Your workspace for Cyber Resilience Act compliance.
Classify each product, record the assessment, and prepare each Article 14 report inside the deadline, in one place. Your compliance stays documented, audit-ready, and defensible.
- ISO/IEC 29147
- EN 40000-1-3
- CSA STAR Level 1
- GCVE GNA 126
- CSAF 2.0 export
- EU hosted
- GDPR processor terms
- Pentested quarterly
One journey, from first disclosure to CE marking.
Receive disclosures
A branded portal on your own subdomain, with a published policy and 48-hour acknowledgment tracking. Free, and worth having now.
Create a free portal →File on the clock
An actively exploited vulnerability starts the 24-hour and 72-hour Article 14 timers, and the fix starts the 14-day one. The filing package is prepared for you.
How Article 14 filing works →Classify and assess
Classify under Annex III and IV, pick the Article 32 conformity route, and run the risk assessment.
Classify your product →Declare conformity
Close the Annex I gaps, assemble the technical file, and draw up the EU Declaration of Conformity.
See how self-assessment works →Where a notified body is still requiredRead the condition →
Module A self-assessment is open to default-class products. Annex III Class I products need a notified body or a European cybersecurity certification scheme for as long as no CRA harmonised standard is cited in the Official Journal. Class II and critical products always need one. For those, CVD Portal prepares the technical file and the Annex I evidence the assessment body asks for, and does not replace it.
Industry Context
“Organisations increasingly recognise that software development nowadays requires an active, positive response to vulnerability reports, which strengthens security and is becoming a strong selling point when handled properly.”
EU buyers and market surveillance authorities increasingly expect manufacturers to show a documented CRA position. CVD Portal gives you a structured assessment, the technical file to back it, and a published disclosure process.
Simple and transparent pricing
See full pricing →Receive, track, and acknowledge disclosures. No Article 14 package
Article 14 authority filing support + full CRA-compliant vulnerability disclosure workflow
CRA self-assessment through to the EU Declaration of Conformity
Every module at scale, lifecycle support for 25 products, integrations, EUDI identity
Prefer to work offline? 37 fillable CRA templates in DOCX, PDF, and Markdown, which import into the workspace later. Browse template packages →
Does your company meet the CRA disclosure baseline?
Enter your domain. The scan checks the contact point that Article 13(17) and Annex II ask for, an RFC 9116 security.txt and a discoverable disclosure policy. No signup.
Checks /.well-known/security.txt and eight common policy paths. Without the web search, no data goes to third parties. Up to five scans per hour.
Get every product CRA-ready before 11 December 2027
Open a free disclosure portal today, or start the 14-day Compliance trial for classification, risk assessment, and the EU Declaration of Conformity.
Questions first? Talk to us →