Partner program for resellers and consultancies
The partner program is for organizations that take on client work: provisioning client workspaces, doing compliance work inside them, and in many cases carrying the billing. Typical partners are product design companies that hand clients a compliance workspace with the device they build, testing and certification bodies that review client evidence, and managed security service providers that operate vulnerability handling for many clients.
Partner or affiliate
There are two ways to earn from CVD Portal, and they are not tiers of one another. Pick by whether you want to operate client accounts.
| Partner | Affiliate | |
|---|---|---|
| You are | A firm taking on client work | Anyone with an audience who recommends tools |
| You get | A console, client workspaces, partner seats | A referral link |
| You do | Onboard clients and do compliance work for them | Share a link |
| You earn | Wholesale margin, or client-direct with attribution | A flat bounty per paid conversion |
| Client data | You work inside it, with the client's consent | You never see it |
| Support burden | You are the client's first line | None |
| Joining | Onboarded by us after a conversation | Apply online, approved by hand |
| Commercials | In your partner agreement | Published rates |
One routing rule matters, because it decides who gets paid. A company onboarded by a partner never generates an affiliate bounty, on the reasoning that the partner already earns margin on that tenant and the platform must not pay twice for one sale. If an existing or prospective client of yours is already a CVD Portal customer, that is partner territory, not an affiliate link.
Joining
Partners are onboarded by the CVD Portal team rather than by self-serve signup, because the arrangement involves a commercial agreement and, usually, a wholesale rate. Get in touch and we will work through the fit.
Once onboarded, the ADMIN of the partner's own company account sees a Partner Console entry in the dashboard navigation.
The partner console
The console at /partner lists every client workspace linked to the partner. For each client it shows the plan, who pays for it, a readiness roll-up of technical-file artifacts across the client's products, and a button to enter the workspace.
The console also carries deal registration, bulk intake, the cross-client review queue, and notification settings.
Partner manuals
Start with the client onboarding manual. The manual includes screenshots, click steps, common problems, recommended practices, and a client handover checklist. Use the partner manuals index to find guidance for other client tasks.
Onboarding clients
There are two ways to bring a client onto the platform.
- Create the workspace from the console. Enter the client company name and the founder's work email. The founder receives an email with a set-your-password link that activates the account and makes them the workspace ADMIN. The link is valid for 7 days.
- Share the signup link. Every partner has a branded signup page at /p/<partner-slug>. Companies that register through it are linked to the partner automatically.
Activation pending
A client workspace you create stays in the state "Activation pending" until the founder sets a password. While it is pending, the client's public portal is closed and every portal page returns "not found". The console shows an Activation pending label on the client row, and "Link expired" when the 7-day link is no longer valid.
If the founder did not get the email, or the link expired, click Resend activation email on the client row. The founder receives a new link that is valid for 7 days, and the earlier link stops working. You can resend 3 times per client per hour. Each resend is recorded in the client's audit log.
The resend is available only while the workspace is not active and the founder has no password. When the founder already has a password, ask them to sign in or to use "Forgot password" on the sign-in page.
Clients always own their workspace and their data. The partner link adds support and co-branding, never control.
Entering a client workspace
Each client row in the console offers two ways in, and both are visible to the client.
Look opens the client's dashboard read-only for 30 minutes. Changes are disabled, the banner names the partner, and the visit is recorded in the client's audit log. Use it when you only need to check something.
Work in takes a partner seat: a working session with write access, for partners who do the compliance work on the client's behalf. The seat is granted automatically the first time you use it. The session keeps the partner's own identity, so every change is recorded in the client's audit log under the consultant's name, and a banner shows which client workspace is active with a link back to the partner's own workspace. Billing, account deletion, and the partner-access controls themselves are never available from a seat.
Clients stay in control. Settings, under Partner Access, lists every partner seat with the person's email and the date it was granted, and each one can be revoked individually. Turning partner access off blocks new entry and ends any session already open. Revocation takes effect on the consultant's next request, not at their next login.
