CRA Kit

The kit · 13 documents · English or French · €79 per product

Generate your CRA documents

Fill in the form once. You can then preview three documents in full and the start of the others. A licence key unlocks the whole kit as Markdown, HTML and a printable version (save as PDF). Your answers stay in this browser.

1 · Company

Legal name *

Legal form

Trade name (if different)

Registration / company number

Country of establishment *

Website *Used for security.txt, policy URL and declaration.

Street address

Postal code

City

2 · Security contacts

Security e-mail *Monitored every working day. Goes into security.txt and the CVD policy.

Vulnerability report form URL (optional)

PGP key URL (optional)

Where the CVD policy will live

Security responsible (name) *

Role

Backup person

Backup e-mail

Phone for authorities

Signatory of the declaration (name)

Signatory function

3 · Product

Product name *

Current version

Type

Commercial model

Category

Role

Sector-specific rules

First placed on the EU market (this version)

Support period (years)Minimum 5 unless expected use is shorter (Article 13(8)).

EU countries where it is available

One-paragraph description and intended purpose *

Why this category? (one or two sentences)

Automatic security updates are on by default (with opt-out)

Includes remote data processing we designed (our back end)

Data processed

Operating environment

Interfaces / attack surface

Software Bill of Materials

4 · Process commitments (defaults are sensible)

Acknowledge reports within (working days)

Triage within (days)

Fix critical/high within (days)

Fix others within (days)

Coordinated disclosure after (days)

Monitoring cadence

Security testing you actually do

Procedure review

Publish an acknowledgements page for reporters