Which CRA Role Applies to You?

The EU Cyber Resilience Act (Regulation 2024/2847) defines specific roles for economic operators in the product supply chain. Each role has different obligations.

Manufacturer

Develops or has products developed and markets them under their name. Bears primary compliance responsibility.

Importer

EU-based entity that places non-EU products on the market. Must verify manufacturer compliance.

Distributor

Resells products already on the EU market. Must exercise due care and verify CE marking.

OSS Steward

Provides sustained support for open-source software. Has lighter obligations focused on security policy.

This quiz provides general guidance only and does not constitute legal advice. For definitive compliance requirements, consult the official CRA text and seek professional advice.

Which CRA Role Applies to You?

Question 1 of 8

Your Role

What best describes your primary involvement with products containing digital elements in the EU market?

Select the option that best matches your main business activity.

I develop, manufacture, or commission products

You design, develop, or have products made for you

I import products into the EU

You bring products from outside the EU into the EU market

I distribute/resell products already on the EU market

You resell or distribute products without modifying them

I maintain or steward open-source software

Your primary activity is supporting OSS projects

I act as an authorised representative

You represent non-EU manufacturers in the EU

None of the above / Just exploring

You're not directly in the CRA supply chain

No account required No data stored Takes 2-3 minutes

Not sure if the CRA applies to your product? Try our CRA Applicability Check