1 OneMinuteTools
|
Home / CRA Reporting Deadline Calculator
EU COMPLIANCE TOOL

CRA Reporting Deadline Calculator

Calculate Cyber Resilience Act Article 14 reporting timelines from the moment your organisation becomes aware of a reportable event.

Verified against official EU / ENISA sources - 26 August 2026
Important: report without undue delay. The 24-hour and 72-hour results below are outer limits, not recommended waiting times.
IANA time zones are used so daylight-saving changes can be detected.
Optional final-report calculation For a vulnerability, enter when a corrective or mitigating measure became available.
Optional final-report calculation For a severe incident, the one-month clock is anchored to the actual incident-notification submission.
CRA reporting timeline
Separate user-information duty Article 14 also contains duties to inform impacted users where relevant. This calculator does not treat that duty as satisfied by regulator reporting.

Official sources

Regulation (EU) 2024/2847 - EUR-Lex European Commission - CRA Reporting Obligations ENISA - Single Reporting Platform ENISA - CRA SRP FAQ European Commission - CRA Implementation Guidance

CRA Reporting Deadline Calculator FAQ

When do CRA Article 14 reporting obligations start?

Article 14 reporting obligations apply from 11 September 2026, before the CRA becomes fully applicable in December 2027.

When does the 24-hour clock start?

The reporting process starts when the manufacturer becomes aware of an actively exploited vulnerability or a severe incident. The law requires reporting without undue delay and in any event within 24 hours.

Why are there two different final-report calculations?

The vulnerability final report is anchored to when a corrective or mitigating measure becomes available. The severe-incident final report is anchored to submission of the incident notification. They are different legal clocks.

Can one event trigger both reporting tracks?

Potentially. An actively exploited vulnerability can also be associated with a severe incident. Select "Both / uncertain" to display both final-report rules, then verify the appropriate filing treatment against current ENISA guidance.

Does this calculator submit a report to ENISA?

No. It is a planning tool. Official CRA notifications are submitted through the Single Reporting Platform process described by ENISA.

OneMinuteTools provides automated compliance-readiness information for general informational purposes. Results are not legal advice and do not certify compliance. Final-report periods stated in days or months may require additional legal time-limit analysis depending on the facts, applicable EU rules, public holidays and implementation context. Verify material filing decisions against the linked official sources or qualified counsel.