Does the CRA apply to me?
Yes. What matters is not where your company is based but whether the product is made available on the EU market, including via distributors or online sales. A British device maker or a US software vendor with EU customers has the same obligations as a German manufacturer.
What to watch out for
EU importers and distributors must verify that the manufacturer meets its obligations, they will demand your conformity evidence before continuing to sell your product. Without evidence you lose the channel long before any authority comes knocking.
The pragmatic way in
Generate an SBOM per release, set up vulnerability monitoring, prepare the reporting process for 11 September 2026, structure your technical documentation. KONFORMA walks you through exactly this sequence, in English and German.