by cetome

Terms and Conditions

Last updated:

1. Definitions and Service Presentation

CRAscoping.com (the "Service", "Platform", or "Site") is a specialised regulatory intelligence tool engineered to evaluate product scoping, statutory categorisation, applicable harmonised standards, and conformity assessment routes under the EU Cyber Resilience Act (Regulation (EU) 2024/2847).

The Service is developed, hosted, and operated exclusively by cetome, a company registered in France under company registration number SIRET 84983610100014 (hereinafter referred to as "cetome", "we", "us", or "our").

By visiting the Site, utilising the complimentary web-based evaluation interface, or subscribing to our commercial programmatic API, you ("User", "Customer", or "Developer") enter into a legally binding agreement and agree to be governed by these Terms and Conditions.

Standard technical and customer support is furnished exclusively via our official contact form. We do not provide complimentary telephone, live-chat, or emergency incident support. Bespoke enterprise consultancy and dedicated service-level packages are available from cetome under separate contractual agreements.

2. Service Access and Operational Tiers

The Service is made available under two distinct operational frameworks:

  • Complimentary Web Platform: An interactive, browser-based evaluation facility available directly at crascoping.com for individual, ad-hoc product scoping queries.
  • Commercial Programmatic API: A dedicated, authenticated JSON API endpoint (/api/) engineered for high-throughput automated processing, bulk compliance auditing, and continuous software integration.

3. Product Input Requirements and Description Supremacy

To perform an accurate statutory classification under Regulation (EU) 2024/2847, the AI engine requires sufficient technical detail regarding the item under evaluation:

  • Mandatory Technical Specification: Every scoping query must include a technical description detailing the product’s connectivity interfaces, microprocessors, software architecture, intended operational environment, and core security functions. Assessments cannot be processed relying solely upon a commercial name or marketing title.
  • Accepted Formats: Descriptions may be submitted as structured prose, raw technical datasheets, component specifications, or text extracted from product documentation and descriptive web pages.
  • Multilingual Ingestion & Automated Translation: Inputs may be submitted in any language. The Service automatically normalises and translates foreign-language inputs into professional English technical terminology prior to regulatory classification.
  • The Description Supremacy Rule: Commercial product names are treated as discretionary labels. If an input product name contradicts the technical description (for instance, a product titled "Industrial Network Firewall" whose specification describes "a traditional wooden table"), the classification engine will evaluate the product based strictly upon the technical description, ignoring the contradictory title.

4. Artificial Intelligence, Data Protection and Anti-Poisoning Guarantee

We operate under a rigorous data governance framework designed to safeguard intellectual property, commercial secrets, and algorithmic integrity:

Your submissions are processed in volatile execution memory exclusively for the transient duration required to translate the text, compute the statutory Cyber Resilience Act classification, and return the conformity assessment report.

In accordance with Regulation (EU) 2016/679 (GDPR) and the EU Data Act, you retain uncompromised ownership of all technical information submitted to the Platform. Operational instrumentation logs are maintained solely for platform security, debugging, and analytical telemetry.

5. Commercial API Licencing and Tool Reintegration

For organisations requiring programmatic infrastructure, cetome provides paid API access subject to the following provisions:

  • Authorised Commercial Reintegration: An active paid API subscription grants you a non-exclusive, non-transferable commercial licence to reintegrate CRAscoping endpoints into your internal business systems, proprietary audit workflows, or commercial, customer-facing software tools.
  • Account & Credential Provisioning: API access requires registration of an account associated with a verifiable corporate email address. Authentication is enforced through unique cryptographic API Keys (transmitted via X-API-Key headers).
  • Security Telemetry & IP Logging: To mitigate service abuse, enforce fair consumption thresholds, and prevent credential sharing, each API request records the authenticated user account, assigned key identifier, request payload, and origin IP address.
  • Key Custody: You bear sole responsibility for safeguarding your API keys. cetome reserves the right to suspend or revoke any key exhibiting anomalous request velocity, distributed scraping signatures, or unauthorized credential exposure.

