{"generatedAt":"2026-07-09T00:39:25.356Z","trustPack":{"overview":[{"title":{"nl":"Exports","en":"Exports"},"body":{"nl":"PDF, JSON, CSV, bundel, exportpakket en verify-chain, met rol- en packgrenzen.","en":"PDF, JSON, CSV, bundle, export package and verify chain, with role and pack boundaries."}},{"title":{"nl":"Documenten","en":"Documents"},"body":{"nl":"DPA, subprocessors-register en versieoverzicht in één publieke route-set.","en":"DPA, subprocessor register and version overview in one public route set."}},{"title":{"nl":"Security","en":"Security"},"body":{"nl":"Security Add-on: dossierexport en SIEM-ready mapping naast toegangsgrenzen (geen volledige SIEM-suite).","en":"Security add-on: dossier export and SIEM-ready mapping alongside access boundaries (not a full SIEM suite)."}}],"exportMatrix":[{"artifact":{"nl":"PDF handover","en":"PDF handover"},"route":"/api/projects/:id/export-pdf","access":{"nl":"Projecttoegang","en":"Project access"},"scope":{"nl":"Operationele overdracht in PDF","en":"Operational handover in PDF"}},{"artifact":{"nl":"JSON momentopname","en":"JSON snapshot"},"route":"/api/projects/:id/export","access":{"nl":"Organisatierollen + projecttoegang","en":"Organisation roles + project access"},"scope":{"nl":"Momentopname van dossiercontext","en":"Snapshot of dossier context"}},{"artifact":{"nl":"CSV","en":"CSV"},"route":"/api/projects/:id/export-csv","access":{"nl":"Trust Pack + organisatierollen + projecttoegang","en":"Trust Pack + organisation roles + project access"},"scope":{"nl":"Samenvattende overdracht voor analyse","en":"Summary transfer for analysis"}},{"artifact":{"nl":"Bundel","en":"Bundle"},"route":"/api/projects/:id/export-bundle","access":{"nl":"Trust Pack + organisatierollen + projecttoegang","en":"Trust Pack + organisation roles + project access"},"scope":{"nl":"Dossierbundel met hash en chain-links","en":"Dossier bundle with hash and chain links"}},{"artifact":{"nl":"Export package","en":"Export package"},"route":"/api/projects/:id/export-pack","access":{"nl":"Trust Pack + organisatierollen + projecttoegang","en":"Trust Pack + organisation roles + project access"},"scope":{"nl":"Dossier-pack met hash, verify-hooks en link naar SIEM-ready mapping","en":"Dossier pack with hash, verify hooks and SIEM-ready mapping link"}},{"artifact":{"nl":"Verify-chain","en":"Verify chain"},"route":"/api/projects/:id/verify-chain","access":{"nl":"Trust Pack + projecttoegang","en":"Trust Pack + project access"},"scope":{"nl":"Kettingverificatie binnen Trust Pack voor gebruikers met projecttoegang en passende rolgrenzen","en":"Chain verification under Trust Pack for users with project access and appropriate role boundaries"}},{"artifact":{"nl":"Dossierexport schema (SIEM-ready)","en":"Dossier export schema (SIEM-ready)"},"route":"/api/projects/:id/siem-schema","access":{"nl":"Trust Pack + dossierexport + organisatierollen + projecttoegang","en":"Trust Pack + dossier export + organisation roles + project access"},"scope":{"nl":"JSON-mapping voor pull-georiënteerde dossierexport (SIEM-ready); geen live SOC-feed","en":"JSON mapping for pull-oriented dossier export (SIEM-ready); not a live SOC feed"}},{"artifact":{"nl":"Dataportabiliteit","en":"Data portability"},"route":"/api/users/self/export","access":{"nl":"Ingelogde gebruiker","en":"Signed-in user"},"scope":{"nl":"Samenvatting zonder volledige dossierinhoud","en":"Summary without full dossier content"}}],"subprocessors":[{"category":{"nl":"Applicatiehosting","en":"Application hosting"},"vendor":"Vercel Inc.","purpose":{"nl":"Webapp, API, cron en