The Startup's Guide: CRA & CE Marking

​Starting in 2027, the Cyber Resilience Act (CRA) will change the rules for any product with digital elements sold in the EU - from apps to IoT devices. And if your product falls under any other CE-regulated category, the compliance clock is already ticking too.

​Figuring this out alone is hard. So on 15th September at 16h, our CRA & CE Marking experts are hosting a hands-on session built for startups navigating EU product regulation.

​Any sector, any stage. Whether your product has digital elements or falls under any other CE-regulated category, this session is for you.

​We’ll dig into things like:

​🛡️ Whether your product falls under the Cyber Resilience Act (and what “product with digital elements” really means);

​💻 How to build secure-by-design into your sprint planning and CI/CD, without slowing your team down;

​📦 Setting up SBOMs, vulnerability disclosure policies, and lightweight incident response — before scale makes it expensive to retrofit;

​💰 Why investors are increasingly running compliance checks and pentests before funding rounds;

​🇪🇺 What CE marking actually means, which regulatory frameworks apply, and what the typical certification journey looks like;

​✅ Which conformity assessment route fits your product and stage.

​Whether you’ve never looked at either regulation or you’re already deep in compliance prep and want to get it right, you’ll walk away with answers you can use.

​Jorge Feced and Andreia Nogueira, both from Bureau Veritas, will lead the session, co-organized by EngineersHub and HealthHub.

​Spots are limited, so grab yours.

​🎟️ This session is €30 for general attendees.
Members of Unicorn Factory Lisboa Hubs (AIhub, Engineers Hub, GreenHub, HealthHub, GamingHub) attend for FREE - your voucher code has been shared in your Hub’s Slack channel.