Article 14 deadline calculator

When Grype, Trivy or Dependency-Track turns up something in your product that's actually being exploited, craclock works out whether you have to report it, prepares the report, and keeps the proof of when you knew and what you filed. You submit it yourself: a filing is a legal statement by you, not by a tool, so craclock hands you the finished text instead of sending it for you.

Based on eu-cra-art14 ruleset version 2026.09.1, effective 12/09/2026. Times are entered in your browser's local time zone and converted to UTC, since CRA deadlines run in UTC.

This tool is informational, not legal advice. See the primary sources it's built from on theArticle 14 cheat sheet.

Want to know when something changes? Get the regulatory changelog by email