Privacy

Ketenpas helps suppliers demonstrate the state of their security. That work asks for trust, so this page describes exactly what we do with your data. The short version: we collect only what the service needs, there is not a single tracker on the site, and your data is never sold or shared for advertising.

This is a translation, provided so you can read what happens to your data. The Dutch text is the binding version; if the two differ, the Dutch text applies. Nederlandse versie.

The controller is Omegaform, Chamber of Commerce 77453999, reachable at info@ketenpas.nl.

The scan, without an account

If you take the free scan without signing in, your answers stay in your own browser (localStorage). They are not sent to our servers. Only when you choose “Save to my Ketenpas” do we store them, linked to your account.

What we process once you have an account

Your email address, to let you sign in; we do not use passwords. The name and Chamber of Commerce number of your organisation, if you fill those in. Your saved scan answers. The evidence and customer questionnaires you upload. And if you use the supply chain register: the company name, the email address and possibly the contact person of your suppliers, as you enter them yourself.

For that supplier data: you decide what you enter, and we process it only to show your register and send your invitations. The invitation email names you as the sender, and a reply to it reaches you, not us.

Cookies

One functional cookie, for your sign-in session. No analytics, no advertising cookies, no cookie wall. That is why there is no cookie banner: there is nothing to choose.

Which parties are involved

The application and the database run on a server in Amsterdam at DigitalOcean, a US provider. Email is sent through Resend (a US company, delivered via their EU environment). If you use the questionnaire answering feature, the questions from your customer's file are processed together with your own answers by Anthropic (Claude); that data is not used there to train models. If you take out a paid plan, payment runs through Mollie (a Dutch company); Mollie processes your name, email address and account details for that; we store no account numbers ourselves and never see your banking credentials. Backups are stored encrypted at Microsoft; the key to open them is out of reach of all these parties.

How long we keep data

A sign-in link is valid for fifteen minutes, a session for thirty days. We keep your scans, files and register data for as long as your account exists. Encrypted backups go back at most two years. If you delete something, it disappears from the application immediately and from the backups once that period has passed.

Security

Sign-in and session tokens are stored hashed only. Evidence files are accessible solely to your own organisation and never end up behind a shareable link. A passport shows only what you chose to share and can be withdrawn at any time. Backups are encrypted with a key that is not kept on the server.

Your rights

You may access, correct or delete your data, and you can object to a processing activity. Email us at info@ketenpas.nl. If we cannot resolve it together, you can lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes

If something material changes in what we process, we will update this page and say so when you sign in. Questions? Feel free to email.

Version 3 August 2026 · Omegaform · CoC 77453999 · Terms and conditions