Sales terms for CRACompliance digital products
B2B sales terms, version 2026-09-23-v6. The product operator supplies the service; the payment entity identified in Checkout handles its transaction responsibilities.
1. Operator and merchant of record
The configured operator supplies the product and product support; verified details are shown below. Where Stripe Managed Payments applies, the Link entity identified in Checkout/payment confirmation acts as merchant of record for payment, tax and transaction matters. Do not infer that this arrangement applies without checking the actual transaction.
2. Business audience and offer
The offer is for businesses and organisations buying for professional or business activity. Mandatory protections of eligible natural-person customers are not excluded. Available products are the selected assessment, report, versioned pack or Workspace plan. The order retains offer, amount, currency, terms version and subscription cycle. Later terms do not rewrite old orders.
3. Product nature and limitations
Assessments and reports are automated self-service deliverables based on answers and a recorded ruleset. Packs are editable templates to adapt. Workspace is a product/evidence tracker subject to its entitlement limits. No consulting, audit, legal opinion, certification, formal classification, evidence authentication or ENISA/CSIRT submission is included.
4. Price, VAT and consent
The net amount and currency appear before Checkout; the final amount and applicable tax appear before payment confirmation. Card data remains with the payment provider. The customer accepts sales and returns terms and acknowledges privacy information. For one-off digital content, express immediate-delivery consent and applicable withdrawal consequences are recorded.
5. Subscription billing
Monthly Workspace has a 14-day trial with payment method and then renews monthly until cancelled. Annual Workspace is paid upfront for 12 months without a trial and renews every 12 months until cancelled. Cancellation stops the next renewal; it does not automatically refund a period already started or change the billing cycle.
6. Delivery, access and versions
A confirmed payment or eligible confirmed trial activates fulfillment through a signed webhook, and an access link is emailed. Protect it from unauthorised recipients. Access follows the recorded expiry and applicable payment status; a full refund revokes access. Under access terms 2026-09-23-v1, one-off assessments/reports allow same-assessment/product corrections for 30 days from confirmed payment, preserving prior snapshots, and purchased-version access for 12 months. Product identity is not changed to transfer a purchase to a different product.
7. Pack updates
Under those access terms, the purchased pack version and updates published within 90 days from confirmed payment are eligible; access to granted versions lasts 12 months. Historical files are not overwritten. The update window does not limit mandatory rights or complaints about non-conforming delivery.
8. Use and data
Do not enter specific vulnerability, incident, SBOM, code or confidential evidence data into assessment intake. Customers deliberately uploading Workspace evidence must have authority and manage confidentiality and organisation permissions. Use materials within the purchasing organisation; do not resell access/templates or publish them.
9. Refunds and complaints
The returns policy is part of the purchase terms and describes the voluntary seven-day guarantee, applicable withdrawal, non-delivery and non-conformity rights. Contact the configured operator for product support and complaints; transaction channels shown in Checkout remain available.
10. Responsibility and governing law
The operator is responsible for supplying the described functionality, not regulatory, legal, technical or business decisions taken solely from a self-assessment. Liability and customer rights that mandatory law protects are not excluded. Polish law governs product-delivery terms subject to mandatory customer protections. The order retains accepted terms/refund versions.
Configured product operator
Bartosz Kowalczyk · ul. Gieysztora 4/161, 02-999 Warszawa · kontakt@cracompliance.pl
Next steps
Official sources and review context
Regulation (EU) 2024/2847 · European Commission · ENISA SRP
CRA-I18N-LEGAL-2026-10-15-REVIEW-1
Operational tools and retained records. No legal opinion, conformity assessment, certification or confirmation of CRA compliance is generated.