Nordic prepares for CRA with FOTA offering

  • March 18, 2026
  • Steve Rogerson

Nordic Semiconductor is preparing its customers for the EU Cyber Resilience Act (CRA) with its nRF Cloud now offering a one-time, upfront, lifetime FOTA (firmware over-the-air) and device management licence.

Available across Nordic’s low-power wireless portfolio, nRF Cloud enables developers to meet CRA secure update requirements in minutes instead of months, avoiding the complexity of building their own update infrastructure, and with a simple one-time cost.

“Preparing for compliance with the EU Cyber Resilience Act is going to add significant operational overhead and project complexity for device manufacturers,” said François Baldassari, vice president at Nordic Semiconductor. “With the enforcement of the CRA approaching quickly, Nordic is simplifying and accelerating the compliance process for its customers.”

Pre-integrated on every Nordic-based device, nRF Cloud provides manufacturers with a turnkey foundation for EU CRA and US Cyber Trust Mark readiness. This is done by ensuring secure updates, auditability and long-term support are straightforward and cost-predictable across the product lifecycle.

NRF Cloud (nrfcloud.com) is integrated with Nordic’s unified and scalable software development kit – the nRF Connect SDK – and provides a proven chip-to-cloud FOTA option deployed at scale.

Traditional FOTA approaches require ongoing cloud fees or expensive custom infrastructure. The lifetime FOTA model from Nordic replaces this with a single upfront fee that covers secure updates and device management for the device’s entire lifespan. This ensures long-term maintainability and regulatory compliance.

“Lifetime FOTA turns long-term device support from a cost burden into a competitive advantage,” said Baldassari. “Manufacturers can maintain device security, and ship features, fixes and improvements to deployed devices, without worrying about costs and complexity. Furthermore, by unifying silicon, software and cloud, we make regulatory readiness practical on day one and sustainable for years, reducing total cost of ownership and accelerating time to market.”

This FOTA model (nrfcloud.com/lifetime-fota-form/) is built on infrastructure originally developed by Memfault, the IoT reliability and observability platform Nordic acquired last year. Customers benefit from a system that has been field-tested across millions of devices and refined over years of development.

The integration of Memfault technology into nRF Cloud supports Nordic’s focus on reducing lifecycle maintenance effort and simplifying regulatory compliance through a combined hardware, software and services offering. This unified stack should enable customers to bring connected products to market more efficiently and maintain them over the long term.

At last week’s Embedded World in Nuremberg, Nordic Semiconductor (www.nordicsemi.com) announced Fuel Gauge v2.0, an upgrade of its software-based fuel gauge offering for the nPM1300 and nPM1304 power management ICS. The release adds state-of-health estimation, adaptive battery modelling and long-term fleet analytics capabilities, extending battery management to a wide range of power-constrained IoT products.