Affiliate program for referrers

The affiliate program pays a flat bounty when someone you refer takes a paid CVD Portal subscription. Share a link, get paid when it converts. You never touch a customer's account, their billing, or their support.

What you earn

One bounty per referred company, on their first paid subscription.

Plan the customer takes	They pay	You earn
Reporting	€99/month, billed annually	€150
Compliance	€299/month, billed annually	€500
Enterprise	€1,499/month, billed annually	€2,000

Three things about that number are worth knowing up front, because they are the questions every affiliate program gets asked and most answer badly.

The bounty is fixed at the moment the subscription starts. If we change the rates later, that never re-prices a bounty you have already earned.

It is paid once per company, not per seat and not per renewal. An upgrade later does not create a second bounty.

Once a bounty clears, it is yours. We do not claw it back if the customer churns six months later.

Is this for you

It fits if you talk to EU manufacturers about the Cyber Resilience Act and already recommend tooling. Consultants, trainers, industry newsletters, technical writers, and course authors are the usual shape.

It does not fit if you want to take on client work. Operating client workspaces, doing the compliance work for them, or carrying their billing is the partner program, which is a different arrangement with a commercial agreement behind it.

Anyone can apply. There is no audience-size minimum, no volume commitment, and no cap.

How it works

1. Apply at /affiliates. Tell us who you are and which entity will invoice us. Every application is reviewed by hand, usually within a couple of working days. That review, rather than any automatic gate, is what controls who represents the product.

Passing the free Partner Academy is optional. Supplying the verification code from your certificate helps us approve you faster, because it evidences that you can describe the CRA accurately. The code has to match the email you apply with. A missing or mismatched code never rejects an application.

2. Get your link. Approval emails you a link of the form https://cvdportal.com/r/YOURCODE. No link exists before approval, so there is nothing to do while you wait and nothing can be attributed to you in the meantime.

To send people to a specific page rather than the homepage, add ?to= and a path:

https://cvdportal.com/r/YOURCODE?to=/pricing
https://cvdportal.com/r/YOURCODE?to=/cra/article-14

Only same-site paths are accepted. Anything pointing at another domain falls back to the homepage.

3. Get paid. We email you when a referral converts, and again when the bounty clears. The second email is your cue to invoice us.

Attribution

Following your link sets a first-party cookie that lasts 90 days. If the visitor creates an account in that window, the signup is credited to you.

The rules that decide whether you actually get paid:

• Last touch wins. If someone follows another affiliate's link after yours and then signs up, that affiliate is credited.
• A company is attributed once, ever, when the account is first created. Accounts that already existed are never re-attributed, so sending your link to an existing customer earns nothing.
• No self-referral. You cannot refer yourself, your employer, or anyone sharing your email domain.
• Partner-onboarded companies earn no bounty. If a reseller partner brought that company on, the partner already earns margin on it and we do not pay twice for one sale.

Clearance and payment

A bounty clears 30 days after the subscription starts. That window exists to cover refunds and cancellations: if the customer cancels inside it, the bounty is void. After it, the bounty is owed regardless of what the customer does next.

Once cleared, you invoice us from the billing entity on your application and we pay by bank transfer. There is no payout minimum and no platform fee.

Bounties are payable in euro. Your own tax and VAT position, including whether reverse charge applies, is yours to handle. We do not withhold or calculate tax for you, and we do not issue self-billed invoices.

What you may call yourself

You are an affiliate. You are not a partner.

"Partner" is reserved for organizations that have signed a partner agreement and operate client workspaces. Describing yourself as a CVD Portal partner, or saying you have partnered with CVD Portal or Porta Regulus, misrepresents the relationship to people making a compliance purchase, so it is not permitted.

Accurate: "CVD Portal affiliate", "I earn a commission if you sign up through this link", "I recommend CVD Portal".

Not accurate: "CVD Portal partner", "official reseller", "certified by CVD Portal", "in partnership with Porta Regulus".

If you hold a Partner Academy certificate you may say you are a Certified Partner Consultant, because that is the credential's actual name and it certifies you personally. It does not make your business a partner.

What ends your participation

The full list is in the affiliate terms, which are the authoritative version. The ones that matter most:

Never state or imply that CVD Portal guarantees CRA compliance. It does not. It is a platform for doing the work and evidencing it, and the manufacturer stays responsible for their own conformity. Claiming otherwise creates real legal exposure for the customer and for us, and it is the fastest way out of the program.

Also prohibited: bidding on our brand terms or close variants in paid search, coupon and cashback listings, unsolicited email or messaging, cookie stuffing and typosquatting, and failing to disclose that a link is a paid referral where the platform or the law requires it.

Common questions

Do I need to be a customer? No.

Do I need the Partner Academy certificate? No. It is optional and speeds up approval.

What if my referral upgrades later? The bounty was fixed at their first paid subscription. An upgrade does not create a second one.

What if they cancel? Inside the 30-day clearance window, the bounty is void. After it clears, you keep it.

Can I refer someone who already has a free account? No. Attribution happens when the account is first created, so an existing account cannot be attributed.

Can I refer my own client? If they would be your client, you probably want the partner program instead. You cannot refer a company sharing your email domain.

Is there a dashboard? Not yet. You get an email on each conversion and a statement when bounties clear. If the program grows enough to make that tedious, a self-serve view follows.