CRA Reporting Went Live Without an API. That Makes It an Architecture Problem.

EU CRA Article 14 reporting became mandatory on 11 September 2026. ENISA's platform has no API and personal logins — here is the portfolio and decision-rights data that decides whether you can file in 24 hours.

In this analysis

• What actually went live
• The constraints are organisational, not technical
• Your reporting route depends on where decisions are taken
• Why the application portfolio probably cannot answer this
• What this evidence does not establish

See how platforms evidence architecture policy mapping

Related analysis

• Application Portfolio Management: A Rationalization Playbook
• Information Mapping: The Data Backbone Your EA Tool Must Support
• The EA Tool Evaluation Scorecard: A Weighted Framework You Can Defend

EU CRA Reporting Obligations: The Portfolio Data Required — Vantograph