EU authorised representative under the Cyber Resilience Act (Regulation (EU) 2024/2847) for non-EU manufacturers of products with digital elements, and a 24/7-ready vulnerability reporting channel for the CRA reporting duties that apply from 11 September 2026. Run by Europe Services SE (Prague, since 2014).
WHO NEEDS IT
Manufacturers established outside the EU that place products with digital elements on the EU market - connected devices, software, apps, firmware - fall under the Cyber Resilience Act. From 11 September 2026 an actively exploited vulnerability or a severe incident must be notified within 24 hours, with a full notification within 72 hours and a final report within 14 days. Non-EU manufacturers may mandate an EU authorised representative.
PLANS
CRA Channel: a vulnerability reporting desk with a published address and two contacts reachable at night.
CRA Channel + Filing: everything in Channel plus preparation of the Article 14 notifications.
CRA Representative: everything above plus our appointment as your EU authorised representative under the CRA.
HOW IT WORKS
Subscribe on AWS Marketplace and choose your plan.
Complete the onboarding form on our website: product lines in scope, products on the market, contacts.
A person reviews the file; within one working day the channel is live and you receive the signed mandate with a verification code.
The reporting duty stays with the manufacturer; we run the channel and prepare the filings. Billing on your AWS invoice. Not included: legal advice and technical security testing.
Highlights
EU authorised representative under the Cyber Resilience Act for non-EU manufacturers of products with digital elements.
24-hour vulnerability and incident reporting channel ready for the CRA duties applying from 11 September 2026.
Signed mandate with verification code; filings prepared for you; billing on your AWS invoice.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
These three options build on each other for Cyber Resilience Act reporting duties, each billed as a 12-month contract. CRA Channel gives you a vulnerability reporting desk that intakes, triages, and logs reports. CRA Channel + Filing adds preparation of Article 14 notifications, including the early warning, 72-hour notification, and final report. CRA Representative includes everything in the prior options plus acting as your EU authorised representative, which fixes which authority receives your report. You pick based on whether you need intake only, intake plus filing, or formal EU representation for manufacturers outside the Union.
Top-of-mind questions for buyers
What counts as one unit for billing across these three options?
CRA Channel covers one product line. CRA Channel + Filing covers your whole catalogue, including legacy products placed on the market before the regulation applied. CRA Representative also covers manufacturers outside the Union, with your name published on the product or its documentation.
What is NOT included in any of these options?
You still write the early warning facts yourself, since only your security team has them. The provider does not assess vulnerability severity, patch products, or carry out penetration tests, CE certification, software bill of materials tooling, or conformity assessment. The reporting duty stays with you as manufacturer.
Does moving up an option change how I am billed per product?
No. Each option is a single 12-month contract with no hourly billing and no charge per product. CRA Channel covers one product line. CRA Channel + Filing and CRA Representative both cover your whole catalogue, including legacy products, under one flat annual fee.
gdprrepresentative.com+1
Helpful?
Vendor refund policy
Cancel at any time from your AWS Marketplace subscriptions: the contract is simply not renewed at the end of the 12 months, with no penalty. If you cancel within 14 days of purchase and before your designation is approved, contact info@gdprrepresentative.com for a full refund. For any billing question write to info@gdprrepresentative.com; we reply within one working day.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Deloitte’s CRA Scope & Applicability Check provides a structured approach to identify which of the client’s products within the portfolio are in scope of the CRA and which role or roles the organization assumes in context of CRA. Therefore, the service helps establish transparency on whether affected products need to rely on relevant AWS-supported digital services as part of further CRA-compliance measures.
Deloitte’s CRA Enablement & Transformation Advisory helps organizations translate regulatory requirements into sustainable operating capabilities. The service supports the design and implementation of governance, processes, methods, and execution roadmaps required to embed CRA-related requirements into day-to-day operations.
Deloitte’s CRA Readiness Assessment provides a structured view of an organization’s current level of maturity in relation to the Cyber Resilience Act compliance. This involves analyzing the organizational setup, processes, methods, and tools. In the tool context, the use of AWS services is also examined, and highlights what services are needed to be CRA-ready.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.