Ask HN: Cyber Resilience Act – what is "buying" software?
Does this include subscription-based payment models? Pay for use? Service-fees?
https://digital-strategy.ec.europa.eu/en/policies/cyber-resilience-act Yes. You should concentrate on understanding what a "product" is under the CRA. If what you've got is a "product" and anything of value is changing hands, you are almost certainly subject to the law. How the value changes hands makes no difference.