codAIx was founded on a clear conviction: cybersecurity compliance should be understandable and demonstrable for everyone, large and small companies alike. The Cyber Resilience Act sets legitimate requirements — but implementing them can be overwhelming.

We build the tools that change that.

Our mission

We make CRA compliance feasible, comprehensible and affordable — for SMEs too. Not by simplifying the requirements, but by structuring and partially automating the work needed to implement them.

What drives us

Grounded in the Regulation

We take the legislation seriously. Each function is traceable to the relevant articles and annexes of the CRA.

Responsible AI

We use AI to support selected tasks. Its outputs remain proposals; significant decisions require human review and approval.

We practise what we preach

We apply the same security principles internally, including regular risk assessments and documented incident-response procedures.

Governance for our use of AI

We review our use of AI on a risk-based basis, with particular attention to data quality, human oversight, technical documentation and cybersecurity. Based on our current assessment, crAIready is not classified as a high-risk AI system under Annex III of the AI Act. We document and regularly review this assessment in light of the functions and deployment models used. We are also progressively aligning our management system with ISO/IEC 42001.