Kilde › Guides › CRA › The CRA single reporting platform: reg…

The CRA single reporting platform: registration, status, and what to pre-stage

Current to 26 August 2026 · updates land in the changelog.

All Article 14 reports — 24-hour, 72-hour, final — flow through one place: the single reporting platform established under Article 16, operated by ENISA. The platform's own documentation is explicitly marked “subject to change”, so everything below carries that caveat and a verification date rather than a promise.

Status at our verification date

The platform was not yet publicly live, with the Commission stating it would be operational by 11 September 2026; no public URL had been posted, and ENISA's launch webinar was expected roughly two weeks before go-live. Voluntary reporting becomes possible only after go-live. ENISA has published a factsheet, registration and submission guides for the platform, and an expanded FAQ — with a helpdesk at cra-srp-helpdesk@enisa.europa.eu.

How registration works (per the ENISA guides)

The platform's user seats are called Assigned Representatives (AR) — a login role, not to be confused with the CRA's Article 18 authorised representative. The published flow for the primary AR: hold an active EU Login account (created at ecas.ec.europa.eu — this is the step to do today, since it is independent of the platform's go-live); select the AR role; pick your designated CSIRT from the dropdown; authenticate; accept the legal agreement; confirm personal details; enter the manufacturer's name and address.

A secondary AR — the backup seat you want before you need it — is added by email invitation from the primary, and the invitation link expires in 7 days. One operational mercy: CSIRT validation of your registration is not a prerequisite to submitting reports.

What to pre-stage before go-live

Related guides

Quick answers

Is the CRA single reporting platform live?
At our verification date it was not yet publicly live; the Commission's stated target is operational by 11 September 2026, with ENISA guides published in advance and a launch webinar expected shortly before go-live.
What is an Assigned Representative on the ENISA platform?
A platform user seat — the person who registers and submits for the manufacturer. It is platform terminology, distinct from the CRA's authorised representative under Article 18.
What can manufacturers do before the platform launches?
Create EU Login accounts for two AR candidates, decide the designated CSIRT via the main-establishment rule, and pre-stage entity and product data matching the published field matrix.
Be reporting-ready before 11 September 2026.

The CRA Reporting-Ready Pack: the staged 24h / 72h / final-report runbook and templates, vulnerability-vs-incident triage worksheet, CSIRT-routing and main-establishment worksheet, platform registration runbook, CVD policy and evidence log — built from the regulation and the ENISA platform guides, with pinpoint citations.

Get the pack — US$390 Free 4-page sample (PDF)

Instant download · 14-day unconditional refund · single-organisation licence · full product page

General information only — not legal advice, and never a conformity assessment. Whether a specific product falls in a listed category is decided against the binding technical descriptions in Implementing Regulation (EU) 2025/2392, and reporting-platform mechanics are ENISA-published material marked subject to change. Sources are Regulation (EU) 2024/2847 (CELEX 32024R2847; Annex III/IV item texts read verbatim from EUR-Lex) and our audited kit research. © 2026 Kilde.

Built by Kilde's founder, a practising attorney admitted to a US state bar (not an EU or Hong Kong admission). About · Verification log · Refunds · Terms · Privacy · esau@trykilde.com