Ask HN: Cyber Resilience Act – what is "buying" software?

3 leksak 1 7/25/2025, 7:44:19 PM
Does this include subscription-based payment models? Pay for use? Service-fees?

https://digital-strategy.ec.europa.eu/en/policies/cyber-resilience-act

Comments (1)

stockresearcher · 22h ago
Yes.

You should concentrate on understanding what a "product" is under the CRA. If what you've got is a "product" and anything of value is changing hands, you are almost certainly subject to the law. How the value changes hands makes no difference.