Free tool / runs in your browser

CRA reporting deadline calculator

Know your reporting deadlines. Inputs stay in your browser. Results are planning guidance and need a product-specific review.

The 24h and 72h windows use elapsed hours from awareness. Vulnerability final reports are due 14 days after a corrective or mitigating measure is available. Incident final reports are due one calendar month after notification. Ambiguous or nonexistent DST times are rejected.

Source: Regulation (EU) 2024/2847. General information. Read the complete CRA guide.