Channel and referral partners for EU Cyber Resilience Act vulnerability and incident reporting

CVD Portal is a compliance platform for EU Cyber Resilience Act Article 14 reporting. From 11 September 2026, manufacturers of products with digital elements must run coordinated vulnerability disclosure and report actively exploited vulnerabilities and severe incidents to the designated coordinator CSIRT through the ENISA Single Reporting Platform. The platform handles the full reporting lifecycle, from researcher intake and CVSS scoring through coordinator assignment to SRP-ready output, with a complete audit trail.

We are looking for partners who already advise or serve manufacturers exposed to the CRA.

Authorised Representatives who act for non-EU manufacturers and need an Article 14 reporting route for their clients.

CE marking and product compliance consultancies who guide manufacturers through conformity and want a reporting solution to refer.

Managed security service providers who want to offer Article 14 reporting to their client base under a white-label or partner arrangement.

Two ways to work together. Refer clients to CVD Portal and earn a recurring partner arrangement, or deliver the platform to your own clients under your brand. Partner terms are agreed directly and depend on the model.

The September 2026 deadline is firm and the penalties for Article 14 breaches sit in the top tier under the regulation. Manufacturers are looking for a route now. If you serve this market, send a message and we can arrange a short call.