A library interior with bookshelves flanking an arched doorway

CRA Support Period: Article 13(8) Five-Year Rule

Article 13(8) requires five years of free security updates. Plan the duration, the pre-purchase disclosure, and the update mechanics.

Build your support-period expertise

Three focused guides covering duration rules, end-of-support disclosure, and how security updates must be delivered.

How long must your support period be?

Article 13(8) duration rules: the five-year floor, the shorter-lifetime carve-out, the market-placement clock anchor, multi-version overlap, and upstream supplier risk.

Read guide →
Disclose the end-of-support date to users

Annex II item (k) and Article 13(19): the pre-purchase duty to disclose the support-period end date in the user-facing product information.

Read guide →
Deliver free security updates

Article 13(8) plus Annex I Part II(8): the free-of-charge rule, the without-undue-delay expectation, automatic-where-feasible delivery, and architecture-specific update models.

Read guide →
← Back to CRA compliance hub