levering van statische assets","en":"Web app, API, cron and static asset delivery"},"region":{"nl":"Serverless runtime EU-georiënteerd (Vercel-regio); build/CDN-artefacten kunnen per omgeving afwijken — nader te bevestigen per productieproject","en":"Serverless runtime EU-oriented (Vercel region); build/CDN artefacts may differ per environment — to be confirmed per production project"},"dataTypes":{"nl":"HTTP-metadata, requestlogs, applicatiepayloads, sessiecookies via edge","en":"HTTP metadata, request logs, application payloads, session cookies via edge"},"status":{"nl":"Verplicht voor SaaS-hosting","en":"Required for SaaS hosting"},"publicRegister":true},{"category":{"nl":"Database & authenticatie","en":"Database & authentication"},"vendor":"Supabase","purpose":{"nl":"Opslag, login en sessiebeheer","en":"Storage, login and session management"},"region":{"nl":"EU-regio of door klant gekozen Supabase-projectregio — nader te bevestigen per tenant","en":"EU region or customer-selected Supabase project region — to be confirmed per tenant"},"dataTypes":{"nl":"Accountgegevens, dossierdata, logregels, push-tokens, sessies, auth-identifiers","en":"Account data, dossier data, log entries, push tokens, sessions, auth identifiers"},"status":{"nl":"Verplicht voor platformdata","en":"Required for platform data"},"note":{"nl":"Conform het gekozen project en de ingestelde regio van de klant.","en":"In line with the selected project and customer-configured region."},"publicRegister":true},{"category":{"nl":"Transactionele e-mail","en":"Transactional email"},"vendor":"Resend (indien geconfigureerd) of andere e-mailprovider","purpose":{"nl":"Uitnodigingen, bevestigingen en systeemberichten","en":"Invites, confirmations and system messages"},"region":{"nl":"Afhankelijk van geconfigureerde provider — nader te bevestigen in productie","en":"Depends on configured provider — to be confirmed in production"},"dataTypes":{"nl":"E-mailadres, berichtinhoud (operationeel), delivery metadata","en":"Email address, message content (operational), delivery metadata"},"status":{"nl":"Conditioneel — actief wanneer e-mailprovider is geconfigureerd","en":"Conditional — active when an email provider is configured"},"publicRegister":true},{"category":{"nl":"Monitoring en logging","en":"Monitoring and logging"},"vendor":"Sentry (indien geconfigureerd) of andere monitoringprovider","purpose":{"nl":"Foutrapportage en performancebewaking","en":"Error reporting and performance monitoring"},"region":{"nl":"Afhankelijk van Sentry-organisatie/regio — nader te bevestigen","en":"Depends on Sentry organisation/region — to be confirmed"},"dataTypes":{"nl":"Foutstack traces, requestcontext (gepseudonimiseerd waar mogelijk), performance-spans","en":"Error stack traces, request context (pseudonymised where possible), performance spans"},"status":{"nl":"Conditioneel — alleen wanneer `SENTRY_DSN` of vergelijkbare configuratie actief is","en":"Conditional — only when `SENTRY_DSN` or comparable configuration is active"},"publicRegister":true},{"category":{"nl":"Botbescherming","en":"Bot protection"},"vendor":"Cloudflare Turnstile","purpose":{"nl":"Bescherming van formulieren en inlogstromen","en":"Protection of forms and login flows"},"region":{"nl":"Cloudflare edge — exacte verwerkingslocatie nader te bevestigen","en":"Cloudflare edge — exact processing location to be confirmed"},"dataTypes":{"nl":"Browser-/challenge-metadata, IP-adres (kortlevend), formuliercontext","en":"Browser/challenge metadata, IP address (short-lived), form context"},"status":{"nl":"Conditioneel — actief wanneer Turnstile-keys zijn geconfigureerd","en":"Conditional — active when Turnstile keys are configured"},"publicRegister":true},{"category":{"nl":"Push-ecosysteem","en":"Push ecosystem"},"vendor":"Firebase Cloud Messaging (native) / Web Push (VAPID)","purpose":{"nl":"Bezorging van pushmeldingen","en":"Delivery of push notifications"},"region":{"nl":"FCM/Google infrastructure; web push via browserleverancier — nader te bevestigen","en":"FCM/Google infrastructure; web push via browser vendor — to be confirmed"},"dataTypes":{"nl":"Device-/push-token, generieke meldingstekst (geen dossierinhoud op lockscreen), delivery metadata","en":"Device/push token, generic notification text (no dossier content on lock screen), delivery metadata"},"status":{"nl":"Conditioneel — actief wanneer push technisch is geconfigureerd","en":"Conditional — active when push is technically configured"},"publicRegister":true},{"category":{"nl":"Operationele meldingen","en":"Operational notifications"},"vendor":"Slack (indien geconfigureerd) of vergelijkbaar ops-kanaal","purpose":{"nl":"Technische waarschuwingen en ops-alerts","en":"Technical warnings and ops alerts"},"region":{"nl":"Afhankelijk van Slack-workspace — nader te bevestigen","en":"Depends on Slack workspace — to be confirmed"},"dataTypes":{"nl":"Geaggregeerde of pseudonieme ops-meldingen; geen klantdossierinhoud waar mogelijk","en":"Aggregated or pseudonymous ops alerts; no customer dossier content where possible"},"status":{"nl":"Conditioneel — alleen wanneer ops-webhook is geconfigureerd","en":"Conditional — only when an ops webhook is configured"},"publicRegister":true},{"category":{"nl":"Door klant geconfigureerde webhooks","en":"Customer-configured webhooks"},"vendor":"HTTPS-eindpunten van de Klant","purpose":{"nl":"Doorstroom van events naar systemen van de Klant","en":"Event flow into customer systems"},"region":{"nl":"Bepaald door klant-eindpunt","en":"Determined by customer endpoint"},"dataTypes":{"nl":"Eventpayloads conform klantconfiguratie (kan persoonsgegevens bevatten)","en":"Event payloads per customer configuration (may contain personal data)"},"status":{"nl":"Optioneel per klant — geen standaard PSM-subverwerker in engere zin","en":"Optional per customer — not a standard PSM subprocessor in the strict sense"},"note":{"nl":"Verwerking valt daarna onder de inrichting van de Klant.","en":"Processing then falls under the customer's configuration."},"publicRegister":true},{"category":{"nl":"Bestands- en objectopslag","en":"File and object storage"},"vendor":"Supabase Storage (standaard) of andere gekozen backend","purpose":{"nl":"Uploads, dossierbestanden en bijlagen","en":"Uploads, dossier files and attachments"},"region":{"nl":"Zelfde regio als Supabase-project — nader te bevestigen per tenant","en":"Same region as Supabase project — to be confirmed per tenant"},"dataTypes":{"nl":"Foto's, documenten en dossierbestanden gekoppeld aan inzetdossiers","en":"Photos, documents and dossier files linked to assignment records"},"status":{"nl":"Verplicht wanneer uploads actief zijn (`FILE_STORAGE_BACKEND`)","en":"Required when uploads are active (`FILE_STORAGE_BACKEND`)"},"note":{"nl":"Conform `FILE_STORAGE_BACKEND` en de gekozen bucket-instellingen.","en":"In line with `FILE_STORAGE_BACKEND` and the selected bucket settings."},"publicRegister":true}],"relatedRoutes":{"dpa":"/legal/dpa","dpaDownload":"/legal/dpa/download","subprocessors":"/legal/subprocessors","subprocessorsDownload":"/legal/subprocessors/download","security":"/security","versions":"/legal/versions"}}}