Build the evidence behind your CRA release

What the CRA requires

The EU Cyber Resilience Act sets cybersecurity requirements for products with digital elements placed on the EU market.

For a manufacturer, this creates a repeatable checklist for every release: classify the product, assess cybersecurity risks, document vulnerability handling and updates, and retain the supporting evidence. It also gives customers and reviewers a clear record of what was checked and which evidence supported the decision.

What INSAXO creates

The Release Pack guides you through product qualification, 11 manufacturer evidence tasks, the Article 14 reporting setup, market entry, the signed EU Declaration of Conformity and CE-marking evidence. When you seal a revision, INSAXO freezes its answers and evidence mappings, then generates a private Technical Documentation Evidence Package and a public CRA Evidence Passport. Their SHA-512 fingerprints are recorded through INSAXO Core and written to blockchain, while private source files remain outside the public Passport.

How to use it

1. Create a product release and answer the qualification questions to establish the applicable CRA route.
2. Add or reuse Core evidence for every required task, complete the risk register and record the manufacturer’s Article 14 reporting contacts and process.
3. Record the first EU market-placement date, then add the signed Declaration of Conformity and CE-marking evidence.
4. Review and seal the revision. Download the private package for your records and authorised reviewers. Share the public verification link together with the exact Passport file so the recipient can verify its integrity.

Keep the original evidence files with the private package. The Passport proves integrity and evidence traceability; it is not product certification or a notified-body assessment.