ComparisonCRA compliance and evidence platform

CRA Evidence Platform vs CVD Portal

Evidence collection and conformity management for the EU Cyber Resilience Act. How does CRA Evidence Platform compare to CVD Portal for an EU manufacturer subject to the Cyber Resilience Act?

Headquarters
European Union
Category
CRA compliance and evidence platform
Pricing model
Tiered subscription pricing for hardware and software manufacturers.

How they compare on CRA-critical features

Five differences between an evidence repository and a full CRA compliance and disclosure platform under Regulation (EU) 2024/2847.

Feature
CRA Evidence Platform
CVD Portal
Whitelabel CVD intake portal (Article 13 single point of contact)
Not advertised or requires external ticketing
Included on Free tier with hosted RFC 9116 security.txt, PGP encryption, and researcher triage
Article 14 ENISA SRP reporting workflow & submission dossiers
Checklists without pre-compiled SRP submission packages
Built in with 24h/72h/final timers and structured JSON/PDF SRP dossiers
Annex I essential requirements applicability matrix & justifications
Questionnaire-based gap assessment
Clause-by-clause applicability table with mandatory not-applicable justifications
CSAF 2.0 and OpenVEX advisory generator
Not advertised or manual export
Native CSAF 2.0 and OpenVEX advisory generator included from Pro
Published free tier suitable for SMEs
Enterprise subscription only (€10,000–€50,000+/year)
€0/month Free tier for Article 13 baseline, accessible pricing tiers for SMEs

Where CRA Evidence Platform is strong

  • +Purpose-built for EU Cyber Resilience Act Annex I and Annex VII compliance.
  • +Native support for CycloneDX 1.5, SPDX 2.3, and Sigstore cryptographic artifact signing.
  • +CSAF 2.0 lifecycle management and vulnerability suppression workflows.
  • +Standardized Annex VII technical documentation file generation.

Where it is not a CRA fit

  • !Relies on external tools or custom workflows for public researcher intake and RFC 9116 management.
  • !No published free tier for SME manufacturers seeking zero-cost Article 13 intake.
  • !Narrower focus on evidence storage compared to an end-to-end CVD operations and researcher triage portal.
  • !Emerging solution with developing integration ecosystem across CI/CD and ticketing systems.

The CRA gap

CRA Evidence Platform addresses the evidence aggregation side of CRA compliance. CVD Portal complements this by providing the public-facing Article 13 intake portal, researcher triage, and live SLA tracking alongside the conformity file.

Why teams pick CVD Portal for CRA

Five reasons EU manufacturers choose CVD Portal for comprehensive CRA compliance.

  1. 1

    Whitelabel Article 13 CVD intake portal with RFC 9116 security.txt hosting included on the Free tier.

  2. 2

    Article 14 reporting engine with 24h/72h countdown timers and SRP-ready filing packages.

  3. 3

    Free tier at €0/month covers the complete Article 13 baseline with no credit card required.

  4. 4

    Interactive classification tool to determine Article 32 conformity routes in two minutes.

  5. 5

    Comprehensive public education hub with official Commission guidance worked examples.

Frequently asked

What is the difference between CRA Evidence Platform and CVD Portal?
CRA Evidence Platform focuses on evidence collection, artifact signing, and technical file generation. CVD Portal provides an end-to-end platform covering public Article 13 intake (RFC 9116), researcher triage, Article 14 ENISA reporting, and the complete Annex VII conformity record.
Does CRA Evidence Platform provide a public vulnerability intake portal?
CRA Evidence Platform primarily manages internal evidence and SBOMs. CVD Portal provides a whitelabel, public-facing single point of contact under your domain with PGP encryption and 48-hour acknowledgment tracking.
How do the Article 14 reporting workflows compare?
CVD Portal includes live statutory deadline countdown timers (24h early warning, 72h detailed notification, 14-day final report) and exports pre-formatted SRP submission packages ready for manual submission.
Is there a free option available?
CVD Portal provides a permanent Free tier (€0/month) covering Article 13 public intake, a publication-ready policy, and SLA tracking for EU manufacturers.
Where is customer data stored?
Both platforms emphasize European sovereignty, with CVD Portal storing all customer data, audit logs, and telemetry in the European Union.

Run CRA intake, reporting, and technical files in one platform

From free Article 13 public intake to Article 14 ENISA reporting dossiers and Annex VII conformity files. The Article 13 baseline is €0/month.