Manual approval
Requests are reviewed manually so we can match teams to the right guided pilot scope.
Guided pilot access
Use 1–3 product versions or SBOMs to evaluate SBOM component tracking and background vulnerability alerting, review decisions, owners, timestamps, and a draft product-version evidence pack with guided onboarding.
Applications are manually reviewed. Access is not instant self-service and should use sample data or a controlled internal evaluation scope until onboarding and security boundaries are agreed.
Requests are reviewed manually so we can match teams to the right guided pilot scope.
Early access focuses on SBOM evidence, vulnerability review context, remediation actions, and retained product-version history.
CRA Ledger helps organize readiness evidence. It does not provide legal certification, conformity assessment, or legal advice.