CRA Assistent
Questions about the Cyber Resilience Act
Questions about the Cyber Resilience Act
Hello, I am the CRA assistant. Ask me anything about the Cyber Resilience Act, about roles and obligations, or about using CRA-Portal.
Since 2 February 2025 the EU AI Act requires that anyone working with an AI system understands what it does, where it goes wrong and where its limits lie. Not as a course, but as something you can demonstrate. CRAIA turns that into a record.
One-off 195 euro for small and medium-sized businesses, 495 for government and listed companies. Then per participating employee per year.
The text is short. It names no course, no exam and no recognised certificate. It says you must ensure a sufficient level of knowledge, matched to what a person does with the system. The burden of proof sits with you, which means there has to be something to show.
Not everyone in the organisation, but everyone who operates an AI system or acts on its output. Think of whoever uses ChatGPT or Copilot, whoever reviews an AI shortlist of job applicants, or whoever answers customers with AI-drafted replies. That is usually more people than expected.
Enough to understand what the system does, when it is wrong, and when a human has to step in. Matched to the role, not to the technology.
A regulator does not ask whether your people know. It asks how you arranged it. Without a record, the answer is an opinion.
Organisations deploying high-risk AI systems face heavier requirements on top of this. The assessment shows whether that applies to you.
You fill in the basics and we handle the rest. Your staff install nothing and remember nothing: they receive a link.
Name, size, sector and a contact person. Five minutes, once.
Which AI systems do you use, what for, and do they touch personal data or decisions about people? Look wider than standalone AI services: the AI features inside your CRM, HR system or accounting package count too. Your IT people fill this in once, and then it stands.
Each person receives a personal link, works through the modules that match their systems, and finishes with a short assessment.
You see where everyone stands: invited, in progress, completed, and how long it remains valid. That record is what you show when asked.
Role, the systems they work with, what was covered and on which date. We hold no more than name, email address, job title, department and progress, on servers in Germany. Downloadable as a PDF, for the whole organisation or per person.
Every certificate carries its own reference that can be checked online. So it is more than a piece of paper.
Knowledge ages and systems change. We tell you when someone is due for a refresher, or when you add a new AI system.
A one-off setup fee, then a yearly amount for each employee who actually works with AI. If half your people do not, they are not in the system and you do not pay for them. No hidden modules and no minimum term.
| Type of organisation | Amount |
|---|---|
| Small and medium-sized business | € 195 |
| Government and listed companies | € 495 |
The rate runs in bands, like income tax. You pay for each employee the rate of the band they fall in, so as your organisation grows, everyone above the threshold counts at the lower rate straight away.
| Band | Per employee |
|---|---|
| Employees 1 to 10 | € 15,00 |
| 11 to 50 | € 12,50 |
| 51 to 100 | € 10,00 |
| 101 and above | € 6,50 |
All amounts exclude VAT.
Choose the type of organisation you are and how many employees are involved. You will see the price immediately, pay, and can start at once. No quotation, no waiting, no sales call.