Crosswalk turns the CRA, NIS2, GDPR, the Machinery Regulation and RED into one guided assessment: verbatim law texts, gap analysis, evidence and audit-ready reports. Project files live in a folder on your device and the app works offline; AI assistance is opt-in and uses the provider you configure.
CRA reporting obligations apply from 11 September 2026; the main obligations from 11 December 2027.
The CRA starter - the one law with the deadline, free to work with.
Assess your company against the law - every law included.
Everything in Essentials, plus the full standards depth and audit-grade records.
Everything in Professional, for consultants running client engagements.
The Essentials feature set at no charge for maintainers of open-source software projects and for students and educators. Always bring your own AI key or run a local model (no Plus). Non-commercial use; apply with a link to your public repository, or from your institutional email address.
| Per month, billed annually | Free | Community | Essentials | Professional | Advisor |
|---|---|---|---|---|---|
| First seat | €0 | €0 | €99 | €249 | €449 |
| Extra seats (each, any plan) | – | – | €49 | €49 | €49 |
| Plus, per seat (managed AI, optional) | not available | not available | +€29 | +€29 | +€29 |
| All five laws, as workable controls | CRA only | ✓ | ✓ | ✓ | ✓ |
| Controls catalogue (14 sets, 850+ controls) | – | – | – | ✓ | ✓ |
| Evidence binder, audit trail, version history | – | – | – | ✓ | ✓ |
| Client branding on reports | – | – | – | – | ✓ |
| Send & track forms (issue, track, import returns) | – | – | – | – | ✓ |
| Priority support | – | – | – | ✓ | ✓ |
| Prices in EUR per month per seat, billed annually, excl. VAT. A seat is a person working in the workspace. Free covers the CRA workflow with watermarked output and no AI. Community is for eligible open-source maintainers, students and educators (non-commercial, always bring your own AI key). | |||||
Fourteen standards-based control sets, 850+ controls in total - each one Crosswalk's own assessment layer: audit questions, measurable criteria, evidence prompts and law mappings that reference the standard by clause. Official standard texts are not included; licence those from their publishers.
As the CRA harmonised standards (standardisation request M/606) are published in the Official Journal, Crosswalk adds their assessment layers too - flagged with the presumption of conformity they then carry - so your catalogue keeps pace with the harmonised route as it lands.
Every paid plan includes AI assistance with your own key (OpenAI, Anthropic, Google, Mistral), an AI subscription you already have (Claude Pro/Max, Gemini, Copilot or ChatGPT, via the local helper), or a local model on your machine - at no extra charge. The optional Plus upgrade (+€29 / month per seat, billed annually) adds a managed key supplied with the licence: no key procurement, no separate AI vendor contract, processed under the data-processing annex of the licence agreement. Each Plus seat carries a monthly AI-usage allowance sized for normal assessment work; when a seat reaches it, AI assistance pauses until the next month - the workspace itself keeps working, and you can switch any seat to your own key at any time. No surprise charges. The free Community plan is always bring-your-own-key.
Yes - pick a folder inside your synced OneDrive, Google Drive or Dropbox and the project is backed up and synced automatically. The files stay ordinary files on your own device; the sync relationship is yours with your own cloud provider, and nothing passes through eu-cyber-laws.com. One person edits a project at a time (sync clients copy files, they do not merge edits).
Every modern browser runs Crosswalk. In Chrome and Edge, projects are stored as real files in a folder you pick on your own device (File System Access) - visible on disk, easy to back up, git-friendly; recommended for production use. Firefox and Safari cannot open a folder, so there Crosswalk keeps the project in the browser's own protected storage instead - export regularly (the export zip is your backup), and note that Safari may clear storage of sites you have not used for a while.
Essentials answers "what does the law require of us, and where do we stand" - for every law, with workable controls. Professional adds the standards depth auditors and customers ask for: the 800+ controls catalogue, law-to-standard mappings and the evidence trail. If you supply OT/industrial or certified products, you will want Professional.
The regulatory layer: consolidated law texts, the harmonised-standards tracker, Commission guidance and FAQ updates, and new control sets as EU rules evolve. The software updates ride along.
Maintainers of open-source software projects (apply with a link to your public repository) and students or educators (apply from your institutional email). Community covers non-commercial use and always brings your own AI key. For commercial work, Essentials picks up where Community ends.
In project files inside a folder you choose on your own device, readable as plain files. AI features are opt-in: with your own key, requests go straight from your browser to the provider you configured, under your agreement with them; on a Plus plan, through the Crosswalk proxy to the managed AI provider, under the data-processing annex of the licence agreement (nothing is stored beyond usage counts).
A seat is a person working in the Crosswalk workspace. The first seat carries the plan price; every further seat is €49 / month, billed annually, on any paid plan. Reading a shared export or report needs no seat.
Yes - via the local helper: it drives the vendor's own signed-in agent on your machine, so your existing plan pays for the AI (Claude Pro/Max gives the full agentic assistant; others run read-only). Do check the terms of your subscription first: whether your plan permits this use is governed by the vendor's own licence terms, and those can change. In the browser you can also bring your own API key and pay per use. Plus needs neither: a managed key for your seats under the data-processing annex of the licence agreement - no key management, no separate AI vendor contract, predictable cost.
14 days per project, counted from the first time you open that project. The trial is the full workflow with watermarked output. After the trial the project turns read-only - still viewable and exportable - and a licence re-enables editing and removes the watermark.
The app keeps opening your projects in read-only mode, so records and exports remain available. Editing resumes when a licence key is active again.
No. IEC, ISO, EN and ETSI standards are copyrighted publications, licensed or distributed by their publishers (IEC, ISO, CEN/CENELEC members, ETSI). The controls catalogue is Crosswalk's own assessment layer: audit questions, criteria and mappings that reference the standards by clause, written to be used alongside your own copy. Reports cite clauses; they do not reproduce standard text.