Resources
Knowledge hub
Guides, example projects and reference material to get your TRA done.
Example projects
Complete, worked TRAs you can open and learn from.
Smart thermostat (CRA default class)
A full worked TRA for a consumer IoT device — 12 components across four zones, 11 rated threats and their treatments, and the system diagram. Open it as your own draft from the Library on the Projects page.
Industrial gateway (IEC 62443, CRA class I)
A component-level TRA for an OT edge gateway against an IEC 62443-4-2 SL-2 target — 17 components across five zones, 13 rated threats with 16 treatments, a documented compensating countermeasure, and the system diagram. Open it as your own draft from the Library on the Projects page.
SaaS backend, self-hosted edition (CRA default class)
Backend software sold both as SaaS and for self-hosting, and why only the self-hosted edition is in CRA scope — 14 components across five zones including the build pipeline, 15 rated threats with 17 treatments, CRA Annex I categories instead of IEC 62443, and the system diagram. Open it as your own draft from the Library on the Projects page.
Example process descriptions
Complete, realistic documents from a fictitious 45-person manufacturer. Each has its own page, so you can link to it from inside TRA Studio.
Start here: the processes
Company-level policies & standards
Supporting registers & templates
Per-product pre-development (SensorNode S300)
Example project plans
The example document set shows what a CRA-aligned process writes down. These plans show the order it gets written in, who does it, and roughly how long it takes. Two of them follow the simplified default-product workflow — one to put the company-level processes in force, one to take a single product through them. The third runs the full workflow template, with every conformity-assessment route open.
Plan A
Establish the CRA processes
Vulnerability handling and CVD, SBOM tooling and component overview, Article 14 reporting readiness — the foundations every product then inherits, ending in a tabletop exercise against the clock.
- Duration
- 6 weeks, part-time
- Effort
- ~19 person-days across 3 roles
- Timing anchor
- Art. 14 applies from 11 Sep 2026
Plan B
An example product through the CRA lifecycle
Plan, build & verify, release, maintain — the SensorNode S300 from classification to CE marking and on into steady-state maintenance, with the gate evidence named at each step.
- Duration
- 16 weeks to market placement
- Route
- Module A self-assessment
- Timing anchor
- Full CRA application from 11 Dec 2027
Plan C
Paid plansThe full CRA workflow, end to end
The complete template rather than the self-assessment subset: 23 corporate process documents, the supply-chain controls, every conformity-assessment route including the notified-body ones, and the quality-system branch.
- Duration
- ~30 weeks on Module A, plus notified-body lead time
- Effort
- ~110 person-days across 9 roles
- Covers
- 60 activities in 5 phases
Guides & how-tos
Orientation on the method — what each stage is for, and what a good answer looks like. For the clicks themselves, the walkthroughs under Support take you through the product screen by screen.
Am I in CRA scope?
Decide fast whether the CRA applies to your product.
Run the CRA check →Building your first TRA
The shape of the work, in five moves — what a TRA is for and when to run it.
Read the guide →Mapping requirements to your lifecycle processes
Turn a standard into assigned development activities — see it done in a full worked document set.
See the example documents →Exporting a compliance dossier
Produce evidence for auditors and customers.
Read the guide →Doing it in the tool, step by step
The walkthroughs: one complete pass through TRA Studio from an empty workspace to a printed report, screenshot by screenshot.
Open the walkthroughs →