Trust Centre
Compliance Roadmap
Where certifications and policy milestones stand. We launch this as a transparent placeholder and fill it in as work completes — never before.
Draft Draft documentation — pending company registration
These documents are working drafts. The legal entity (Evidia B.V.), its Chamber of Commerce (KVK) number, VAT number, and some operational details are not yet finalised. Once registration is complete and legal review concludes, every document here will be reissued as final. Until then, treat them as accurate descriptions of intent, not binding terms.
Nothing here is a claim of certification attained. Each item shows its real state: a commitment we intend to pursue, a target we are designing towards, or work in progress.
GDPR alignment
Processor posture, data-subject rights workflows, and EU residency are designed in. Final DPA and transfer clauses are in legal review.
EU AI Act classification
Risk classification under Regulation (EU) 2024/1689 is being assessed with counsel. Human oversight and transparency are built in regardless of the final classification.
ISO/IEC 27001
Controls are aligned to the 27001 framework as a design target. Formal certification is a customer-driven priority — request it to move it forward.
SOC 2 Type II
A common procurement baseline. We will begin a readiness engagement when customer demand makes it the right next step.
ISO/IEC 27701 & 42001
Privacy management (27701) and AI management (42001) extensions, sequenced after the base frameworks.
Why most of this says "on request"
We are an early-stage, EU-built company without a KVK number yet. We will pursue certifications in the order our customers actually need them — so telling us what blocks your review genuinely changes our roadmap.
Request prioritisation