Skip to content
AuCRA SecurityHub
Menu

The day the product is first made available on the EU market.

A whole number from 1 to 30.

Dependencies (optional)

    No dependencies added.

    Your dates

    Your dates appear here once both fields are filled in correctly.

    Without JavaScript the planner cannot work out your own dates. The rules it uses are below, followed by a worked example.

    1. Minimum support period ends

      The support period must be at least five years, or match the expected use time if the product is expected to be in use for less than five years.

      Sources: CRA Art. 13(8)

    2. Support end matching expected use

      This is when a support period as long as your expected use time ends; you set the actual period, and it cannot end before the minimum.

      Sources: CRA Art. 13(8)

    3. Month and year to state at purchase

      At the time of purchase you must state when the support period ends, at least the month and year, clearly and understandably and in an easily accessible way; this is the month and year of the support end above.

      Where technically feasible, you must also display a notice telling users that the product has reached the end of its support period.

      Sources: CRA Art. 13(19)

    4. Keep documentation and user information until at least

      The technical documentation and EU declaration of conformity must stay available to market surveillance authorities, and the user information to users and those authorities, for at least 10 years after placing on the market or for the support period, whichever is longer.

      Sources: CRA Art. 13(13); CRA Art. 13(18)

    5. Update issued on the last support day: available until at least

      Each security update made available during the support period must stay available for at least 10 years after it is issued or for the rest of the support period, whichever is longer; for an update issued on the last day of support, that is 10 years.

      Sources: CRA Art. 13(9)

    Vulnerabilities in the product's components must also be handled for the whole support period.

    Sources: CRA Art. 13(8)

    Take a product placed on the market on 15 January 2028 and expected to be in use for 7 years. The minimum support period ends on 15 January 2033. A support period as long as the expected use time ends on 15 January 2035, so state at least January 2035 at the time of purchase. Keep the documentation and user information available until at least 15 January 2038. An update issued on 15 January 2035, the last day of support, stays available until at least 15 January 2045.

    Compass, our free guided assessment for SMEs, also checks organisational maturity and reporting readiness. Try Compass free