InsideCRA
InsideCRA › Definitions › Remote data processing

Defined term

Remote data processing

The definition that pulls your backend into your product.

LAW Defined in Article 3 (Art. 3(2)). The verbatim definition is in the official text of Article 3; only the Official Journal is authentic.

BINDING Source: Regulation (EU) 2024/2847 (Cyber Resilience Act) · publisher European Union · captured 2026-09-16 · snapshot sha256:27b7c6c64c773001… · CELEX 32024R2847

Remote data processing means data processing at a distance for which the software is designed and developed by the manufacturer, or under the responsibility of the manufacturer, and without which the product could not perform one of its functions F-006. Meet both limbs — yours by design, needed for a function — and the processing is inside the product's scope F-107.

A cloud service that fails the test is not thereby unregulated: it may fall under NIS2 instead F-103.

Verified facts this page relies on

Facts are maintained and human-verified in the CEMarque Facts Table (v2026.09.4, verified 2026-09-10).

Editorial review: Claude (AI reviewer, delegated by the editor), 2026-10-08. Methodology and correction process: how this site works.

Related in the reference

Not sure whether this applies to your product? Check if the CRA applies to you on CRARequired.