According to the CRA, manufacturers that market connected devices in the European market will be required to provide security updates for identified vulnerabilities throughout the lifespan of each device, starting in 2027. Available across Nordic's entire low-power wireless connectivity portfolio, nRF Cloud enables developers to meet the CRA's secure update requirements in minutes instead of months, eliminating the complexity of building their own update infrastructure and requiring only a single upfront cost.
“Preparing for compliance with the EU Cyber Resilience Act will place a significant operational burden and increase project complexity for device manufacturers,” explains François Baldassari, founder of Memfault and vice president of Software Services at Nordic Semiconductor. “With the CRA coming into force rapidly approaching, Nordic is providing solutions that simplify and accelerate the compliance process for its customers.”
Pre-integrated into all Nordic-based devices, nRF Cloud provides manufacturers with a turnkey foundation for complying with both the EU CRA and the US Cyber Trust Mark. This is achieved by ensuring that secure updates, auditability, and long-term support are simple and cost-effective throughout the product lifecycle.
A complete solution: chip-to-cloud.
nRF Cloud is integrated with Nordic's unified and scalable software development kit, nRF Connect SDK, and provides a complete, large-scale, proven chip-to-cloud FOTA solution.
Key capabilities include:
MCUboot bootloader integrated into the nRF Connect SDK;
global FOTA delivery network optimized for low-power devices
; ready-to-use FOTA libraries for gateway-based updates;
automated phased deployments with analytics, health monitoring, and rollback;
intuitive fleet management console;
and immutable approval workflows and audit logs.
A lifetime pricing model that redefines the economics of FOTA.
Traditional FOTA approaches require ongoing cloud fees or expensive custom infrastructure. Nordic Semiconductor's lifetime FOTA model replaces this approach with a single upfront fee that covers secure updates and device management for the entire lifespan of the device. This ensures long-term maintainability and regulatory compliance.
“Lifetime FOTA transforms long-term device support from a cost burden into a competitive advantage. Manufacturers can maintain device security and ship new features, fixes, and enhancements without worrying about costs or complexity,” explains Baldassari. “Furthermore, by unifying silicon, software, and cloud, we make regulatory readiness feasible from day one and sustainable for years, reducing total cost of ownership and accelerating time to market.”.
A new offering based on Memfault technology:
The nRF Cloud FOTA model is built on infrastructure originally developed by Memfault, the IoT reliability and observability platform that Nordic Semiconductor acquired in 2015. Customers benefit from a system proven on millions of devices and refined over years of development.
Integrating Memfault technology into nRF Cloud supports Nordic's approach of reducing maintenance effort throughout the product lifecycle and simplifying regulatory compliance through a combined hardware, software, and services offering. This unified ecosystem enables customers to bring connected products to market more efficiently and maintain them long-term.
Availability:
The nRF Cloud Lifetime FOTA and device management offering is now available for all Nordic nRF54, nRF53, and nRF52 series Bluetooth® Low Energy SoCs, as well as nRF91 cellular IoT modules. Pricing starts at $1 per device, depending on fleet size and project requirements.
