Project management platforms typically offer multiple installable components: desktop applications for offline access, mobile apps for on-the-go task management, browser extensions for notifications, and API clients for integrations. Each installable component, plus the cloud platform as remote data processing, forms a regulated product under the CRA. Article 13 requires technical documentation, risk assessment, and conformity declaration. CRACheck generates the 8-document dossier in 15-25 minutes for €149.
€149 one-time · 8-document ZIP · 15–25 minutes · Browser-side
You enter your product data. CRACheck structures the documentation per Article 31 + Annex VII.
Your PM tool is not an internal tool — it is a commercial product placed on the EU market. Internal tools developed by a company for their own use are not placed on the market. Your product is sold to external customers. It is a product with digital elements under Article 3(1).
An Electron desktop application is software installed on the user's device. Regardless of its technical architecture, it is a product with digital elements placed on the EU market. The fact that it wraps web content does not exempt it from CRA scope.
European enterprise customers are adding CRA to their vendor requirements alongside SOC 2. As enforcement approaches, CRA documentation becomes as expected as SOC 2 for products placed on the EU market. SOC 2 covers organizational controls; CRA covers product cybersecurity documentation. Both expected.
8 PDF documents generated from your data. Each cites the specific article of Regulation (EU) 2024/2847 it complies with.
Default classification for PM software.
Art. 31 + Annex VII: platform architecture, desktop/mobile apps, sync engine, file storage, and integration layer.
PM-specific: project data access, file sharing security, real-time communication integrity, integration credential management.
Annex II for workspace admins: access control, data retention, integration permissions, update policy.
Art. 28 + Annex V.
Vulnerability disclosure for PM platforms.
ENISA template per Article 14. Art. 14(2): early warning within 24h, notification within 72h, final report within 14 days.
CRA milestones.
Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.
Generated from your data, in your browser. No data leaves your device.
CRA documentation for your PM product: all platform components documented.
Does not test real-time sync security. Does not audit file sharing permissions. Does not verify Electron app sandboxing. Engineering tasks.
CRACheck documents. Engineering validates.
Article 64 of Regulation (EU) 2024/2847.
Non-compliance with essential requirements or manufacturer obligations.
Missing documentation or conformity assessment.
Misleading information to authorities.
| Criteria | SaaS compliance consultant | Generic CRA consultant | Internal team | CRACheck |
|---|---|---|---|---|
| Time | 8-14 weeks | 8-16 weeks | 4-8 weeks | 15-25 minutes |
| Cost | €12,000-€25,000 | €10,000-€20,000 | Staff hours | €149 |
| Multi-component coverage | If briefed | Partially | Depends | Yes |
| CRA output | Custom | Custom | Internal | 8 PDFs |
PM tool, docs platform, whiteboard app — each needs its own dossier. Volume: 10 at €99, 30 at €79.
Request Volume PricingCRACheck generates a structured document according to Article 31 and Annex VII of Regulation (EU) 2024/2847 from the information you provide. The accuracy is your responsibility.
We guarantee document structure and legal references are correct.
CRACheck is not legal advice.
Eight documents. Article 31 + Annex VII fully structured. Regulation (EU) 2024/2847. Your data stays on your device. The ZIP you download is yours forever.