Does Declara file to the SRP automatically?
No. There is no API for the CRA Single Reporting Platform today — filing is a manual step where you copy Declara's generated packet into the SRP's own web form yourself. See Cyber Resilience Act, Article 14, checked 2026-09-13, and the ENISA CRA Single Reporting Platform FAQ, checked 2026-09-13.
What happens if I miss a deadline?
Declara doesn't apply a penalty or escalate anything automatically — there's no
penalty logic in the product. The case's stage simply shows overdue instead of a
countdown. File as soon as you can; the regulation's actual standard is "without
undue delay," not a hard cutoff that voids a late filing. See
What to do if you're already overdue.
Can I edit a report I already submitted?
No. There's no amendment feature for a stage marked submitted. Carry the correction into the next stage's report instead — see Troubleshooting.
Is Tier a legal determination?
No. Tier A/B/C is Declara's own classification of exploitation signal, not a legal determination that a vulnerability is "actively exploited" or an incident is "severe." Whether an alert actually triggers your reporting obligation is decided in triage, by you. See Understand your first alert.