Partner access works before the client activates their own account. The client's public portal stays closed until they verify their email and activate their workspace. This lets you begin compliance work immediately after provisioning, without waiting for the client to complete their setup.
Bulk intake
Bulk intake, under Bulk intake in the console, is for the case where you are holding documents for several manufacturers at once. Upload up to 20 files in one batch, 15 MB each, as PDF, images or text.
Each file is read for the product and manufacturer it describes, and the batch is then grouped for you. A group points at one of three destinations: an existing product in one of your client workspaces, a new product in a client workspace, or a brand new client. Every group shows how confident the match is, and groups needing a decision sort to the top.
Nothing reaches a client until you dispatch it. Uploaded files stay on your side of the account while you review, and you can retarget a group, move a single document between groups, or remove a file entirely. Creating a client this way needs the work email of that client's first admin, who is emailed an activation link exactly as if you had added them from the console.
Dispatching a group files each document into the client's workspace as draft evidence with its suggested CRA controls, the same state the client would reach by uploading it themselves. Nothing is counted as evidence until someone confirms the suggestions. Each dispatched group gives you a link straight into that product in the client's workspace, opened on your partner seat.
If a client is not on the Compliance plan, dispatch to that client is refused and tells you so; set their plan from the console and dispatch again.
Review queue
The review queue, under Review queue in the console, is the one place that answers what is waiting on you across every client you serve.
Items are ranked by what blocks whom, not by how many there are. Export approvals come first because they hold up a client's technical file, then documents waiting to be confirmed, then information requests you are chasing, then review triggers and unconfirmed classifications.
Routine checklist work is counted separately and shown in grey. A newly created product has close to two hundred open items by definition, so counting those as things waiting on you would drown out the handful that genuinely are. Products carrying only checklist work appear under "In progress, nothing waiting".
Every line links straight to the tab that resolves it, opened on your partner seat in that client's workspace. Clients who have turned partner access off are listed at the bottom, with their work hidden rather than shown as complete.
Email notifications
Four emails go to every admin on the partner account. Turn any of them off under Notifications in the console. Three of them link to a phone-sized page so you can act without opening a laptop.
An export sign-off request is the one worth interrupting you, because until someone decides, that client cannot export their technical file. Whoever raised the request is never emailed about it, since they are not allowed to approve their own request anyway.
Bulk intake ready to confirm arrives once every document in a batch has been read and grouped. The linked page lets you file a group whose destination is already settled with one tap. Groups that need a new client workspace, or have no destination yet, say so and wait for a larger screen, because that is where a mistake would put one manufacturer's documents into another's workspace.
The daily review digest summarises what is waiting across your clients. It is only sent when something is actually waiting, so a quiet day means no email, and an arriving digest always means there is work.
Client signup and activation tells you when a company signs up through your partner link or matches a deal you registered. You get one email at signup and one when the client confirms their email address. You also get the second email when a client you invited activates. This email links to the client row in the console.
Links in these emails do not log you in. Tapping one takes you through the normal sign-in and then on to the page, so a forwarded email never gives anyone access to a client workspace.
Billing
Each client is billed one of two ways, chosen per client in the console.
- Client direct. The client pays CVD Portal with the normal checkout. This is the default.
- Partner invoiced. The partner receives one consolidated invoice covering all partner-billed clients, with one line per tier. The partner assigns each client's tier from the console. Wholesale discounts are applied to the partner's invoice and are not visible to clients.
Partner-billed clients see a note on their billing page that their plan is managed by their partner.
Your wholesale rate normally comes from your partner level, described below. A rate can also be pinned in your agreement, in which case it applies regardless of level.
Partner levels
There are four levels. Revenue earns a level, and a training certificate is required to hold it. Revenue is partner-sourced revenue over the trailing twelve months. A certificate counts when at least one user of your partner account holds it.
| Level | Trailing 12-month partner-sourced revenue | Certificate required | Wholesale discount |
|---|---|---|---|
| Registered | Any | None | 0% |
| Qualified | Any | Partner Academy | 10% |
| Certified | €10,000 | Partner Academy | 20% |
| Strategic | €50,000 | Partner Academy and CRA for Manufacturers | 30% |
Both courses are free. The Partner Academy is at cvdportal.com/partners/academy and the CRA for Manufacturers course is at cvdportal.com/academy/cra-manufacturer. Use the same email address for the exam as for your CVD Portal user, because that is how the certificate is matched to your account.