6. Financial Terms, Invoicing, and Taxes

  • Payment Processing: Commercial subscriptions, automated recurring billing, and card payments are managed through our PCI-DSS certified billing partner, Stripe.
  • Subscription Cycles: Paid plans are billed on a recurring monthly or annual basis and auto-renew at the conclusion of each billing period unless cancelled through your self-service portal prior to the renewal date.
  • B2B EU Reverse Charge: In accordance with European VAT directives, the Reverse Charge mechanism applies to registered businesses within the European Union (outside France). Customers must supply a valid European VIES VAT ID during checkout. Accompanying invoices will state "VAT Reverse Charge".
  • French Domestic VAT: Customers established in France are subject to statutory French VAT (20%).
  • B2C and Global Transactions: For individual consumers and international entities outside the European Union, VAT or applicable local sales taxes are levied in compliance with statutory territorial tax regulations.
  • Price Adjustments: cetome reserves the right to revise subscription rates. Advance notice of any planned price increase will be communicated via email at least three (3) months prior to implementation. Continued service utilisation beyond the effective date denotes acceptance of the revised schedule.

7. Cancellation and No-Refund Policy

Subscriptions may be cancelled at any time via your self-service Stripe billing portal.

In accordance with digital B2B software industry standards, all fees paid for computational allocations, API access, and prepaid subscription terms are strictly non-refundable. No pro rata refunds, cash credits, or compensation will be issued for unused days or unexhausted request quotas.

Following cancellation, you will retain unhindered access to your authorised API tier until the current prepaid billing period concludes, after which access credentials will be automatically decommissioned.

8. Nature of AI Output and Regulatory Disclaimer

The outputs, CRA categorisations (Default, Important Class I, Important Class II, Critical, or Out of Scope), harmonised standards, and recommended conformity assessment modules generated by CRAscoping.com represent preliminary decision-support intelligence.

The findings do not constitute statutory legal counsel, accredited Notified Body decisions, nor formal certifications.

Pursuant to Article 13 and Annex VII of Regulation (EU) 2024/2847, the legal product manufacturer retains sole and unalienable responsibility for performing risk assessments, preparing technical documentation, issuing the EU Declaration of Conformity, and affixing the CE marking. cetome accepts no liability for enforcement actions, product bans, or fines imposed by European market surveillance authorities.

9. Acceptable Use and Prohibitions

By utilising this Service, you explicitly covenant that you shall not:

  • Circumvent or tamper with session security, rate-limiting tokens, or client fingerprint validations.
  • Employ unauthenticated scraping tools, headless browser bots, or high-frequency automated scripts against the complimentary web evaluation form.
  • Sub-licence, broker, or publicly expose raw commercial API keys to unauthorised third parties without a bespoke enterprise agreement.
  • Transmit maliciously engineered payloads designed to compromise server infrastructure or disrupt service continuity.

cetome reserves the absolute right to terminate access forthwith, without liability or refund, upon detecting any breach of these covenants.

10. Limitation of Liability and Governing Law

To the maximum extent permitted by applicable French and European Community law, the aggregate financial liability of cetome for any and all claims, actions, or damages arising out of or related to your use of CRAscoping.com (whether founded in contract, tort, negligence, or strict liability) shall be strictly capped at the total monetary sum actually paid by you to cetome in the twelve (12) calendar months preceding the event giving rise to liability. For users accessing only the complimentary web scoper, cetome's liability is capped at 0.00 €.

These Terms and Conditions, together with all matters arising out of or in connection with them, shall be governed by, and construed in accordance with, the laws of France.

The parties shall endeavour to settle any dispute amicably. In the absence of an amicable resolution, any litigation shall fall within the exclusive jurisdiction of the competent courts of Lyon, France.

In the event of any linguistic conflict or discrepancy between this English-language text and any French translation, the official French legal construction shall prevail.