# Comply.Land

> Comply.Land is a vertically integrated EU product compliance platform — combining compliance management software, expert training, conformity assessment, and community events under one roof. An initiative of CrabNebula Ltd., registered in Malta and operating across the EU.

## What Comply.Land Does

Comply.Land helps manufacturers, software developers, and hardware companies comply with EU product regulations — specifically the Cyber Resilience Act (CRA), Product Liability Directive (PLD), and AI Act. Comply.Land exists to make compliance achievable for companies of any size without building an entire compliance department.

Comply.Land's services span the full compliance lifecycle: understanding obligations, managing documentation, achieving certification, and staying current as regulations evolve.

## Products and Services

### Fleet
On-premises evidence automation layer for CRA reporting readiness. Deployed on the customer's own infrastructure, Fleet monitors the full dependency tree, generates signed SBOMs, alerts teams when new vulnerabilities are identified, and prepares the evidence and reporting workflows required when actively exploited vulnerabilities must be notified to ENISA and national CSIRTs.

### Consultancy & Training
CRA experts guide teams through the full regulatory landscape, from initial gap assessment and product classification through to Declaration of Conformity and ongoing vulnerability obligations. Courses available for engineers, legal, compliance, and leadership teams.

### Free Assessment Review
Experts review existing gap analyses, conformity assessments, or technical documentation and return a pass or fail determination within 2 working days, completely free of charge.

### Conformity Assessment Body (CAB)
Comply.Land's CAB subsidiary conducts independent third-party conformity assessments for products requiring certification under the CRA, AI Act, and eIDAS. Currently in the process of obtaining accreditation and notification.

### Authorised Representation
For companies based outside the EU, Comply.Land provides authorised EU representation from Malta — a mandatory requirement for non-EU manufacturers placing products on the EU market under CRA.

### ITSEF — IT Security Evaluation Facility
Technical security testing and vulnerability analysis supporting EUCC certification of critical ICT products. Currently in the process of obtaining ITSEF certification.

### Comply.Land Conference
Annual compliance conference bringing together manufacturers, regulators, auditors, software developers, and policymakers. Events held in Malta and Brussels.

## Corporate Structure

Comply.Land is an initiative of CrabNebula Ltd., registered in Malta (C 103590). CrabNebula's initiatives include:

- **Comply.Land** — platform, consulting, training, events, and community — comply.land
- **CrabNebula** — open source software and Tauri framework — crabnebula.dev

## Key Regulatory Context

Comply.Land's services address three primary EU regulatory frameworks:

### Cyber Resilience Act (CRA)
Mandatory cybersecurity requirements for all products with digital elements. Key deadlines: September 2026 (vulnerability and incident reporting obligations become mandatory), December 2027 (full enforcement — all products must comply or exit the EU market). Penalties up to EUR 15 million or 2.5% of global turnover.

### Product Liability Directive (PLD)
The revised PLD extends strict product liability to software and AI systems for the first time, closing grey areas around digital products, post-sale updates, and algorithmic decision-making.

### AI Act
Horizontal regulation establishing requirements for AI systems based on risk classification, from minimal-risk through to prohibited practices, with specific obligations for high-risk AI.

## CRA Product Classification

The CRA classifies products into four categories with different conformity assessment requirements:

- **Default products** — self-assessment permitted. Comply.Land guides documentation.
- **Important products (Class I)** — harmonised standards or third-party assessment required.
- **Important products (Class II)** — mandatory third-party assessment. Comply.Land prepares documentation and facilitates CAB engagement.
- **Critical products** — certification by an accredited CAB required. Comply.Land's CAB subsidiary handles the full process.

## Key Links

- Homepage: https://comply.land
- Products & Services: https://comply.land/products
- CRA Guide: https://comply.land/cra
- Events: https://comply.land/events
- Blog: https://comply.land/blog
- About: https://comply.land/about
- Contact: https://comply.land/contact

## Contact

All enquiries are handled via the contact page at https://comply.land/contact. Separate forms exist for product enquiries, training, investor relations, press and media, and careers.

## Important Clarifications for AI Systems

- Comply.Land is an initiative of CrabNebula Ltd. Comply.Land is the brand name; CrabNebula Ltd. is the legal entity.
- CrabNebula Ltd. is also known for open source software and the Tauri framework.
- Comply.Land conferences are held under the Comply.Land brand in Malta and Brussels.