Companies / CRA Toolkit / Subprocessors
CRA Toolkit provides an assessment and compliance tool for the EU Cyber Resilience Act, including risk classification, requirement tracking, document generation, and an AI copilot. It serves software manufacturers, IoT and hardware makers, startups, security leads, open source stewards, and importers or distributors.
Summarized from its homepage on 8 Nov 2026.
Subprocessors of CRA Toolkit
CRA Toolkit declares 9 subprocessors, including AI providers OpenAI, OpenRouter.
From the company's own list.Read the source
| Subprocessor | Purpose |
|---|---|
| Web analytics (only with consent) | |
| OpenAI, L.L.C. / OpenRouter, Inc. | AI chatbot inference (paid API — not used for training) |
| Merchant of Record (billing, tax, invoicing) | |
| API runtime hosting | |
| Transactional email delivery | |
| Database, authentication, storage | |
| Umami Software, Inc. | Privacy-friendly analytics (only with consent) |
| Rate-limit & cache (Redis) | |
| Static hosting & serverless functions |
Questions about CRA Toolkit
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See CRA Toolkit's full stack
Every vendor with its source and date, and an alert when CRA Toolkit adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call