Is my product in scope? / Console game
CRA compliance for console games (PlayStation, Xbox, Switch)
Console games sold in EU storefronts are commercial products with digital elements — the Commission's guidance names computer games explicitly, and nothing exempts consoles. Platform certification (Sony/Microsoft/Nintendo cert) is famously strict about crashes and content, but it is not a CRA conformity assessment.
What this means for you specifically
- ▸Platform cert ≠ CE conformity: cert checks platform requirements; the CRA's essential requirements (SBOM, vulnerability handling, update obligations) remain the publisher's/developer's own duty.
- ▸Your SBOM covers engine + middleware (audio, netcode, analytics) — largely the same tree as your PC build, so one pipeline serves both.
- ▸Patch distribution runs through the platform holder: your Art. 14 process must account for cert lead times — 'a fix exists but is in cert' is a scenario to document, and a reason the final-report clock (14 days after the fix is AVAILABLE) matters.
- ▸Online features (matchmaking, lobbies, UGC) are the realistic attack surface; single-player-only titles have a genuinely thin risk profile — say so in the risk assessment and benefit from it.
The pitfall that catches most teams
Assuming the platform holder carries security obligations because they control the store and the patches. The manufacturer of the game is you; the platform is distribution.
The deadlines
2026-09-11
Reporting obligations start: actively exploited vulnerabilities and severe incidents must be reported within 24h/72h via the ENISA Single Reporting Platform.
2027-12-11
Full application: essential requirements, technical documentation, EU Declaration of Conformity and CE marking required to sell in the EU.
Where does your product actually stand?
The free Risk Check gives you a readiness score and a prioritized fix list in 3 minutes — tuned to your exact situation, including the edge cases this page can't cover.
Or get CRAdar to handle it continuously:
Other product types
Educational guidance on Regulation (EU) 2024/2847 — not legal advice.