What we sell

CRA technical file

List price €3,000

€2,000 once, per product, excl. VAT

The technical documentation Annex VII of the Cyber Resilience Act requires, for one product with digital elements: 11 controlled documents drafted from your product record the moment you pay.

Documents by email; add them to a free workspace whenever you like.

11 controlled documents

CRA importer and distributor pack

List price €1,800

€1,200 once, per organization, excl. VAT

The records Articles 19 and 20 of the Cyber Resilience Act ask of an importer or distributor, for the whole organization however many products it supplies: 7 controlled documents drafted at checkout.

Documents by email; add them to a free workspace whenever you like.

7 controlled documents

Machinery Regulation technical file

List price €3,000

€2,000 once, per machine, excl. VAT

The technical file Annex IV of Regulation (EU) 2023/1230 requires, for one machine: 7 controlled documents drafted from your machine record the moment you pay.

Documents by email; add them to a free workspace whenever you like.

7 controlled documents

CRA Readiness Toolkit

€199 once, a download, excl. VAT

For a company without a subscription: the Annex VII technical file structure, the registers, the Article 14 runbook with the ENISA field schema, and the generators, offline, delivered as a download the moment Paddle confirms the payment.

The Annex VII technical file structure, the vulnerability and conformity registers, the Article 14 runbook with the ENISA fields and the four generators, as Markdown, CSV and spreadsheet files in one zip.

Delivered by email within minutes, a link that works for 30 days; the invoice comes from Paddle.

DORA Vendor Pack

€199 once, a download, excl. VAT

For an ICT third-party service provider that a bank, insurer or fund asks for DORA: every Article 30 contract clause with the ISO/IEC 27001 records that answer it, the register-of-information fields that describe you, the due diligence answers, the incident clock you have to feed, an exit plan template and the subcontracting chain, as files, delivered as a download the moment Paddle confirms the payment.

Six files in one zip: the Article 30 clause answers, the register-of-information vendor fields (CSV), the due-diligence answers, the incident notification to the entity, the exit plan and the subcontracting chain (CSV).

Delivered by email within minutes, a link that works for 30 days; the invoice comes from Paddle.

NIS2 Registration Pack

€199 once, a download, excl. VAT

For an entity working out whether NIS2 applies: the Annex I and II entity types and the size rule as a worksheet, the registration data with, for every member state, the authority, how to register or that the state has no route yet, the CSIRT, and the deadline where the authority publishes one, the 24 hour, 72 hour and one month incident runbook with the significance criteria, the ten Article 21(2) measures with the ISO/IEC 27001 records that show each, and the Article 20 management record, as files, delivered as a download the moment Paddle confirms the payment.

Five files in one zip: the entity determination worksheet, the registration data with, for every member state, the authority, how to register or that the state has no route yet, the CSIRT, and the deadline where the authority publishes one, the 24-hour, 72-hour and one-month incident runbook, the ten-measures checklist and the management approval record.

Delivered by email within minutes, a link that works for 30 days; the invoice comes from Paddle.

EUDR Due Diligence Statement Pack

€199 once, a download, excl. VAT

For an operator or trader that files a due diligence statement before the goods move. Which of the eight roles you are in, and what each one files. The statement point by point, what to collect per consignment, and the risk assessment with the country classification. The 72 hour window to amend or withdraw, and the simplified declaration a micro or small primary operator files instead.

Eleven files in one zip. The role worksheet, the statement with a block under every Annex II point, and the Article 9 collection record. The risk assessment, the mitigation and controls, and the system runbook with its 72 hour window. The Annex I codes and the country risk lists as CSV, the simplified declaration, and the timber transition.

Delivered by email within minutes, a link that works for 30 days; the invoice comes from Paddle.

European Accessibility Act Pack

€199 once, a download, excl. VAT

For a manufacturer, importer, distributor, authorised representative or service provider under the European Accessibility Act. Which of the five roles you are in and what it carries. The Annex I requirements, the conformity assessment, the declaration and the service statement. The disproportionate burden assessment with its criteria and its five-year clocks, and why no harmonised standard gives you a presumption yet.

Twelve files in one zip. The role and scope worksheet, the duties each of the five roles carries, and the Annex I requirements for products and for services. The internal production control route, the declaration of conformity, the CE marking and the service statement. The disproportionate burden assessment with the Annex VI criteria, the records and their clocks, and where the standard stands.

Delivered by email within minutes, a link that works for 30 days; the invoice comes from Paddle.

