Available on request
Include your name, organisation and the documents you need. You can also request the full set.
Data processing agreement
Article 28 GDPR, covering instruction authority, confidentiality, security measures, subprocessors, transfers, breach procedure, audit rights and return or deletion.
Service Level Agreement
Availability guarantee, measurement method, service window, priorities P1 through P4, maintenance windows and service credits.
AI addendum
Arrangements on AI functionality, model updates, input and output, intellectual property and the use of third-party AI services.
Non-disclosure agreement
Mutual confidentiality, signable standalone before anything substantive is shared.
NIS2 supplier annex
Signable annex for customers in scope of the Cyberbeveiligingswet: notification windows, security commitments and audit and evidence rights.
Technical overview
Architecture and data flow, integration and connectivity, security and compliance, reliability and observability, and the AI models.
Completed security questionnaire
Our standard information security and privacy questionnaire, filled in up front. It saves you a round: check what is still missing and send back only that.
Penetration test report
The report from the completed external penetration test by WYKYK.
Documents under NDA
We share raw scan results, internal security documents, detailed architecture diagrams and recovery plans only under a signed NDA.
Technical details
The processing path below describes steps performed according to your workflow. Request the technical overview for more detail.
Intake
Email via Microsoft Graph, manual upload, API, SFTP or webhook. With mailbox integration we process only an agreed folder or subfolder.
Capture
Metadata and email content are recorded in PostgreSQL. Files and converted documents go to Azure Blob Storage.
Pre-processing
Attachments are read, converted to PDF or text where needed, and enriched with technical metadata and extracted text.
AI processing
Classification selects the document type and configuration. The extraction result and technical output are written back to the database.
Enrichment and validation
Business rules, reference tables, type validation, supplier recognition and human review correct and enrich the data.
Export
Approved data is mapped to XML, JSON, CSV or Excel and delivered via REST API, SFTP, email or manual download. Your TMS, ERP or WMS remains the system of record.
Report a vulnerability
If you find a vulnerability, report it to us before sharing it elsewhere. Stay within the minimum needed to demonstrate the issue, do not touch anyone else's data, change or delete nothing, and do not run denial-of-service, phishing or physical attacks. We confirm your report within two working days and keep you posted until it is resolved. Anyone who follows this has nothing to fear from us legally. We do not run a bug bounty programme.