Cyber Security Representation
EU CRA Representative
Article 18 of the EU Cyber Resilience Act (CRA) allows manufacturers established outside the EU to appoint an authorised representative in the Union, by written mandate, to carry its CRA duties towards the market surveillance authorities.
The EU CRA applies in full from 11 December 2027. Register your interest in our EU CRA Representative service today and we'll contact you as soon as it's live.
Be first in line for EU CRA Representation
This service is being developed. Registering your interest reflects no cost or commitment, and puts you at the front of the queue for our EU CRA Representative service the minute it launches.
-
Now
You register your interest
Register with your email address and the size of your organisation. No payment, no contract, no obligation.
-
Next
We wait for the CRA to apply
The Article 14 reporting duties apply from 11 September 2026 and the rest of the EU Cyber Resilience Act comes into force from 11 December 2027. Our EU CRA Representative Service will launch in-line with these dates.
-
At launch
You hear first
By registering, you'll be contacted before the service goes live, with everything you need to make an informed decision and get started with our EU CRA Representative service.
Register your interest
We use your address only to tell you about this service. No newsletter, and you can ask us to delete it at any time.
What an EU CRA Representative does
The EU Cyber Resilience Act (CRA) covers products with digital elements placed on the market in the European Union. A manufacturer outside of the EU can appoint an authorised representative to hold the paperwork and face the authorities.
An EU CRA Representative:
Accepts a written mandate from the manufacturer that spells out exactly which tasks are delegated.
Keeps the EU declaration of conformity and the technical documentation at the disposal of the market surveillance authorities for at least ten years after the product is placed on the market, or for the support period, whichever is longer.
Provides those authorities with the information and documentation needed to demonstrate the product's conformity.
Cooperates with the market surveillance authorities on any action taken to eliminate the risks a product poses.
As with our other representation services, Prighter will serve as your local presence, holding the documentation and managing inbound contact, so your team can operate from a single dashboard rather than a patchwork of national authorities across each EU Member State.
The Prighter One-Stop Shop
Security, data protection, and AI and Digital Governance are very closely interconnected and share similar concepts and requirements. With Prighter and our global network of partners you can cover the full digital regulatory landscape with a single provider — ensuring consistency and cost-effectiveness.
Bespoke Service
We can provide you with legal, technical, and security related services in addition to our core products. Rely on the experience and knowledge of our experts to guide you through the constantly evolving framework for digital services.
Resource Center
We provide your in-house team with full access to our resources — knowledge, documentation, and guidelines — to support your compliance efforts. Leverage the proven foundation we've built for clients and tailor it to your specific needs.
Rely on Our Experts
Our team stands beside yours as a trusted and reliable partner. We are there for your individual needs and can help you setup and maintain your tailored security program fitting. Compliance products with a human touch
In the meantime, we already cover a lot of the map
The CRA is not live yet, but your obligations elsewhere are. These services run today, from one dashboard and one contract.
:quality(80):fill(transparent))
:quality(80):fill(transparent))
:quality(80):fill(transparent))
:quality(80):fill(transparent))
:quality(80):fill(transparent))
:quality(80):fill(transparent))
Global Representation FAQs
Is there a single global Representative requirement?
No. Representation requirements are jurisdiction-specific. Each country or region maintains its own legal framework and supervisory authority.
Can one provider manage representation in multiple jurisdictions?
Separate legal mandates are required in each jurisdiction. A coordinated provider can streamline oversight and management across markets.
Does appointing Representatives mean full compliance globally?
No. Representation fulfils formal legal requirements where applicable. Substantive compliance obligations remain with your organisation in each jurisdiction.
How do we determine where we need representation?
This depends on where you offer services, process personal data and operate infrastructure. A structured cross-border assessment is the starting point.