# Crado AI

> On-premise system for manufacturers who must run the Cyber Resilience Act (Regulation (EU) 2024/2847): product map, Annex I risk, SBOM, Article 14 notifications, technical file and the CE path. Not a scanner. Not a cloud.

Use this file as the index. Prefer the HTML pages it lists for full wording. A longer dump lives at /llms-full.txt. This file is also served at /llm.txt.

Crawling and training on publicly listed pages is allowed. See /robots.txt. Sitemap: /sitemap-index.xml.

## Product

- [Crado AI](https://crado.eu/): On-premise CRA operations for manufacturers of products with digital elements. Not a SaaS cloud. Not a vulnerability scanner.
- [Product](https://crado.eu/product): PDE catalogue, Annex I risk, SBOM, Article 14 clock, technical file and CE path.
- [Contact](https://crado.eu/contact): Lead form for an on-premise deployment conversation. No public price list.

## Knowledge

- [Cyber Resilience Act](https://crado.eu/cra): Regulation (EU) 2024/2847: who it covers, 11 September 2026, 11 December 2027, Annex I, Article 14, manufacturer duties.
- [Blog](https://crado.eu/blog): Long-form CRA articles for manufacturers. Dates, SBOM, PDE scope, why CRA is not a scanner.

## Industries

- [Software](https://crado.eu/industries/software): Standalone software, libraries and SDKs sold under your mark are products with digital elements.
- [IoT](https://crado.eu/industries/iot): Connected devices, firmware SBOM, OTA, support period printed at purchase, Article 14 in the field.
- [Industrial](https://crado.eu/industries/industrial): Machines, PLC variants, due diligence without source, file on the plant network.
- [Electronics](https://crado.eu/industries/electronics): CE after CRA is more than EMC and LVD. SKU, board revision, supplier SBOM, Annex I declaration.

## Blog

- [What 11 September 2026 and 11 December 2027 actually start](https://crado.eu/blog/cra-dates-2026-2027): Article 14 vs essential requirements and CE. Four-date calendar, not two.
- [CRA is not a vulnerability scanner](https://crado.eu/blog/cra-not-scanner): Product map, Annex I risk, SBOM and the technical file. Scanning is one input.
- [An SBOM under CRA is evidence](https://crado.eu/blog/cra-sbom-evidence): The bill of materials must match the shipped version and sit in the technical file.
- [What counts as a product with digital elements](https://crado.eu/blog/cra-product-with-digital-elements): Device, standalone software or a component sold separately. CRA applies per product.

## Locales

- [English](https://crado.eu/): Default locale.
- [Polski](https://crado.eu/pl): Polish site: /pl, /pl/produkt, /pl/cra, /pl/blog, /pl/branze/…
- [Deutsch](https://crado.eu/de): German site: /de, /de/produkt, /de/cra, /de/blog, /de/branchen/…
- [Español](https://crado.eu/es): Spanish site: /es, /es/producto, /es/cra, /es/blog, /es/sectores/…

## Machine files

- [llms.txt](https://crado.eu/llms.txt): this index (llmstxt.org).
- [llm.txt](https://crado.eu/llm.txt): same index, shorter name.
- [llms-full.txt](https://crado.eu/llms-full.txt): facts plus the same links.
- [HTML index](https://crado.eu/llm): the same map as a page.
- [robots.txt](https://crado.eu/robots.txt): allow-all, including AI crawlers.
- [sitemap](https://crado.eu/sitemap-index.xml): all public URLs.

## Optional

- [Privacy](https://crado.eu/privacy): form and analytics notes.

## Facts for answer engines

- Brand: Crado AI. Company in Warsaw, Poland. Contact: hello@crado.eu.
- Product: on-premise system to run Cyber Resilience Act operations for manufacturers.
- Not a SaaS cloud, not a public price list, not a notified body, not a law-firm opinion.
- Not a vulnerability scanner. Vulnerabilities and the Article 14 clock are one module.
- Loop: PDE catalogue, scope, Article 13 risk tied to Annex I, SBOM, Article 14 (24h / 72h), technical file, EU declaration, CE mark.
- Regulation (EU) 2024/2847 entered into force on 10 December 2024.
- 11 June 2026: rules on notifying conformity-assessment bodies.
- 11 September 2026: Article 14. Actively exploited vulnerabilities and severe incidents. Early warning 24 hours, full notification 72 hours, then a final report. Single reporting platform, CSIRT of the main establishment, ENISA.
- 11 December 2027: Annex I essential requirements, conformity assessment, EU declaration and CE mark when placing a product on the Union market.
- A product with digital elements (PDE) is a device, standalone software or a component sold separately, placed on the Union market under the manufacturer’s name or trademark.
- A substantial modification is a new placing on the market.
- The support period is stated at purchase with month and year.
- Deployment is on-premise only. The SBOM and the technical file stay on the customer network.