What comes out
A documented, defensible rating with its reasoning, not a number with nothing behind it.
A tier, with drivers
Which factors drove the rating and why they matter.
Routing
Who has to look at it, decided by the rating rather than by memory.
An audit trail
What was decided, by whom, on what basis, and when.
| Case | Product | Tier |
|---|---|---|
| CPRA-2026-0142 | Stored-value card | Critical |
| CPRA-2026-0151 | Cross-border payout | High |
| CPRA-2026-0158 | Savings account, tiered | Low |
See it against your own product.
The quickest way to judge CPRA is to run it on something you are actually launching.