Platform · Evidence & SBOM
Compliance evidence that stays fresh.
SBOM as a first-class compliance artifact (CRA Art. 13). Quality scoring, lifecycle tracking, stale detection. Procurement-grade trust, continuous.
SBOM as compliance artifact
Auto-mapped to CRA Article 13. Accepted formats: SPDX 2.3, CycloneDX 1.5. Versioned, signed, downloadable.
Quality scoring
Each evidence piece gets a strong / moderate / weak rating. Auditors see strength at a glance.
Lifecycle tracking
Freshness detection. Stale evidence flagged automatically before it breaks an audit.
Vulnerability tracking
Known CVE mapping across SBOM dependency tree. CRA-aligned vulnerability handling.