Boottrace

Quick Scan terms

Terms of the CRA Quick Scan bought with online payment on boottrace.com. By paying, you accept them.

Who provides it and for whom

It is provided by Antonio Quesada Frías (Boottrace), with the details in the legal notice. The Quick Scan is sold to businesses and professionals only: a tax identification number (VAT number or equivalent) is required at checkout. It is not a consumer service.

What it includes

The analysis of one firmware image of one product (or its Yocto artefacts) and a report with the SBOM, the vulnerabilities and their exploitability on the device, configuration findings and the gaps against Regulation (EU) 2024/2847 that the analysis does not cover, plus a 30-minute review with the engineer. It does not include fixing the findings or the CE marking documentation. See the service description for details.

Price, taxes and payment

€1,900 excluding VAT, paid in advance by card through Stripe. VAT is calculated at checkout from your details: 21 % for businesses in Spain; no VAT for businesses in other EU countries with a valid intra-community VAT number (reverse charge) and for businesses outside the EU. You receive the invoice by email after payment.

Delivery time

The report is delivered within 48 working hours of valid receipt of the firmware. Working hours are Monday to Friday, 9:00 to 18:00 (Madrid time), excluding national public holidays and those of Catalonia and the city of Barcelona. If the firmware arrives outside those hours, the clock starts at 9:00 on the next working day.

Valid receipt means the image is complete and can be opened. If it is not, we tell you and the clock starts when a valid image arrives.

How to send the firmware

After payment you receive an encrypted, single-use upload link by email. If you need a non-disclosure agreement (NDA), we sign it before you send anything. The image is never executed: it is extracted in an isolated container with no network. Files are deleted 30 days after the report is delivered, as explained in the privacy policy.

Cancellation and refunds

  • Before you send the firmware: you can cancel by writing to [email protected]. We refund the amount paid minus a €50 payment handling fee.
  • After you send the firmware: once it has been received and the analysis has started, the Quick Scan is non-refundable.
  • If we miss the deadline: if the report is not delivered within 48 working hours for reasons attributable to us, we refund the full amount on request, and you still get the report.

Refunds are made to the card used for payment, within 14 days of being accepted, and the corresponding corrective invoice is issued.

Audit discount

The Quick Scan price (excluding VAT) is deducted in full from the CRA-Readiness audit if you order it within 30 days of the report being delivered.

Liability

The Quick Scan is a technical analysis of the image received, as of the date of the analysis. It is not a certification or a declaration of conformity with Regulation (EU) 2024/2847, and it does not guarantee the absence of other vulnerabilities. Total liability for the service is limited to the amount paid for it.

Governing law

These terms are governed by Spanish law. Any dispute is submitted to the courts of Barcelona.

Last updated: 8 October 2026.