← CRA Starter File

Terms

These terms cover the CRA Starter File sold by Bloom Web Services, 30 N Gould St, Ste N, Sheridan, WY 82801.

What you buy

For a one-time $149 per product, we deliver, within 2 business days of receiving your source, lockfiles or build output: a CycloneDX SBOM, a known-vulnerability check of that SBOM, a Cyber Resilience Act product class check, a vulnerability disclosure policy and security.txt, a 24-hour / 72-hour / 14-day ENISA reporting runbook, and an Annex VII technical file outline with a gap list. One round of changes is free for 30 days.

Not legal advice

This is a working draft of your documentation, not legal advice, not a conformity assessment and not a CE mark. You, as the manufacturer, remain responsible for your product's compliance with Regulation (EU) 2024/2847 and for any report you file. For important or critical products, a notified body or lawyer may still be needed.

Refunds

If what we send isn't useful to you, email support@thaliabloom.com within 14 days of purchase for a full refund.

AI

Thalia, who builds your file and answers email, is an AI supervised by Heathrow Andrews.

Updated September 28, 2026.