Ajax Systems adheres to strict cybersecurity regulations and recognized standards, including requirements under the Radio Equipment Directive (RED), the ETSI EN 303 645 standard, NIST cybersecurity validation, the EN 18031 series of standards, and more. This commitment now extends to the reporting obligations under the Cyber Resilience Act (CRA).
Starting September 11, 2026, the CRA will require manufacturers of products with digital elements made available on the EU market to report actively exploited vulnerabilities and severe security incidents. Reports will be submitted exclusively through the ENISA Single Reporting Platform, which serves as a single entry point for mandatory notifications under the regulation.
Ajax Systems confirms compliance with the applicable reporting obligations and will fulfill them directly, without assigning them to distributors, sellers, importers, or other partners.
What is the CRA
The Cyber Resilience Act (Regulation (EU) 2024/2847) is a European Union cybersecurity law that regulates products with digital elements. It applies across the product lifecycle — from design, development, and production to vulnerability handling, incident reporting, and security updates. The CRA is introduced in stages and will apply in full from December 12, 2027. Together, these measures aim to make connected products more secure, giving consumers and businesses greater confidence in the digital solutions they use.
Why the CRA matters
Cybersecurity has become an essential requirement for products with digital elements, making regulatory compliance increasingly important. Thus, meeting the 2026 CRA reporting obligations benefits key stakeholders. For Ajax Systems partners, this means no need to submit vulnerability or incident reports on the manufacturer's behalf. For clients, it brings greater confidence that product security is handled consistently as cyber threats evolve.
Learn more about Ajax devices' compliance with standards here.
If you discover a potential security or privacy vulnerability that may affect Ajax devices or software, report it here.



