CRA compliance software. Evidence for every product, in one place.

One product with digital elements that you place on the market under one name — a device family sharing firmware, an app, a software product. Variants that share one firmware and one technical file count as a single product; a variant with its own technical file counts as another.

No. Engineering, compliance, legal and management use the same workspace; the plan is priced by the products it holds. Guests (a notified body’s reviewer, an importer) read trust pages and exported files, not the workspace.

Explore Attesly in the live demo and the product examples. For questions, start a chat or book a call. Your own workspace opens after payment confirmation.

A completeness score out of 100, weighted by how much of the record each check covers. Which checks apply follows your role in the supply chain and the conformity assessment route your product takes; the weights are ours, not the Regulation’s — every Annex I requirement and Article 13 obligation applies whatever weight it carries here. An aid computed from your own inputs: nothing is verified against your product, and it is not a conformity assessment. Where a product was placed on the market before 11 December 2027 and has not since been substantially modified, the checks Art. 69(2) has not yet reached are marked as deferred and still counted — the record is either complete or it is not, and a deferred duty starts on the day of a modification with no grace period. Where an Art. 2 answer puts the product outside this Regulation altogether, there is no checklist and no percentage: the record states the excluding article instead. Typical checks: classification and conformity route, SBOM imported and scanned, no open critical or actively exploited findings, Annex I requirements addressed, support period, technical documentation, EU declaration of conformity, user information, CE marking, security contact, a published coordinated vulnerability disclosure policy and registration on the ENISA reporting platform.

Attesly computes deadlines, tracks evidence and drafts documents from your data. Your team reviews the results, performs the conformity assessment and makes the declaration. Where a notified body is involved, the record gives it a starting point: your drafted technical file, the declaration and your evidence notes. The design, test and quality-system evidence it examines beyond that is yours to produce.

Hosting provider: netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany (data centre Nuremberg, Germany). Hosting region: EU (Germany). See the privacy notice and data processing agreement for processing locations and recipients.

Choose your plan and pay securely with a credit card, Apple Pay or Google Pay. There is no setup fee. Plans are billed monthly in advance. Prices are for businesses. All prices are net. No VAT is added for businesses outside the EU. The final currency and tax appear at checkout before payment. Your workspace opens after payment confirmation.

If Attesly is not right for your team, the account owner emails [email protected] within 30 days of your first payment. We refund that first payment under our guarantee terms. A short email is enough; you don't need to give a reason. The guarantee applies once per business, to the first payment of its first subscription. The refund goes back to the payment method you used, through Stripe; we confirm it personally by email. With the refund the subscription ends; you can export your data first. The binding wording is section 11a of the Terms of Service, a voluntary guarantee by Neithra Technologies, the company behind Attesly.