Ask HN: Cyber Resilience Act – what is "buying" software?

Does this include subscription-based payment models? Pay for use? Service-fees?

https://digital-strategy.ec.europa.eu/en/policies/cyber-resilience-act

3 points | by leksak 17 hours ago

1 comments

  • stockresearcher 14 hours ago
    Yes.

    You should concentrate on understanding what a "product" is under the CRA. If what you've got is a "product" and anything of value is changing hands, you are almost certainly subject to the law. How the value changes hands makes no difference.