🛡 Our CRA Obligations

 

Because we sell our products commercially, we do have obligations under the EU Cyber Resilience Act — but these obligations are lightweight and apply only to our own software, not to user firmware or to any final product created by the user.

To comply, we will:


✔ Provide a vulnerability reporting channel

Please use pickitplus@Anobium.co.uk for reporting security issues.


✔ Declare a support period

We provide one year of security support for the software we distribute.


✔ Fix vulnerabilities

We will address and correct vulnerabilities within the declared one‑year support period.


✔ Provide a basic security overview

  • Our products cannot and do not validate or sign firmware; users are responsible for ensuring the security of the firmware they create and load.

  • To support secure and reliable use of our products, we provide SHA and MD5 hashes so users can verify file integrity.


❌ CE marking

CE marking is not required for our products, as we have no responsibility for user firmware or for any final product placed on the EU market.