Get paid for the CRA advice you already give
If you advise EU manufacturers on the Cyber Resilience Act, you are already telling them what they need. This programme pays you a flat bounty when one of them takes a paid plan on CVD Portal. No tiers to climb, no volume commitment, no cap.
It is a referral programme, not a reseller agreement. You never take on support, billing, or access to a customer's workspace. If you want to operate client tenants and bill them yourself, the partner programme is the one you want.
What you earn
Paid once per referred company, on their first paid subscription.
The bounty is fixed at the moment a referral converts, so a later rate change never re-prices what you are already owed. Cleared bounties are not clawed back if the customer churns afterwards.
How it works
- Step 1Apply
Tell us who you are and who will invoice us. Anyone can apply. We review each application by hand, usually within a couple of working days.
- Step 2Get your link
Approval emails you a referral link. Nothing is attributed to you before that, so there is nothing to do while you wait.
- Step 3Share it
Anyone who signs up within 90 days of following it is attributed to you. Point it at any page, including a specific blog post or the pricing page.
- Step 4Invoice when a bounty clears
We email you when a referral converts and again once the bounty clears after 30 days. Then you invoice us and we pay by bank transfer.
The Partner Academy is free and takes about an hour. It is not required, but telling us you have passed it helps us approve you faster, because it shows you can describe the regulation accurately.
Apply
Applications are open to anyone. We approve each one by hand, so tell us enough to decide.
The one rule that matters
Never state or imply that CVD Portal guarantees CRA compliance. It does not. It is a platform for doing the work and evidencing it, and the manufacturer remains responsible for their own conformity. An affiliate who claims otherwise creates real legal exposure for the customer and for us, and that is grounds for termination.
The full terms cover the rest, including paid search, disclosure obligations, and how bounties are cleared and paid.