Legal & disclaimer

The honest boundaries

It does not make you compliant

Article 14 Signal provides detection, evidence and drafts: exploitation-in-the-wild detection across your dependency tree, a timestamped awareness record, and pre-drafted notifications. Meeting the Cyber Resilience Act — including the Article 14 reporting duties — remains the manufacturer’s own obligation. Nothing here constitutes legal advice, and no output guarantees compliance.

No official endorsement or affiliation

Article 14 Signal is a product of Fortitude Omnis. It is not affiliated with, endorsed by, approved by, or accredited by ENISA, the European Commission, or any EU body. We use no official logos and claim no official status. We cite primary sources by name so you can verify them yourself — for example European Commission — CRA (opens the primary source in a new tab) and CRA Article 14 (opens the primary source in a new tab).

Filing is manual — there is no API

ENISA has stated there is no Single Reporting Platform API at this stage. Article 14 submissions are made manuallyby a person entering the notification into the platform. We do not file on your behalf and do not imply any automated filing. Any output we produce is a payload for a human to submit.

The penalty context, stated once

For reference, the CRA’s highest penalty tier is up to €15 million or 2.5% of total worldwide annual turnover (CRA Article 64 (opens the primary source in a new tab)). We state this once, as a fact. The practical risk this product addresses is simpler: missing a 24-hour window nobody was staffed to catch.

Sources over blogs

Every legal or scope claim on this site links to a primary source — the CRA text with its article number, or the European Commission’s policy pages — never a blog. If you find a claim here that is not sourced, treat it as an error and tell us.