HELSINKI — CRACI secured €1.4 million in pre-seed funding led by Lifeline Ventures, the Helsinki-based startup announced, to build software compliance tools ahead of the European Union Cyber Resilience Act taking effect in September 2026. The enterprise, established in 2025, plans to deploy the capital to scale its automated platform before strict regulatory enforcement begins across the European market.
The European Union legislation targets more than 600,000 companies worldwide that distribute digital products within member states. Non-compliant organizations face statutory penalties reaching up to €15 million, according to statutory guidelines published by regulators. Juho Niemi, co-founder of CRACI, said supply chain security is now business-critical for software organizations operating within the competitive digital economy.
CRACI integrates directly with existing Continuous Integration and Continuous Deployment pipelines to track open-source libraries, identify security vulnerabilities, and update documentation automatically. Dennis Marttinen helped launch the enterprise in 2025 alongside Niemi to solve mounting regulatory burdens. The platform covers comprehensive workflows including traceability and incident reporting, distinguishing its software from rivals like Snyk and Black Duck.
Juha Lindfors, a partner at Lifeline Ventures, said the venture firm backed CRACI ahead of the September 2026 regulatory deadline because the founders combine deep technical expertise with a clear understanding of developer requirements. Lifeline Ventures previously backed successful Finnish technology companies including Wolt and Supercell before turning its attention to the software compliance sector.
The €1.4 million financial injection will fund rapid engineering expansion as CRACI prepares software clients to meet mandatory reporting obligations required by the European Union cybersecurity agency ENISA by September 2026. Niemi said organizations investing early will gain a distinct competitive advantage over rivals relying on outdated manual compliance processes. CRACI did not disclose the exact equity stake transferred to Lifeline Ventures during the recent pre-seed funding round.
