Cyber Resilience Act · NIS2
CRA for the product. NIS2 for the operator.
The Cyber Resilience Act is EU product law for connected products. NIS2 is the duty of the operator of essential and important services. NG-Key is built so Accena readers, Edge, NG-IO, cabinet handles, and the cloud path they use carry signed updates, factory identity, and European operations. An operator can use that record. Buying the platform does not make the operator NIS2-conformant, and this page is not a notified-body certificate.
Built into the product.
Secure by design, signed updates, a factory-to-door trust path, and European operations.
Secure by design, not bolted on
Local-first doors, encrypted credential material, factory-issued device identity, and a copilot on a model we host in Europe — not a public LLM.
Updates you can require
Signed OTA across Accena readers, Edge gateways, and NG-IO. Security updates are a fleet control, not an installer favour.
Route of trust on every device
Manufacturing certificates, firmware signatures, and hardware-trust telemetry on Edge, IO, and readers. A mismatch is an operational fact — the device does not silently join the fleet.
European product, European inference
Application data and the copilot model we host stay in Europe. The Cyber Resilience Act is EU product law. The platform is operated as a European service.
What the operator can use.
NIS2 (Directive (EU) 2022/2555) stays with the organisation that runs the service. NG-Key supplies the record.
Records an operator can show
Signed updates, device identity, and the audit trail are operational facts. They support the operator’s own risk management. They do not replace it.
A defined security path
Product security reports follow a published disclosure path. The operator still notifies the competent authority under the operator’s own duty.
Posture, not a stamp
We engineer Accena, Edge, and IO so product security lives in the device — not as a notified-body mark on this page. NIS2 stays with the operator. NG-Key certifies neither duty.
Security whitepaper
Use the whitepaper when a procurement review needs a longer security narrative. CRA and NIS2 sit on the next page: product law for the device, operator duty for the service, no stamp on purchase.