Article 14 reporting obligations have applied since 11 September 2026. Next: Full application, 11 Dec 2027.

Full timeline

Documentation and conformity

Check an SBOM against the Cyber Resilience Act and BSI TR-03183-2, see where EN 18031 and the CRA harmonised standards stand, and draft an EU declaration of conformity.

All tools