CRA Resources, Tools & Templates

Everything here is free and works on the page. Tools only ask for your email if you want a PDF sent to you. Pick the one that matches what you need right now.

Last updated · 8 Jun 2026

Scope & Class Checker

Answer a few questions about your product and find out whether the CRA applies, and which product class (default, important class I, or important class II) it falls into.

Open

Obligations Checker

Tell us your role (Manufacturer, Importer, or Distributor) and get your CRA obligations in plain English - including what you must do before 11 December 2027.

Open

SBOM Tool

Pick your SBOM format (CycloneDX vs SPDX), run a seven-point readiness self-check against Annex VII requirements, and download a starter template.

Open

Product Classes

Understand the three CRA product classes - default, Important Class I, and Important Class II - and what each means for conformity assessment and obligations.

Open

CRA Glossary

Every CRA term decoded in plain English: SBOM, CVD, EU DoC, notified body, CE marking, essential cybersecurity requirements, Annex I, Annex VII and more.

Open

Documentation Templates

Free templates: Annex VII technical documentation index, SBOM starter (CycloneDX JSON), CVD policy, and EU Declaration of Conformity outline. Email-gated.

Open

Readiness Checklist

A plain-English checklist that walks you from "what is this?" to a signed EU DoC, with separate paths for Manufacturers and Importers/Distributors. Free PDF.

Open

Guides

Plain-English deep dives: SBOM tooling, vulnerability handling, CVD policy, conformity assessment, and more - with the official sources behind each claim.

Open

This is guidance to help you understand the EU Cyber Resilience Act, not legal advice. Confirm with the official sources we link or a qualified adviser.

The CRA Brief

New tools land in The CRA Brief first

We watch Brussels so you don't. Get the next tool, template and rule change by email, free.

No spam. Unsubscribe anytime.