EU Cyber Resilience Act drives new compliance demands for European firms

The European Union's Cyber Resilience Act (CRA) requires manufacturers and service providers to ensure that digital products remain secure throughout their support life‑cycle. The regulation mandates regular updates, systematic vulnerability management, documented processes and transparency about software components, impacting everything from smart household appliances to connected vehicles. Companies such as Porsche have already altered product strategies to meet the new cyber‑security standards.

To help businesses meet the CRA, the AI Act and NIS‑2 requirements, AvePoint introduced its Confidence Platform, a unified solution for data‑governance, privacy and resilience across cloud environments. The platform aims to standardise governance, enforce policies and provide backup and recovery capabilities, supporting organisations that integrate AI assistants while protecting against data‑leakage and compliance risks.