Definition

Support period

The manufacturer-defined period, normally at least five years, during which vulnerabilities are handled and security updates are provided.

The period during which the manufacturer must ensure that vulnerabilities are handled effectively and in accordance with Annex I Part II. It must reflect the time the product is expected to be in use, taking into account user expectations, the nature of the product and relevant Union law, and must be at least five years unless the product is expected to be in use for less. The support period and its end date are stated in the user information and documented with rationale in the technical file; security updates must remain available for at least ten years after issue or the remainder of the support period.

Reference: Art. 13(8)–(9) · Regulation (EU) 2024/2847 on EUR-Lex

Updated 2026-09-12 · Paraphrase for orientation, not legal advice.