Funding programmes for CRA compliance — only programmes currently open.
A curated, link-checked overview of programmes for companies in Germany and – where available – Switzerland, as well as suitable European programmes. Funding rates and caps are programme-specific; each programme states its own rate and ceiling.
No guarantee is given – funding conditions, deadlines and available funds may change at short notice. The information does not give rise to any entitlement to funding. Eligibility and approval are decided solely by the respective funding body.
Programmes with a currently open or announced call
Funding rates and funding amounts are programme-specific. The overview is reviewed every 14 days and updated where necessary.
SECURE – funding directly for CRA implementation
EU · EEA
Funding amount: the first call provided for up to EUR 30,000 per project at 50% co-financing.
CRA relevance: SECURE specifically funds projects through which SMEs prepare their own products, processes and technical measures for the requirements of the CRA.
Status: first call closed; a further call has been announced for 2026. Conditions and deadline will be added once the official documents have been published.
HORIZON-CL3-2026-02-CS-ECCC — Horizon Europe
EU · associated countries, including Switzerland
Funding amount: depends on the call — better suited to consortia.
CRA relevance: indirectly relevant; the call funds research and development on the security of software, hardware, supply chains and development processes. It does not finance the ordinary CRA implementation of an individual company.
Status: open — deadline 15.09.2026.
Mittelstand-Digital Zentren
DE
Funding amount: free, practice-oriented support – no direct funding and no grant.
CRA relevance: indirectly relevant; the centres support SMEs free of charge with digitalisation and IT security, for example through initial consultations, workshops, checks and practical guidance. This allows CRA-relevant security measures and areas for action to be identified and prepared at an early stage. No specific CRA funding or financing of the implementation is associated with this.
Status: active.
Digitalbonus (German federal states)
DE · e.g. Bavaria
Funding amount: up to 50%; Digitalbonus Standard a maximum of EUR 7,500, Digitalbonus Plus a maximum of EUR 30,000 for particularly innovative projects.
CRA relevance: expenditure on suitable ICT software and external services for digitalisation or improving IT security may be eligible for funding. The eligibility of the specific crAIready project must be checked before applying.
Status: active – programme runs until 31.12.2027.
CYBER-11-EULEG — DIGITAL EUROPE
EU · EEA
Funding amount: 50% funding rate; expected EU contribution EUR 3–5 million per project — for larger EU projects.
CRA relevance: explicitly supports the implementation of the CRA and other EU cybersecurity legislation, including through compliance tools and reporting platforms.
Status: open — deadline 14.01.2027 (opened on 01.09.2026); participation restricted to the EU and EEA.
CYBER-11-AI4SME — DIGITAL EUROPE
EU · EEA
Funding amount: 50% funding rate, 75% for SMEs; expected EU contribution EUR 3–5 million per project — for larger EU projects.
CRA relevance: indirectly relevant; funding is provided for cybersecurity solutions for SMEs, including for risk management, threat detection, incident response and reporting. The call is not specifically limited to the CRA compliance of individual companies.
Status: open — deadline 14.01.2027 (opened on 01.09.2026); participation restricted to the EU and EEA.
Programmes currently covered
The overview covers programmes for companies in Germany and Switzerland as well as suitable European programmes. It is reviewed every 14 days and updated where necessary.
Funding amount, funding rate and requirements differ by programme and project. Selected SME programmes provide for grants of up to EUR 30,000; other programmes have different volumes or offer advice instead of direct funding.
For each programme, the source, date, funding rate, ceiling and status are stated. No specific funding or approval is promised.