InsideCRA
InsideCRA › Definitions › Support period

Defined term

Support period

The manufacturer-set window: at least five years unless expected use is shorter.

LAW Defined in Article 3 (Art. 3(20)). The verbatim definition is in the official text of Article 3; only the Official Journal is authentic.

BINDING Source: Regulation (EU) 2024/2847 (Cyber Resilience Act) · publisher European Union · captured 2026-09-16 · snapshot sha256:27b7c6c64c773001… · CELEX 32024R2847

The support period is determined by the manufacturer to reflect the time the product is expected to be in use, and is at least five years unless a shorter use time is expected F-015. During it, the vulnerability-handling duties run and security updates are provided free of charge F-045.

The commercial angle

The end date is stated at the time of purchase F-015, so the period works as a public commitment buyers can see; setting it is a pricing and roadmap decision as much as a legal one.

Verified facts this page relies on

Facts are maintained and human-verified in the CEMarque Facts Table (v2026.09.4, verified 2026-09-10).

Editorial review: Claude (AI reviewer, delegated by the editor), 2026-10-08. Methodology and correction process: how this site works.

Related in the reference

Not sure whether this applies to your product? Check if the CRA applies to you on CRARequired.