Creating the account and the organisation
Every account belongs to an organisation: the container for your cases, products, registry and settings. Whoever signs up from the public form founds a new organisation and becomes its administrator; whoever arrives on an invitation joins an existing one.
Self-service sign-up
Sign-up offers two paths: with an email and password, or with your corporate Google or Microsoft identity. Either way the first administrator — the founder of the new company — is active immediately: no approval, no email confirmation link.
With email and password
- Open https://cranotify.eu/registrazione.
- Give the company name, VAT number (checked against VIES), country and your role in the chain — manufacturer, importer or distributor.
- Give the administrator's name and email and choose a password of at least 10 characters; a strength meter guides you as you type.
- You are in straight away: the application opens the case cockpit with demonstration data.
With Google or Microsoft
The «Sign up with Google» and «Sign up with Microsoft» buttons skip the password: after authenticating with the provider you complete only the company details (company name, VAT number, country, role in the chain). The email is already verified by the provider, the account is created SSO-only, with no password, and you go straight in.
As soon as the organisation is created a welcome email (via AWS SES) goes out with the sign-in link and the first things to do.
Self-service sign-up always founds a new organisation, even when the email domain matches one that already exists: joining an existing group happens by invitation or through company single sign-on, not by signing up. If your administrator has closed open registration, the page says so and you need an invitation.
If the welcome email does not arrive within a few minutes, check the spam folder and your corporate filters on no-reply@cranotify.eu. It is no obstacle anyway: the account is already active and you can sign in at https://cranotify.eu/login. The sign-in and sign-up forms are guarded by an invisible anti-bot check (Cloudflare Turnstile).
Inviting colleagues
From Account area › Company and people › People the administrator invites the other users with an address and a role. The invitee receives a single-use link valid for 7 days that provisions them into your organisation (it does not found a new one).
| Role | What they can do |
|---|---|
| Administrator | Everything: company settings, users, subscription, API, SBOM, alerts, public form. |
| Assessor | Works on cases: triage, verdict, notification, filing. Manages their own profile, password and two-step verification. |
| Read-only | Consults cases, registry and dossiers. Changes nothing. |
The full permission model and the escalation chain are in Users, roles and escalation.
Allowed domains
In Company data you can list the accepted email domains (for example yourcompany.com). The list governs joining the organisation: invitations and single sign-on. Left empty, there is no domain restriction.
Good practice. Fill the list as soon as the organisation is created: it governs who can join by invitation and through company SSO, and keeps the team inside a single organisation with one registry.
The demonstration data
A new organisation starts with a few sample cases and products, useful to understand the interface without waiting for something real to happen. They are recognisable by their invented names and can be archived once they are no longer useful. To rehearse the full flow while producing communications clearly marked as unreal, use exercise mode instead.
After sign-up
The three things to do first, in order: register your products, set the escalation contact, rehearse the flow in exercise mode. They are explained in Initial setup.