{"generatedAt":"2026-05-23T23:51:00.248Z","trustPack":{"overview":[{"title":{"nl":"Exports","en":"Exports"},"body":{"nl":"PDF, JSON, CSV, bundel, bewijs-pakket en verify-chain, met rol- en packgrenzen.","en":"PDF, JSON, CSV, bundle, evidence pack and verify chain, with role and pack boundaries."}},{"title":{"nl":"Juridisch","en":"Legal"},"body":{"nl":"DPA, subprocessors-register en versieoverzicht in één publieke route-set.","en":"DPA, subprocessors register and version overview in one public route set."}},{"title":{"nl":"Security","en":"Security"},"body":{"nl":"Security Add-on: advanced audit export en SIEM-ready mapping naast toegangsgrenzen (geen volledige SIEM-suite).","en":"Security add-on: advanced audit export and SIEM-ready mapping alongside access boundaries (not a full SIEM suite)."}}],"exportMatrix":[{"artifact":{"nl":"PDF handover","en":"PDF handover"},"route":"/api/projects/:id/export-pdf","access":{"nl":"Projecttoegang","en":"Project access"},"scope":{"nl":"Operationele overdracht in PDF","en":"Operational handover in PDF"}},{"artifact":{"nl":"JSON momentopname","en":"JSON snapshot"},"route":"/api/projects/:id/export","access":{"nl":"Organisatierollen + projecttoegang","en":"Organisation roles + project access"},"scope":{"nl":"Momentopname van dossier en bewijs","en":"Snapshot of dossier and evidence"}},{"artifact":{"nl":"CSV","en":"CSV"},"route":"/api/projects/:id/export-csv","access":{"nl":"Trust Pack + organisatierollen + projecttoegang","en":"Trust Pack + organisation roles + project access"},"scope":{"nl":"Samenvattende overdracht voor analyse","en":"Summary transfer for analysis"}},{"artifact":{"nl":"Bundel","en":"Bundle"},"route":"/api/projects/:id/export-bundle","access":{"nl":"Trust Pack + organisatierollen + projecttoegang","en":"Trust Pack + organisation roles + project access"},"scope":{"nl":"Contract-/bewijsbundel met hash en chain-links","en":"Contract/evidence bundle with hash and chain links"}},{"artifact":{"nl":"Evidence pack","en":"Evidence pack"},"route":"/api/projects/:id/export-pack","access":{"nl":"Trust Pack + organisatierollen + projecttoegang","en":"Trust Pack + organisation roles + project access"},"scope":{"nl":"Dossier-pack met hash, verify-hooks en link naar SIEM-ready mapping","en":"Dossier pack with hash, verify hooks and SIEM-ready mapping link"}},{"artifact":{"nl":"Verify-chain","en":"Verify chain"},"route":"/api/projects/:id/verify-chain","access":{"nl":"Trust Pack + projecttoegang","en":"Trust Pack + project access"},"scope":{"nl":"Kettingverificatie binnen Trust Pack voor gebruikers met projecttoegang en passende rolgrenzen","en":"Chain verification under Trust Pack for users with project access and appropriate role boundaries"}},{"artifact":{"nl":"Audit export schema (SIEM-ready)","en":"Audit export schema (SIEM-ready)"},"route":"/api/projects/:id/siem-schema","access":{"nl":"Trust Pack + advanced audit export + organisatierollen + projecttoegang","en":"Trust Pack + advanced audit export + organisation roles + project access"},"scope":{"nl":"JSON-mapping voor pull-georiënteerde audit-export (SIEM-ready); geen live SOC-feed","en":"JSON mapping for pull-oriented audit export (SIEM-ready); not a live SOC feed"}},{"artifact":{"nl":"Dataportabiliteit","en":"Data portability"},"route":"/api/users/self/export","access":{"nl":"Ingelogde gebruiker","en":"Signed-in user"},"scope":{"nl":"Samenvatting zonder volledige dossierinhoud","en":"Summary without full dossier content"}}],"subprocessors":[{"category":{"nl":"Applicatiehosting","en":"Application hosting"},"vendor":"Vercel Inc. (EU-regio)","purpose":{"nl":"Webapp, API, cron en levering van statische assets","en":"Web app, API, cron and static asset delivery"},"note":{"nl":"Serverless runtime is EU-georiënteerd; build/CDN-artefacten kunnen anders uitvallen per omgeving.","en":"Serverless runtime is EU-oriented; build/CDN artefacts may differ per environment."