A certificate does not replace revenue. A partner with €50,000 in revenue and no Partner Academy certificate stays at Registered until someone on the team passes the exam.
Partner-sourced revenue counts both billing modes. Wholesale invoices you pay us count, and so do clients you introduced who pay us directly. A partner is not penalised for letting a client hold their own card.
Levels are recalculated on the first of each month, and we email you when yours changes.
Promotion applies immediately at the next recalculation. Demotion does not. Your level only drops after you have not met its requirements for 90 consecutive days, so a slow quarter does not cut your margin mid-year. The same rule applies when the person who holds the certificate leaves. You then have 90 days to put another person through the exam. If you meet the requirements again inside that window, nothing happens and the clock resets.
If your agreement pins a specific wholesale rate, that rate applies whatever your level is. Your level is still calculated and shown.
Deal registration
Register a prospect before you invest time in it and you hold the account for 90 days. Registrations live at /partner/deals in the console.
Register the prospect's company name and domain. We review it, normally within two business days. Once approved:
- No other partner can register that account while your lock runs.
- Anyone signing up with an email on that domain is linked to you automatically, even if they arrive through our website rather than your signup link.
- Revenue from that account counts toward your partner level.
A registration is refused in three cases. Another partner already holds a live registration on the domain. You already hold one yourself. Or the company is already a CVD Portal customer, in which case it is an expansion conversation with whoever holds the account rather than a new deal.
Submitting a registration holds the domain immediately, so a competing partner cannot get ahead of you while yours is in the queue. The 90-day clock only starts when we approve it, so a slow review never costs you time.
If a deal is taking longer than 90 days and is genuinely still live, ask us to extend it before it lapses. Once a registration lapses the account is open again. You can also withdraw a registration yourself, which releases the account immediately.
A registered deal that converts pays you through your normal partner commercials, not as an affiliate bounty. This is the same routing rule as everywhere else. A tenant that is credited to a partner never also generates an affiliate commission.
Co-branding
Client portals of partner-linked companies show an "Operated with" line in the footer naming the partner, on every plan. The partner's logo also appears on the branded signup page, in the portal header, and in the client dashboard header.
If your logo is made for a dark background, for example white text on a transparent ground, tell us. We then show it on a navy tile on light pages, and your clients' dashboards open in dark mode. Each user can still switch between light and dark mode.
Email to your clients
Email that we send to your clients uses only your name and logo. The words "CVD Portal" and "Porta Regulus" do not appear. This applies to every email about the client workspace, for example account confirmation, password reset, team invitations, deadline alerts and digests. Researchers who report through a client portal also get email in your name.
- The sender name is your partner name. The sender address stays noreply@cvdportal.com.
- Links in the email open cvdportal.com, because sign-in and the dashboard run there.
- Your logo replaces the product name at the top of the email. The logo must use an https address.
- Product news and course email keep the CVD Portal name.
This stops when your partner account is not active.
Training
The Partner Academy is free public training covering platform mechanics, the CRA itself, and sales enablement, ending in a certification exam. It is not required to become a partner. It is required for every discounted level, as described in Partner levels above.
Notified bodies
Conformity-assessment bodies and cybersecurity testing laboratories have their own directory at /standards/notified-bodies. Use it when a product needs a third-party conformity assessment under CRA Article 32.
The listing is independently curated and informational. Inclusion implies no endorsement, partnership, or commercial relationship with CVD Portal. Confirm current designation in the Commission's NANDO database before you engage any body.
There is no longer a directory of consultancies, tooling vendors, legal practices, or resellers. It was removed because the listed organizations had no relationship with CVD Portal and the /partners URL implied one. The old address redirects to the notified bodies directory.