirementsWorking with packaging for the EU market? Explore material, product information and supplier evidence questions.
Explore market accessSourcing goods potentially covered by EUDR? Understand why origin data, supplier information and traceable decisions matter.
Understand starting situationsPlanning to place a product on the EU market? Different requirements may apply depending on the product, its intended use and your business role.
Read EU market access guidanceExplore supplier responsibilities, missing evidence and practical follow-up.
Read supplier guidanceUnderstand the questions behind product requirements and evidence.
Explore the overviewStart with the topic. Where an English Practice Kit is available, its prepared tools can help you organise implementation and evidence. Case-specific legal or technical assessments may still be necessary.
English-language work system for CRA scope, requirements, risks, SBOM/VEX, evidence and technical documentation.
Structure packaging roles, supplier evidence, technical documentation, conformity review and country-specific EPR tasks.
Connected products and related services: work through scope, Access by Design, data access, information duties, requests, contracts, protection checks and evidence in one structured implementation system.
Page updated: