TL;DR
📜 Five steps from assessment to issued MRCC Certificate.
🪜 The 5 steps
1️⃣ Define your Product Estate
One estate = one product / one codebase-SBOM lineage / one EU market exposure. 👉 Add your first regulated product
2️⃣ Run your Scope Review
RICE maps which EU frameworks apply (CRA, NIS2, AI Act, RED, DORA, combos). 👉 How NexCyber decides which regulations apply
3️⃣ Close your Compliance Gap
Upload evidence (SBOM, policies, test reports, supplier attestations). Confidence levels update automatically. 👉 Build your evidence library
4️⃣ Reach the confidence threshold
Each framework has a confidence threshold. When you cross it, your estate becomes MRCC-eligible. 👉 Reading your assessment results
5️⃣ Request the MRCC
- Open your estate
- Click Request MRCC
- Our regulatory team reviews and signs
- You receive a signed PDF + a public verify URL
⏱️ Typical timeline
| Plan | First MRCC turnaround |
|---|---|
| Launch | 5-10 business days |
| Portfolio | 3-5 business days |
| Command | 1-3 business days (priority queue) |
| Strategic | Contractual SLA |
➡️ Next
💬 Need help?
- Reach out via our live chat (bottom-right) — Captain AI replies instantly, human experts within business hours.
- Email support@nexcyber.eu with
[P1]for Command/Strategic priority issues.
ℹ️ Disclaimer — RICE provides a readiness analysis, not legal advice. Final compliance may require legal review or notified body certification.
Last reviewed: 2026-06-02 · NexCyber Help Center