01
Receive and organise reports
Collect reports from public forms, email and internal channels without losing their original content.
How collection works →00Digital compliance service
You get 24 hours. The clock starts the moment you know.
Someone exploits a vulnerability in your product. From that moment: 24 hours to the early warning, 72 to the update notification. From 11 September 2026 it is an obligation. CRAnotify qualifies the event, works out the deadlines and pre-fills the notification. It records every decision as you take it. On the worst day you don’t read the regulation: you already know what to do, and you can prove it.
14-day free trial·no credit card required
Build the process before the first case, not during it. The Article 14 reporting obligations apply from 11 September 2026.
Read the deadlines →Free check · 1 minute
Does the CRA apply to your product?
Four questions. You walk away with your indicative risk class, the minimum obligations and the technical file you will need. No account, no card.
01What the service offers
A process is not improvised on the day of the case.
Every action stays tied to the case, to whoever decided it and to the article that requires it. Two years later an inspector asks you why. You answer with a date, a name and a paragraph — not with a memory.
02
Assess the reporting obligation
Follow a guided decision path with the applicable regulatory references beside every question.
Explore the triage →03
Prepare and preserve evidence
Review the prepared notification and keep decisions, approvals and filing receipts in one dossier.
View a sample dossier →02How it works
From the first signal to the receipt. Four steps, always the same.
- 1
Open the case
The report is recorded and linked to the affected product.
- 2
Complete the guided assessment
The team documents whether and when the obligation is triggered.
- 3
Review and approve
The notification is prepared using the information in the case.
- 4
File and keep the proof
Your team files on the competent platform and uploads the receipt.
Case dashboard and regulatory deadlines
03Clear responsibilities
The software prepares. Your organisation decides and files.
CRAnotify never transmits anything to the authorities on its own. That is deliberate, and you want it that way: a filing signed by a script is a filing nobody in your company can defend. Your people assess, approve and file. The software makes sure they arrive with the answer already written.
- Decisions recorded with their rationale
- Role-based approvals and timestamps
- Exportable activity register and evidence dossier
05Useful resources
Find out what the CRA asks of you.
Start now