Why the program exists
The EU Cyber Resilience Act forces every manufacturer selling products with digital elements into the EU to run a vulnerability disclosure process and file breach reports on fixed clocks. Most SME manufacturers have no compliance team and no idea where to start. That gap is your opportunity. The partner program lets a consultancy, testing lab, or managed security provider onboard those manufacturers, do the compliance work for them, and bill for it, all from one console.
The three partner types
Product design firms sell a finished device plus its compliance, so they need fast client provisioning and the ability to do the assessment work for the client under a shared brand. Testing, inspection, and certification bodies need portfolio-wide read and review access with clean evidence workflows. Managed security providers operate many client tenants day to day and want aggregated alerting and a single invoice. The console supports all three from the same primitives.
How you sit above your clients
Each client is a normal CVD Portal tenant with its own subdomain portal, dashboard, and CRA workspace. As a partner you sit above a set of those tenants. Your own company is the owner tenant, and its admin operates the partner console. From there you provision clients, run bulk intake, work a cross-client review queue, and drill into any client workspace to do the work.
A partner is not a separate login. The admin of your own CVD Portal tenant becomes the partner operator once your partner record is set up.