Skip to content

How it works
Free tools
Guides
Pricing
FAQ

Join the free beta

How it works

Free tools

SBOM scanner Does the CRA apply? Reporting deadlines GitHub Action

Learn

Guides Pricing FAQ Join the free beta

Shipmark / Free tools

Does the Cyber Resilience Act apply to my app?

Six questions, about one minute. Nothing you answer leaves your browser.

Answer for one app at a time. The result explains which rule leads to it, based on Regulation (EU) 2024/2847 and the Commission guidance of July 2026, and what applies when.

1. How do people use the app? They install it on a phone, tablet, computer or other device (App Store, Google Play, desktop, browser extension) Both: there is an installable app and a web version Only in a web browser, nothing is installed

2. Is it available to users in the EU? Yes No, it is not offered in any EU country

3. How does it relate to money?

The CRA covers products made available in the course of a commercial activity. A price is not required.

Users pay for it, subscribe or buy things inside it It is free, but it is monetised: ads, data, or it belongs to a paid service or a company's product (banking, retail, fitness, a connected device) It is free and has no monetisation of any kind (for example a hobby or community project)

4. Is it covered by one of these EU sector rules? None of these It is certified as a medical device or in vitro diagnostic device (MDR or IVDR) It is part of a motor vehicle covered by EU type-approval It is certified civil aviation equipment It is marine equipment It is made exclusively for national security or defence

5. Does the app rely on a backend you or your client operate?

For example for login, syncing data or controlling a device.

Yes No, it works on its own

6. Is its main function one of these? None of these Password manager VPN Web browser Antivirus or anti-malware

This tool gives a general orientation and is not legal advice. For the reasoning behind each answer, read Does the Cyber Resilience Act apply to mobile apps?

Guides Free tools Founding members [email protected] Privacy Security Facebook

Shipmark is an independent project and is not affiliated with the European Commission or ENISA.