crakit
Scope checker
CLI
Pricing
Waitlist
CRA scope checker
Answers are kept in the URL so you can share the result. They are not stored.
What is the product?
Software (installed on the user's device or systems)
Firmware or embedded software
Hardware with software
A library, SDK or component sold or distributed separately
A hosted service (SaaS) only
Does it connect, directly or indirectly, to a device or network?
Choose
Yes
No
Art. 2(1)
Do you make it available in the EU in the course of a commercial activity?
Choose
Yes
No
Art. 3(13), Recital 18: free of charge can still be commercial.
Is it free and open-source software?
Choose
Yes
No
If open source: do you monetise it (paid licences, paid support beyond cost recovery, a commercial product built on it)?
Choose
Yes
No
If SaaS: is the hosted part essential to a function of a product you ship (remote data processing)?
Choose
Yes
No
Art. 3(2), Recital 12
Is it covered by one of these sectoral regimes?
None of these
Medical device or in vitro diagnostic
Motor vehicle type-approval
Civil aviation
Marine equipment
Exclusively national security or defence
Art. 2(2)-(7)
Does it fall in an Annex III or Annex IV category?
None of the listed categories
Identity management and privileged access management software/hardware, incl. authentication and access control readers
Standalone and embedded browsers
Password managers
Software that searches for, removes or quarantines malicious software
Products with the function of a virtual private network (VPN)
Network management systems
Security information and event management (SIEM) systems
Boot managers
Public key infrastructure and digital certificate issuance software
Physical and virtual network interfaces
Operating systems
Routers, modems intended for connection to the internet, and switches
Microprocessors, microcontrollers, ASICs or FPGAs with security-related functionalities
Smart home general purpose virtual assistants
Smart home products with security functionalities (smart door locks, security cameras, baby monitors, alarm systems)
Internet-connected toys with social interactive features or location tracking
Personal wearable products for health monitoring or wearables intended for children
Hypervisors and container runtime systems
Firewalls, intrusion detection and prevention systems
Tamper-resistant microprocessors or microcontrollers
Hardware devices with security boxes
Smart meter gateways and other devices for advanced security purposes incl. secure cryptoprocessing
Smartcards or similar devices, including secure elements
Your role
Manufacturer (develops it and markets it under own name)
Substantially modifies someone else's product and sells it
Importer
Distributor
Are you a micro or small enterprise (fewer than 50 staff)?
Choose
Yes
No
Art. 33, Art. 64(10)
Check scope
Fill in the form to get a reasoned verdict with article citations.