🛡 Our CRA Obligations

 

Because we sell our products commercially, we do have obligations under the EU Cyber Resilience Act — but these obligations are lightweight and apply only to our own software, not to user firmware or to any final product created by the user.

To comply, we will:

---

✔ Provide a vulnerability reporting channel

Please use pickitplus@Anobium.co.uk for reporting security issues.

---

✔ Declare a support period

We provide one year of security support for the software we distribute.

---

✔ Fix vulnerabilities

We will address and correct vulnerabilities within the declared one‑year support period.

---

✔ Provide a basic security overview

• Our products cannot and do not validate or sign firmware; users are responsible for ensuring the security of the firmware they create and load.

• To support secure and reliable use of our products, we provide SHA and MD5 hashes so users can verify file integrity.

---

❌ CE marking

CE marking is not required for our products, as we have no responsibility for user firmware or for any final product placed on the EU market.