Worked examples

How seven product archetypes classify under the CRA

Each example runs a realistic product portfolio through the same deterministic rulebook that produces a real CRASPACE report, and shows how the class is reached - including one that lands out of scope entirely.

These are worked examples, not client engagements. No customer is named or described here, and none of these is a testimonial. They exist to show the reasoning; the product archetypes are generic. Indicative assessment - not legal advice and not a conformity assessment.

DefaultConnected kitchen applianceA mid-size domestic appliance manufacturerIn scope, Default class - the outcome ~90% of products get Important - Class ISOHO router manufacturerA networking hardware manufacturer selling through EU retailImportant Class I - the conformity route depends on harmonised standards Important - Class IPassword manager vendorA pure-software SaaS vendor with desktop, mobile and browser clientsNo hardware anywhere - and still Important Class I Important - Class IIEnterprise firewall vendorA network security vendor selling appliances and virtual appliancesImportant Class II - the self-assessment route closes entirely Important - Class IIIndustrial IDS vendorAn OT security vendor selling into manufacturing and utilitiesImportant Class II - an OT product on an IT regulation's terms CriticalSmart-meter gateway vendorA metering infrastructure vendor supplying utilities and grid operatorsCritical - the highest route, and the honest limit of what we do Out of scope (sectoral)Connected medical deviceA medical device manufacturer with a connected patient monitorOut of scope - carved out by Art 2, with conditions

Your own products, not an archetype. The check reads your public product pages and classifies what it actually finds, with a citation for each one.

Run the free check →Talk to a specialist

Indicative assessment - not legal advice and not a conformity assessment.

Keep reading