Article 14 · Manufacturer reporting

CRA reporting deadline calculator

Turn an awareness timestamp into reporting targets. The early stages share a clock; the final report starts from a different event for each reporting path.

Updated 13 September 2026 · Free to use · Calculated in your browser

Plan the reporting sequence

This tool assumes a manufacturer has identified a reportable event under Article 14. Enter all times in UTC. Reporting must happen without undue delay; the targets below are outer planning limits, not permission to wait.

Reporting path First became aware (UTC)Use the recorded awareness time. Convert local time to UTC before entering it. Corrective or mitigating measure available (UTC date)Optional until a measure is available. This event starts the 14-day final-report period.

Dates are not sent to CRA Operations or saved to a workspace.

Your reporting targets

Enter the awareness date and time to see the first two targets. Add the final-report trigger when it is known.

Calculation convention: 24 and 72 elapsed hours; 14 calendar days shown as a date; one calendar month at the recorded notification time, clamped to the last day for shorter months. No weekend or public-holiday extensions are applied. Confirm the filing deadline and time-zone convention with the receiving authority.

Check the decision before the clock

Does a CVE establish active exploitation?

Compare a known vulnerability with evidence that it is being exploited.

Does an outage meet the severe-incident threshold?

Review security impact and the facts that change the reporting decision.

Where the timing rules come from

Regulation (EU) 2024/2847, Article 14(2) and (4) sets the two reporting sequences. The European Commission’s reporting guidance explains the stages and application dates. Manufacturer reporting applies from 11 September 2026; open-source stewards have a separate application date of 11 December 2027.

This calculator prepares dates. Submit reports through the ENISA CRA reporting resources and the Single Reporting Platform. Keep the submission receipt and actual timestamp with your case.

Browse all CRA decision examples · Read the reporting decision guide