Notification preferences

Resilic emails notifications per user, per category. Every teammate manages their own preferences from the settings screen; mail always goes to your account email address (there is no per-category address override).

The categories

• Actively-exploited vulnerability alerts — new actively-exploited (CISA KEV) vulnerabilities match deployed products. One email per sync run listing every new match — a backfill SBOM full of old firmware becomes one loud alert, never an inbox avalanche. This is a CRA Article 14 awareness trigger for you to assess — not a legal determination that a reporting obligation exists. See correlation & triage.
• Article 14 reporting-deadline reminders — reminders as a reporting deadline on an open reportable event approaches (the 24h early warning, the 72h notification, or a final report whose clock is running). See reports & deadlines.
• Supplier re-qualification reminders — a supplier’s re-qualification comes due, with a 30-day lead. See suppliers & qualification.
• Risk assessment review needed — new evidence (an exploited match, a new SBOM, or a new deployment) has flagged an approved risk assessment for review.
• New vulnerability matches (digest) — the scheduled correlation found new matches on your fleet that are not known to be actively exploited. One digest per sync run (never one email per CVE), listing the top matches by severity with a link to the triage queue. A heads-up for fleet managers — not an Article 14 trigger. See correlation & triage.

How subscriptions behave

• Default is on. A new member is subscribed to every category until they switch one off; only your deviations from the default are stored.
• Toggling a category off stops the emails for you — teammates keep their own settings, and the underlying event is still recorded in Resilic either way. Opting out of an email never hides anything in the product.
• Only active members receive mail. Invited or suspended members never do.

Changing your preferences

Open Settings → Notification preferences, toggle the categories you want, and save. The matrix shows a short description next to each category so it is clear what you are turning off before you do it.

One framing note, because it matters: notification emails are conveniences layered over the workflows, not the workflows themselves. In particular, an exploited-match email does not start the Article 14 clock — only a person declaring a reportable event and confirming the awareness time does that — and a missed deadline reminder does not move a deadline. Treat the emails as nudges toward the screens where the recorded, human-signed decisions happen.