Trust
RFC 9116ISO/IEC 29147EN 301 549

Check it before you write to us

A contracting authority checks before reading an offer. All of this is published and carries a date of last revision.

Coordinated disclosure

A permanent channel for reporting vulnerabilities, acknowledged within 72 hours, with no legal action against good-faith research.

/.well-known/security.txt

Applied framework

The standards governing our own operation, not only that of the projects we hand over.

ENS · ISO/IEC 27001 · GDPR

Supply chain

Selection criteria, where processing takes place, and processors with guarantees inside the European Union.

Art. 28 GDPR

Accessibility

A statement with the level reached, the evaluation method and the complaints route, exactly as the standard requires.

EN 301 549 · WCAG 2.2 AA

Our own use of artificial intelligence

A public inventory of the AI systems we use, in which role, on what data and with which human control point. No synthetic content is published unmarked.

Art. 50 · Art. 26