30 min with a CRA specialist - your classification confirmed against real specs, your open questions closed. Free, no obligation.Rulebook v0.5.1Full compliance 11 Dec 2027
Annex III, Class I, point 10
Are network interface cards covered by the CRA as important products?
Yes. Annex III Class I point 10 covers physical and virtual network interfaces. A network interface card is in the category, and so is a virtualised interface presented to a guest by a host.
ClassImportant - Class I
What that class requiresSelf-assessment only if harmonised standards applied; else notified body
Virtual is listed alongside physical, so an interface that exists only in software counts. A line reading Network interface on a product's specification sheet is not what this category means - it describes a product, not a port.
Point 12 is the box that moves traffic between networks. Point 10 is the interface that attaches one host to a network. A switch with many ports is point 12, not many instances of point 10.
Obligations that apply to every product in scope, whatever its class:
Essential requirements (Annex I) - secure by design & default
Economic-operator & market-surveillance obligations Art 13/19–24 · Annex II
The dates that matter:
11 September 2026 - reporting obligations for actively exploited vulnerabilities and severe incidents apply.
11 December 2027 - full compliance applies.
Market-surveillance authorities can order corrective action, withdrawal or recall, and fines reach €15 million or 2.5% of global annual turnover.
Check your own products against this
The same rulebook that produced this page runs the free check. It reads your products, classifies each one against Annex III and IV, and gives you an indicative verdict with the reasoning and citation for every product.