Nordic Semiconductor Bundles FOTA, Preps for EU Cyber Resilience Act
Event summary
- Nordic Semiconductor is offering a lifetime FOTA (Firmware Over-the-Air) and device management license via its new nRF Cloud service.
- The offering is priced starting at $1 per device, dependent on fleet size.
- nRF Cloud is built on technology acquired from Memfault in 2025.
- The service is available for Nordic's nRF54, nRF53, nRF52 Series Bluetooth Low Energy SoCs, and nRF91 Series cellular IoT modules.
- The EU Cyber Resilience Act (CRA) mandates security updates for connected devices starting in 2027.
The big picture
Nordic Semiconductor's nRF Cloud offering directly addresses the looming compliance burden imposed by the EU Cyber Resilience Act, a regulation poised to reshape the IoT device manufacturing landscape. By bundling FOTA services and leveraging Memfault's technology, Nordic is positioning itself as a key enabler for device manufacturers navigating this regulatory shift. The lifetime pricing model represents a significant departure from traditional FOTA economics, potentially disrupting the market and creating a competitive advantage for Nordic.
What we're watching
- Adoption Rate
- The success of nRF Cloud hinges on rapid adoption by Nordic's customer base, as the CRA enforcement deadline approaches in 2027. Slow uptake could leave Nordic vulnerable to competitors offering similar solutions.
- Pricing Pressure
- The $1/device lifetime pricing model, while attractive, may face pressure as competitors respond. Nordic will need to demonstrate the value proposition to maintain margins.
- CRA Impact
- The broader impact of the CRA on the IoT device manufacturing landscape will be significant, and Nordic’s offering will serve as a bellwether for how device makers adapt to the new regulatory environment.
