Notification Preferences
Notification settings are under Settings → Notifications.
Company settings
- Alert Recipients. The email addresses that receive the security notifications.
- Functional Role Routing. Send compliance, security, product and auditor notices to separate team mailboxes. When a group is empty, its notices go to the Alert Recipients.
- Portal Disclosure Operations. Turn on emails for new vulnerability reports and for status changes.
- Deadline Reminders. Email each requirement owner when an Annex I checklist item is due in 7 days and again when it is overdue.
Personal preferences
Each user sets personal preferences under Configure personal notification preferences. For each category, you set the in-app feed and email to Immediate, Daily Digest or Off.
The portal does not send SMS. On the Enterprise plan, webhook integrations under Settings → Integrations can post events to Slack, Microsoft Teams or Discord.
Deadline guidance emails
Separate from operational alerts, admins can opt in to occasional obligation-guidance emails about the CRA deadlines, for example a heads-up as 11 September 2026 approaches. This is explicit opt-in only.
The opt-in is offered at sign-up, on the registration page, and it applies whichever sign-up method is used, email and password or Google and GitHub. The checkbox is never pre-ticked. Admins who did not opt in at sign-up see a one-time prompt in the dashboard, where the opt-in can be granted with one click. Every email carries a one-click unsubscribe link that withdraws consent immediately.