Free until you place it on the market.
Doing the work costs nothing: the risk assessment, the Annex I and Annex II checklists with your evidence against them, daily scanning of what you ship, and the Article 14 clocks. You pay when you sign — to freeze the technical file, draw up the Declaration of Conformity and record a release.
Free No card, no expiry, one product
Do the whole job: scope classification, the Article 13(2) risk assessment and every revision of it, all 22 Annex I requirements and the Annex II user information with your evidence recorded against them, your SBOM scanned daily against OSV and CISA KEV, and the Article 14 reporting clocks if something happens.
Your whole team, under their own names — we do not charge per person. The Annex VII file renders as a gap report on the free plan. Here is one.
Early access — one plan
This is an early-access price. The service is in active development and will change. Subscribe now and this is what you pay for as long as the subscription runs — the price rises for people who join later, not for you.
The Cyber Resilience Act's reporting duty starts on 11 September 2026; the rest applies from 11 December 2027. Everything you need for the first date is on the free plan.
Early_Access
€199 / year
- 5 products
- Place it on the market: freeze the Annex VII file, draw up the Declaration of Conformity, sign off, and record releases
What support covers
We help with
- getting the connector attached, and why it will not attach
- what a field is asking for and what the tool does with it
- reading your gap report or technical file with you
- why something was refused, and what would satisfy it
- bugs — and anything the tool told you that turns out to be wrong, which we want to hear about most
We do not advise on your obligations
- which product class you are in, or whether you are in scope
- whether a justification or risk decision is good enough
- whether you need a notified body
- whether a change is a substantial modification
- whether a particular vulnerability must be reported
Not because the questions are unwelcome. Answering them would make this the wrong thing: the tool records what you decide and shows you the gaps, and a support inbox that quietly did the deciding would be worse than one that says no — you would not know which answers to check.
One person, one inbox, European hours. Best effort, usually within two working days, slower in August. No phone, no chat, no guaranteed response time — at this price those would be promises we could not keep. If that is not enough for how you plan to use this, ask before you subscribe and we will tell you honestly.
Questions
What happens to my data if I stop paying?
Nothing is deleted, and you drop to the free plan rather than losing access — you keep working the checklist, the scanning and the clocks. What stops is freezing and signing. Anything already frozen stays readable: technical documentation has to be kept for ten years under Article 13(13), and a plan lapsing is not a reason to take it from you.
Can I cancel?
Any time, from the billing page. The plan runs until the end of the period you have already paid for — reporting deadlines do not stop mid-obligation.
Do you take card details?
Never. Payment happens on Stripe's own pages; this service never sees a card number.
Is VAT included?
Shown at checkout, calculated by Stripe from your billing country.
Do you charge per person?
No. Every plan has unlimited members, including free. An Article 14 clock runs for 24 hours, and a plan that permits one login makes that person a single point of failure on a legal deadline.
Prices are read from our payment provider when this page renders, so what you see is what you are charged. VAT is added where applicable. Already subscribed? Manage your subscription — change your card, read invoices, or cancel.