Products, versions & deployments

Every Resilic feature keys off the product register: versions carry SBOMs, deployments locate fielded machines, and the support period feeds Annex II user information, the technical documentation, and the customer evidence pack.

• Support period: record the start/end dates, expected use time, and the determination rationale (CRA Article 13(8) expects the determination, not just dates). A derivation assistant drafts the rationale from the dimensions that bound a support period — usage context, expected field lifetime, component availability (the earliest component end-of-life from the SBOM), update capability, and supplier commitments — applying the five-year floor and the minimum principle. It never sets your dates: you review, edit, and sign the determination, keeping an audit-ready record of who attested it and when. Editing the support window or rationale re-opens it for signing. If something the signed determination rested on later changes — a new actively-exploited match, a component reaching end-of-life before the window, or a revised SBOM — Resilic flags it for re-review while keeping the signed record intact.
• CRA register details: record your role for each product — manufacturer (the default), importer, or distributor, since it changes which CRA duties apply — and an optional product family to group related products in the register. These are register facts you maintain, not a conformity determination.
• CRA classification: pick the product’s category — default (self-assessment), important (Annex III Class I or II), or critical (Annex IV) — write the reasoning, and sign it, so you keep an audit-ready record of a self-classification an authority may spot-check. A guided classification wizard helps: match your product’s core functionality to the Annex III/IV categories (captured verbatim from the regulation) and it suggests a tier and drafts a justification you review, edit, and sign — integrating a listed component does not by itself make the product important or critical (Article 7(1)). Editing the category or justification re-opens it for signing. If the CRA category lists (Annex III/IV) are later amended, Resilic flags your signed classifications for re-review — your signed record stands until you re-review it against the current lists and re-sign. You own this assessment; it’s a readiness aid, not a conformity determination.
• Customer evidence pack: each deployment row offers a downloadable security evidence pack and an expiring share link for your customer.
• Security passport: a stable public page per product carrying the CRA Annex II user information — rotate or revoke it from the product’s page.