Whistleblower Directive Pack

€199 once, a download, excl. VAT

For a private employer with 50 workers or more. Nothing in the Directive binds a company directly, so the pack names the act that binds you in your own state, with its date and where to read it. The channel and its procedure, the acknowledgment and feedback clocks with the letters, the records and confidentiality, and the retaliation rules with the reversed burden of proof. Plus a worksheet for what your act added.

Ten files in one zip. Whether the duty reaches you and from when, and the act that binds you in every member state, named from the measures each one notified. The channel and its procedure, the seven-day and three-month clocks with the letters to send, the records, confidentiality and personal data. Retaliation with the reversed burden of proof, what a reporting person may do instead of telling you, and a worksheet for what your own act adds.

Delivered by email within minutes, a link that works for 30 days; the invoice comes from Paddle.

Batteries Regulation Pack

€199 once, a download, excl. VAT

For a manufacturer, importer, distributor or producer of batteries. The Regulation sets twenty-eight separate days from 2024 to 2036. Several duties arrive four times, once per battery category. The pack's calendar is what you cannot easily get anywhere else. Then the requirements with their dates, the technical documentation, the Annex IX declaration, the passport, the due diligence threshold, and the two limits on the presumption of conformity.

Thirteen files in one zip. What your battery is and what you are to it, and the calendar of every day the Regulation sets, as a table and a CSV. The sustainability and safety requirements with the day each starts, the technical documentation element by element, and the declaration of conformity on the Annex IX model. The conformity route, the battery passport, the due diligence policy, producer registration, and how far the cited standard's presumption reaches.

Delivered by email within minutes, a link that works for 30 days; the invoice comes from Paddle.

Packaging Regulation Pack

€199 once, a download, excl. VAT

For any company that packs what it sells in the Union. Six packaging formats stop being placeable on the market on 1 January 2030. Six product requirements start the same day. That is the first file, with a check to fill in. Then the calendar, the requirements with their dates, empty space and re-use. The documentation, the declaration, and the registration a producer needs before it may supply a state.

Twelve files in one zip. Which packaging and which role, the calendar as a table and a CSV, and the six formats that may not be placed on the market from 2030. The packaging requirements with the day each starts, empty space and re-use, the technical documentation and the declaration of conformity. What your role owes provision by provision, producer registration and reporting, and a table of what each role carries.

Delivered by email within minutes, a link that works for 30 days; the invoice comes from Paddle.

GPSR Product Safety Pack

€1,200 once, a download, excl. VAT

For anyone supplying a consumer product in the Union. Not a deadline you are preparing for: the Regulation has applied since 13 December 2024. No CE marking and no notified body, so what an authority asks for is the Article 9(2) file. Seven roles owe different things, and Article 13 can make a seller the manufacturer. The pack settles the role first.

Twelve files in one zip. Which of the seven roles you are in, and the three ways selling a product makes you its manufacturer. The Article 9(2) technical documentation, the safety assessment on Article 6(1)'s eight aspects, identification and language. The complaints register, the accident notification, and the recall notice on Article 36(2)'s seven elements. Every obligation by role as a spreadsheet, and the marketplace's twelve paragraphs.

Delivered by email within minutes, a link that works for 30 days; the invoice comes from Paddle.

Data Act Pack

€1,200 once, a download, excl. VAT

For a company that holds data a connected product generates, or runs a service a customer could switch away from. Two of the Regulation's four days have already passed: it has applied for a year and access by design for a month. Switching charges end next. Six roles owe different documents and a SaaS company is usually two of them, with 57 provisions under Chapter VI and 82 under Chapters II and III.

Fifteen files in one zip. The four days, two of them already passed, as a table and a CSV. Which of the six roles are yours, and most companies are two. What you tell a buyer before the sale, access by design, sharing with the user's chosen third party, and what you may charge. The nine things Article 25(2) requires of a switching contract, the pages you publish, the unfair terms review, the machine-readable descriptions, and the smart contract declaration.

Delivered by email within minutes, a link that works for 30 days; the invoice comes from Paddle.

Machinery importer and distributor pack

€1,200 once, a download, excl. VAT

For a company that imports machines into the Union or sells them on. Your duty is verification, not engineering: that the assessment happened, that the file exists, that the marking and declaration and instructions are there. The Regulation writes every duty twice, once for complete machinery and once for partly completed, and the two are not the same. A company that reads Article 13 and stops has missed Article 14.

Ten files in one zip. Which role and which track, and the two provisions that make a seller the manufacturer. The importer's checks and the distributor's verification, both tracks side by side, with every paragraph in the Journal's words. The ten-year records, which are different documents on the two tracks, and the supply trail. The mandate, the emergency mode, and a checklist per role and track.

Delivered by email within minutes, a link that works for 30 days; the invoice comes from Paddle.