How this site is written and maintained.
The sources hierarchy, dating and review rules behind every guide on CyberResilienceAct.help.
Sources hierarchy
Claims about what the CRA requires rest on primary sources, in this order: the text of Regulation (EU) 2024/2847 and its annexes; Commission implementing and delegated acts, including the technical descriptions for product categories; European Commission CRA guidance, summary and implementation material; and ENISA publications. Every guide lists its official sources on the page. A statement that cannot be traced to one of those sources does not belong in a guide.
Requirements versus implementation
The site's standing rule, also stated on the about page, is to separate verified requirements from practical implementation frameworks. Where a guide proposes a workflow, checklist or evidence pattern, that is editorial method, written as such, and never presented as a legal requirement. Where the Regulation leaves a judgement to the manufacturer - risk-based decisions are the standing example - the guide identifies the judgement rather than inventing a threshold the law does not contain.
Dates and review
Every guide shows the date it was published and the date it was last updated, and the same dates travel in the page's structured data and the sitemap. Dates move when the substance is re-checked against the official sources, not when a page is merely re-exported. Guides are revisited when the underlying law changes: an amended annex, a new implementing act, newly cited harmonised standards, or Commission guidance that alters the practical reading.
Corrections
Corrections follow the route on the corrections page. A report is checked against the primary source; if the guide is wrong it is fixed and its updated date moves, and material errors are acknowledged on the page. If the guide stands, the reporter is told why, with the source relied on.
Independence
This is an independent resource: it is not affiliated with or operated by the European Union, the European Commission or any regulatory authority, notified body or vendor. Guides explain obligations; they do not sell conformity services or products, and no vendor can pay to be favoured in the guidance.