From concept to compliance

Available today

What ASF delivers now

Implemented in ASF Core and the CRA Compliance Cockpit and available for pilot evaluation. Method-specific coverage is validated with each design partner.

• ASF Core workspaces

  • System context, item definition, requirements and baselines
  • HARA, safety goals, FSC, TSC, FSR, TSR and architecture records
  • FMEA, FMEDA, FTA, ETA, DIA, TCA, FHA, HAZOP and LOPA
  • ISO 26262 safety case, confirmation review, audit, assessment, configuration baseline and safety release (manual entry)
  • Railway RAMS, hazard log, safety case and assurance records
  • Verification specifications, runs, evidence and review decisions
  • Lifecycle and V-model views with traceability across five industry profiles

• Review, AI assistance and exchange

  • AI-assisted drafting with row-level review and approval
  • AI mode Off, Conservative, Balanced or Exploratory. Every workspace also works manually
  • Explain panel per AI row: rationale, model- vs template-filled fields, confidence, ranked sources
  • Workspace copilot with reviewable proposals
  • Baselines and side-by-side diff for tables, trees and requirements
  • ReqIF 1.0.1 import and export
  • Exports for reviewable work products

• CRA Compliance Cockpit (pilot)

  • Product intake and CRA classification
  • Organisation and product gaps with evidence
  • SBOM, vulnerabilities, VEX and remediation
  • Conformity and audit export; release readiness
  • Post-market cases and reporting-package preparation

  Reports require review before submission. The Cockpit does not certify products or automatically submit reports to authorities.

• Beta and limited support

  • TARA and cybersecurity artifacts: beta
  • FMEDA: inputs, assumptions and external references; PMHF is not calculated and is shown as not computable, with the reason
  • Supplier, qualification and field records: recording and review
  • ALM connectors (Polarion, Codebeamer, DOORS Next, Jama, Jira) and medini analyze exchange: early access, qualified per installation

Roadmap

What comes next

Priorities in order. Delivery dates are agreed with design partners and for each pilot project.

1. 01

   Product release

   In progress

   CRA Cockpit release

   Completing the CRA Compliance Cockpit for its first customer release.

   From pilot to first release.

   View priorities▾

   • Organisation-wide portfolio exports
   • End-to-end review flows for product owners, security engineers, reviewers and observers
   • Reviewed and approved CRA regulatory content
   • Automatic synchronisation of vulnerability feeds
2. 02

   Platform

   Next

   Connected compliance

   Shared products, evidence and compliance records across engineering and regulatory work.

   ASF Core and the CRA Cockpit working as one.

   View priorities▾

   • Tight integration between ASF Core and the CRA Compliance Cockpit
   • Compliance workspaces in ASF Core brought to the Cockpit's level
   • Shared evidence, products and owners without duplicate records
   • A streamlined, consistent interface across both products
3. 03

   Safety and security

   Next

   HARA and TARA bridge

   Hazards and threat scenarios on the same item linked, so safety and cybersecurity analyses inform each other.

   One item, one view of safety and security.

   View priorities▾

   • Links between HARA hazards and TARA threat scenarios, suggested with source references and confirmed by an engineer
   • Off by default at first; on by default once validated with design partners
4. 04

   First offering

   Planned

   Industry profiles

   Three industry profiles brought to first-offering maturity, with robotics added as a new profile.

   Automotive, railway and robotics at the same standard.

   View priorities▾

   • Railway: RAMS and assurance workflows completed for first offering
   • Robotics: new profile for ISO 10218, ISO 13849 and IEC 62061
   • Robotics: readiness for the EU Machinery Regulation (EU) 2023/1230
   • Validated quantitative FMEDA support
5. 05

   Trust

   Planned

   Certifications

   The certifications safety, security and procurement teams expect from an engineering tool vendor.

   Independent assurance for the tool and for how we run it.

   View priorities▾

   • Tool certification by an independent assessment body for use in ISO 26262 and IEC 61508 projects
   • Tool qualification support for railway projects under EN 50716
   • ISO/IEC 27001 information security management
   • TISAX assessment for automotive customers
   • ISO/IEC 42001 AI management system
   • SOC 2 Type II or BSI C5 attestation for the cloud offering
   • CRA conformity of our own products

   The certifications listed here are planned and not yet held.

6. 06

   AI

   Planned

   Governed AI agents

   Agents that find gaps and prepare changes inside the review workflow.

   Agents prepare the work; engineers decide.

   View priorities▾

   • Trace-gap detection across requirements, analyses and evidence
   • Impact review when upstream artifacts change
   • Reuse suggestions from approved work in other projects
   • Export and assessment readiness checks
   • Review assistance with source references
   • Every agent action is permission-controlled, logged and subject to human approval
7. 07

   AI

   Future direction

   Fine-tuned models

   Domain-tuned models for more accurate drafts, links and reviews.

   Models built for safety and security engineering.

   View priorities▾

   • Models fine-tuned for safety and cybersecurity work products
   • Industry-specific tuning for automotive, railway and robotics
   • Evaluated against reference projects before release
   • Available for private and on-premise deployment
   • Bring-your-own-model remains supported