← Product
Product · 04 Evidence Exchange

Stop collecting evidence by email.

Request CRA evidence by link. Your supplier responds with a free account, KONFORMA validates the inventory, and you follow shared evidence status in one place.

How Exchange works

  1. You request evidence

    One link for the evidence you need.

  2. Supplier responds

    Upload an SBOM or connect GitHub. A free account is all it takes.

  3. KONFORMA validates

    Validate the inventory and check for vulnerabilities.

  4. You see live status

    See what is shared, missing or needs renewal.

One inventory. Multiple customers.

Suppliers maintain product data once and reuse it for further requests.

One request. Live status.

Buyers see when shared evidence is missing or needs renewal.

Exchange is available separately. Suppliers respond with a free account.

Discuss Exchange with Sales →

Frequently asked

Is it free for suppliers to respond?+

Yes. Connecting an inventory to answer a buyer’s request has no charge. A paid plan is only needed to actively manage your own product portfolio beyond that.

Can a supplier control what a buyer sees?+

Yes. Visibility is set per request rather than sharing one static document with everyone.

Does this work without a GitHub repo?+

Yes. A CycloneDX or SPDX inventory can be uploaded directly instead of connecting a repository.

Bring your supplier evidence together.