Free tool · Cyber Resilience Act
CRA support period calculator
Article 13: a support period of at least five years, and each security update kept available for at least ten years. Enter when the product is placed on the market and how long it is expected to be in use: you get the end date to announce and how long each update must stay available.
Cyber Resilience Act support periodyears
Shorter than five years: allowed only if the product is expected to be in use for less than five years. Record why.
| What | Result |
|---|---|
| Support period | — |
| End of support | — |
| End date to show at purchase (month and year) | — |
| That security update stays available until at least | — |
Copied. Paste them into your technical documentation.
The rules behind the dates
- Support period (Art. 13(8)). It reflects how long the product is expected to be in use, taking into account reasonable user expectations and the nature of the product. It is at least five years, unless the product is expected to be in use for less than that.
- Each security update (Art. 13(9)). It stays available for at least ten years after it is issued, or for the rest of the support period if that is longer.
- The end date (Art. 13(19)). Show at least the month and the year, clearly, at the time of purchase.
These obligations apply to products placed on the market from 11 December 2027. Decide each period now, so that the date is ready when the first version ships.
This page helps you plan and document; it is not legal advice. Check the official text and your authority’s guidance. Source: Regulation (EU) 2024/2847, Article 13. Related: the guide CRA support period and the CRA timeline.