Record

At a glance

Why it exists

Staged CRA Article 14 deadlines and human reportability decisions need one accountable case record rather than scattered spreadsheets and email threads.

Division: Commercial
Relationship: Registered trade name of Elucidsoft LLC
Stage: Coming soon
Category: Regulatory incident reporting
Built for: Manufacturers subject to the EU Cyber Resilience Act
Built with: Bun, Svelte 5, OriJS, PostgreSQL
Site: actlume.com

Detail

What ActLume is

CRA Article 14 requires manufacturers to report actively exploited vulnerabilities and severe incidents affecting product security, with staged outer time limits after awareness: a 24-hour early warning, a 72-hour notification, and a final report. These obligations enter into application on 11 September 2026, and tracking them across spreadsheets and email threads leaves accountable staff without a single record of what was decided and when.

ActLume keeps manufacturer, product, and reporter readiness details alongside incident facts, human reportability decisions, declared awareness times, deadline tracking, and staged report preparation and review in one case record per occurrence. A human filer signs into the ENISA Single Reporting Platform with EU Login to review and submit each report; ActLume never signs in, submits, or automates the portal itself, offering copy-assist to copy one selected value per explicit user gesture and recording the confirmed result as evidence. Every legal determination stays with accountable people.

ActLume is currently in pre-release development, with its marketing site live at actlume.com ahead of Article 14 obligations entering into application on 11 September 2026, for manufacturers organizing their CRA reporting readiness before the deadline.

Elsewhere