When a customer asks for a software bill of materials or CRA evidence, KONFORMA Exchange lets you respond from real, verified data, connect GitHub or upload an inventory once, free, and reuse it for every request that follows.
Free for suppliers, you only pay if you choose to manage your own products beyond a request.
A buyer using KONFORMA sends you an evidence request through Exchange, or you set up your own inventory pre-emptively.
Connect GitHub or upload a CycloneDX/SPDX inventory. There is no charge for a supplier to respond to a request.
Your inventory is checked for completeness and matched against known vulnerabilities automatically.
The buyer sees your readiness live instead of a document that goes stale the day it’s sent.
Once your components and releases are in KONFORMA, every new evidence request from any buyer draws on the same verified data. No re-collecting information you already sent someone else last month.
Yes. Connecting an inventory to answer a buyer’s evidence request is free. You only need a paid plan if you want to actively manage your own product portfolio beyond that.
No. On GitHub import KONFORMA fetches the software inventory GitHub already generates, not your source code.
Yes. You decide what’s shared per request rather than sending a static document to everyone.
Connect your inventory and respond today, it’s free.