Engineering platform
ASF Core
Safety and security analyses with AI drafts, engineer review and traceability.
- HARA
- FMEA
- FTA
- TARA
- RAMS
- Safety case
AI-assisted engineering for safety, cybersecurity and compliance
HARA, FMEA, TARA, RAMS and CRA evidence. AI drafts the rows, your engineers decide.



NVIDIA and the NVIDIA logo are trademarks and/or registered trademarks of NVIDIA Corporation in the U.S. and other countries.
AI rows link to the passage or clause they came from. Open it in one click.
Accept, edit or reject. Every decision carries a name, a time and a reason.
Requirements, analyses, reviews and evidence stay linked, so a change shows what it affects.
How it works
Four steps from source documents to approved, traceable work products.


01/04Bring your sources
Specifications, standards and prior analyses ground every suggestion and stay in your workspace.
Products
Start with one, add the other. CRA evidence links back to the engineering record.
Engineering platform
Safety and security analyses with AI drafts, engineer review and traceability.
Compliance product
EU Cyber Resilience Act readiness for manufacturers, from applicability to reporting.
Both run as managed cloud hosted in Germany, private cloud or self-hosted.
Industries
Safety and security engineering
ISO 26262 · ISO/SAE 21434
Item definition, HARA, safety goals, FSC/TSC, FSR/TSR and TARA with review state and trace links. Item definition and HARA checked clause by clause in an independent ISO 26262 gap analysis.
Learn moreISO 10218 · ISO 13849-1 · ISO 12100
Risk assessment per ISO 12100, safety functions with required performance level, SRS and PL verification for industrial and collaborative robot cells under the Machinery Regulation.
Learn moreEN 50126 · EN 50128 · EN 50129
RAMS plans, hazard logs, safety requirements and SRAC, safety cases and assessment records along the rail lifecycle, with independent review for the roles that require it.
Learn moreCRA readiness · reporting duties since 11 Sept 2026
CRA · IEC 62443-4-1 · ETSI EN 303 645
Any product with digital elements: applicability, classification, essential requirements, SBOM, vulnerability handling and Article 14 reporting from one record.
Learn moreCRA Annex III/IV · IEC 62443
PLCs, controllers, industrial gateways and IACS components: important and critical product classes, IEC 62443 alignment and evidence for notified-body assessment.
Learn moreCRA Annex III · Class I and II
Routers, modems, switches, VPN products and firewalls are important products with third-party conformity assessment. Track obligations, SBOM and VEX per product.
Learn moreCRA Annex III · ETSI EN 303 645
Smart locks, cameras, alarm systems, wearables and connected toys fall under Class I. Prepare the technical documentation and support period before 11 December 2027.
Learn moreMedical devices, process industry and aviation profiles are available on request →
Validation, programmes and partners
Independent ISO 26262 gap analysis
An independent I3 assessor checked these workflows against ISO 26262-3:2018 Clauses 5 and 6 (58 requirements) in September 2026 and delivered a written report. Open findings are being closed.
AltaLab Fall 2026
Altair Capital’s online sprint for early-stage AI companies, closed September 2026.
NVIDIA Inception
NVIDIA’s programme for startups building with AI: technical resources, training and partner network. Membership is not an endorsement of the product.
Design-partner pilots
One real workflow, your data, named reviewers, acceptance criteria agreed up front.
Become a design partner →The ISO 26262 review is a gap analysis against Part 3, not an ISO 26262-2 assessment or evidence of conformity. Scope and method are described to pilot candidates on request.
Connectors
Pair requirements with your ALM, track work in Jira and exchange analyses with medini analyze. Inbound changes are previewed and reviewed; ASF never approves or transitions items in the other tool.
News & events
Meet us in person at
We’re presenting at edge lab LIVE! @ electronica 2026 in Munich. Our talk, “From Firmware Build to CRA Evidence,” shows how to build a reproducible, vendor-neutral SBOM and vulnerability workflow for embedded products, with a focus on the failure modes where automation falls short.
Latest articles
All articles →45 minutes with the team, using an item or product of your choice. We reply within one business day.