CRA PROCESS
Compliance workspace
EU CRA · mandatory from 11 December 2027
Get your product CRA-compliant without guessing what the standard means.
The Cyber Resilience Act applies to every product with digital elements sold in the EU, with penalties reaching 15 M EUR or 2.5% of global turnover. CRA Process walks your team through the draft prEN 40000-1-2 process — clause by clause, criterion by criterion — and hands you the evidence record at the end.
- 14-day free trial
- No card required
- Data hosted in the EU
Process backbone
- §5Cybersecurity principles
- §6.2 – 6.7Risk management loop
- §7.2Cybersecurity planning
- §7.3 → 7.6Requirements → Design → V&V
- §7.7Secure production & distribution
- §7.8 & 7.9Issue management & monitoring
- §7.10 & 7.11Decommissioning & 3rd-party
prEN 40000-1-2 · EN 18031-2 · IEC 62443-4-1
Why teams stall
The standard is a hundred pages of process.
Every clause is broken into inputs, requirements, outputs and assessment criteria you can actually tick off.
Evidence lives in five different heads.
One shared company workspace where progress, decisions and open tasks stay in the same place.
An auditor will ask for traceability.
Export a dated compliance report with clause-by-clause status, open tasks and a signature block.
What you get
The whole process in one workspace — not a checklist bolted onto a spreadsheet.
Interactive clause flowchart
Clauses 5, 6 and 7 of prEN 40000-1-2 as a navigable two-track process — risk management and cybersecurity activities.
Every clause, fully unpacked
Inputs, requirements, outputs and assessment criteria transcribed per clause, so nothing is left to interpretation.
Cross-referenced standards
Each clause links to the matching controls in EN 18031-2 and the practices in IEC 62443-4-1.
AI guidance per clause
Ask what a requirement means for your product, and turn the answer into concrete tasks in one click.
Task list that follows the process
Tasks are tied to the clause they came from, so the backlog maps directly onto the compliance record.
Exportable compliance report
A printable PDF with metrics, an AI-written executive summary, the full clause record and a review-and-approval block.
How it works
01
Create a product project and pick its class.
02
Work the flowchart clause by clause, checking assessment criteria as evidence lands.
03
Export the dated compliance report for review and sign-off.
Pricing
Enterprise licence
5 000 SEK/ year per company
One price per company, up to 5 users sharing the same workspace. Start with a 14-day free trial — no card, no commitment. Licences are invoiced and activated by us.
- Full prEN 40000-1-2 clause library
- EN 18031-2 and IEC 62443-4-1 cross-references
- AI clause guidance and task drafting
- Unlimited product projects
- Exportable PDF compliance reports
- Up to 5 users in a shared company workspace
- EU hosting, encrypted, isolated per company
Questions
December 2027 is a fixed date. The process starts now.
Create a workspace, add your first product, and see exactly which clauses stand between you and a defensible CRA compliance record.
Start free trial