CRA Shield guides iOS and Android developers through classification, assessment, SBOM generation, and compliance documentation.
Why this matters
If your iOS or Android app connects to a network, processes data, or uses third-party libraries — the CRA applies to you.
Without a Software Bill of Materials, vulnerability handling, and conformity documentation — you're non-compliant by default.
Market surveillance authorities can fine developers €15M or 2.5% of global turnover — whichever is higher. Per violation.
Apps pulled from the EU market. User trust shattered. Partners walk away. Recovery takes years — if it happens at all.
The CRA enforcement deadline is 11 December 2027. Don't wait.
Get compliant for €149 →Start with a classification result, end with the documents your technical file needs.
Answer three sets of questions. The wizard checks your app against Annex III and Annex IV triggers and tells you whether you're Default, Class I, or Class II.
Upload your lock files — package.json, Podfile.lock, Package.resolved, build.gradle. Every component is parsed, checked against OSV.dev, and written to a CycloneDX 1.5 SBOM.
Four templates cover the required CRA documentation, each pre-filled from your classification and assessment data. Fill the gaps and generate a PDF.
No subscriptions. No per-seat fees. Pay once, own it forever.
€149
One-time payment. Up to 2 apps.
Get Developer€249
One-time payment. Up to 10 apps.
Get ProfessionalIf you can't find what you're looking for, email support@cra-shield.com and we'll get back to you.
If your app is a commercial product with digital elements placed on the EU market, it likely falls under the CRA. Our three-step classification wizard determines this by checking scope criteria and Annex III/IV triggers specific to your app.
Developer (€149) and Professional (€249) are one-time payments with lifetime access. The Vulnerability Monitoring add-on (€7/month) is the only recurring charge, and it's entirely optional.
npm (package.json, package-lock.json, yarn.lock), CocoaPods (Podfile.lock), Swift Package Manager (Package.resolved), and Gradle (build.gradle). Output is CycloneDX 1.5 JSON format.
No. CRA Shield is a compliance toolkit that helps you organise your CRA effort. All generated documents carry disclaimers. Consult with legal counsel for your specific situation.
One-time payment. No subscriptions. Full compliance toolkit.
Get Started — from €149