},"publicRegister":true},{"category":{"nl":"Database & authenticatie","en":"Database & authentication"},"vendor":"Supabase (EU-regio of gekozen omgeving)","purpose":{"nl":"Opslag, login en sessiebeheer","en":"Storage, login and session management"},"note":{"nl":"Conform het gekozen project en de ingestelde regio van de Klant.","en":"In line with the selected project and customer-configured region."},"publicRegister":true},{"category":{"nl":"Transactionele e-mail","en":"Transactional email"},"vendor":"Resend of andere geconfigureerde e-mailprovider","purpose":{"nl":"Uitnodigingen, bevestigingen en systeemberichten","en":"Invites, confirmations and system messages"},"publicRegister":true},{"category":{"nl":"Monitoring en logging","en":"Monitoring and logging"},"vendor":"Sentry of andere geconfigureerde monitoringprovider","purpose":{"nl":"Foutrapportage en performancebewaking","en":"Error reporting and performance monitoring"},"note":{"nl":"Alleen wanneer een DSN of vergelijkbare configuratie actief is.","en":"Only when a DSN or comparable configuration is active."},"publicRegister":true},{"category":{"nl":"Botbescherming","en":"Bot protection"},"vendor":"Cloudflare Turnstile","purpose":{"nl":"Bescherming van formulieren en inlogstromen","en":"Protection of forms and login flows"},"publicRegister":true},{"category":{"nl":"Push-ecosysteem","en":"Push ecosystem"},"vendor":"FCM / Web Push of vergelijkbare technische provider","purpose":{"nl":"Bezorging van pushmeldingen","en":"Delivery of push notifications"},"note":{"nl":"Alleen wanneer web- of native push technisch is geconfigureerd.","en":"Only when web or native push is technically configured."},"publicRegister":true},{"category":{"nl":"Operationele meldingen","en":"Operational notifications"},"vendor":"Slack of vergelijkbaar ops-kanaal","purpose":{"nl":"Technische waarschuwingen en ops-alerts","en":"Technical warnings and ops alerts"},"note":{"nl":"Beperkt tot geaggregeerde of pseudonieme meldingen waar mogelijk.","en":"Limited to aggregated or pseudonymous notifications where possible."},"publicRegister":true},{"category":{"nl":"Door klant geconfigureerde webhooks","en":"Customer-configured webhooks"},"vendor":"HTTPS-eindpunten van de Klant","purpose":{"nl":"Doorstroom van events naar systemen van de Klant","en":"Event flow into customer systems"},"note":{"nl":"Geen standaard PSM-subverwerker in engere zin; verwerking valt daarna onder de inrichting van de Klant.","en":"Not a standard PSM subprocessor in the strict sense; processing then falls under the customer's configuration."},"publicRegister":true},{"category":{"nl":"Bestands- en objectopslag","en":"File and object storage"},"vendor":"Supabase Storage of andere gekozen backend","purpose":{"nl":"Uploads, evidence en bijlagen","en":"Uploads, evidence and attachments"},"note":{"nl":"Conform `FILE_STORAGE_BACKEND` en de gekozen bucket-instellingen.","en":"In line with `FILE_STORAGE_BACKEND` and the selected bucket settings."},"publicRegister":true}],"relatedRoutes":{"dpa":"/legal/dpa","dpaDownload":"/legal/dpa/download","subprocessors":"/legal/subprocessors","subprocessorsDownload":"/legal/subprocessors/download","security":"/security","versions":"/legal/versions"}}}