CRA Bureau

Start with one product.

Set up a workspace and work through the seven artefacts for a single product. Everything you produce is yours to export, including the CycloneDX SBOM and the PDFs.

Annex VII technical file
Assembled from your answers, with the gaps flagged in place
CycloneDX SBOM
Generated from your repository, re-scanned against OSV continuously
Risk assessment
A starter library of twelve risks, mapped to Annex I
CVD policy + security.txt
Published at a stable URL, RFC 9116 compliant
Declaration of conformity
Annex V structure, blocked until you can actually stand behind it
Article 14 workflow
24-hour, 72-hour and final-report clocks that run from awareness
Tamper-evident audit trail
Hash-chained, with a verification report

451 days until the CRA applies in full. The Article 14 reporting duties already apply.

Create your workspace

This is the manufacturer name that will appear on your declaration of conformity, so use the registered legal name.

Is your company established in the EU?

This does not change whether the CRA applies. It decides whether you need an EU-based importer or authorised representative.

At least 10 characters. Length matters more than symbols.

4 days free, card required — cancel any time before it ends and you are not charged. You can produce every artefact during the trial; documents carry a draft watermark until you pick a plan.

Already have an account? Sign in