Supplier checks and due diligence
Banks, auditors and procurement departments ask a predictable set of questions about suppliers. Here is what we have ready.
Published and downloadable
These are on the website, in full, and each is available as a PDF:
- General terms and conditions
- Acceptable use policy
- Privacy statement
- Service level agreement
- Data processing agreement
Nothing behind a login, nothing you have to ask for. That alone answers a surprising share of a questionnaire.
Company facts
- Legal entity
- Novogara BV, a Dutch private limited company.
- Registered address
- Kingsfordweg 151, 1043GR Amsterdam, Netherlands.
- Chamber of Commerce
- 67854060.
- VAT number
- NL857199857B01. EU business customers with a valid VAT number are invoiced under the reverse charge — see VAT and cross-border invoicing.
- Operating since
- 2012.
Technical and operational
- Where the data sits: Amsterdam, the Netherlands. Nothing leaves the EU as part of the service.
- Subprocessors: listed in the DPA.
- Roles under the GDPR: for the contents of your server you are the controller and we are not — see who is responsible under the GDPR.
- Data retention: we do not perform general data retention. What we hold and for how long is in the privacy statement, and the process for lawful requests is in when authorities ask for data.
- Security responsibilities: set out plainly in who secures what.
- Incident and maintenance communication: maintenance and notice.
- Vulnerability reporting: reporting a security problem.
What we cannot provide
Said plainly, because finding out late wastes everyone's time:
- No ISO 27001 or SOC 2 certification. If your process requires a certificate from your supplier, we are not able to satisfy it.
- No penetration test report of our infrastructure for distribution.
- No customer references without permission from the customer concerned — see confidentiality and NDAs.
What we offer instead is specificity: published documents, named obligations, and an engineer who will answer a technical question in writing.
Ask for what you need
Send the questionnaire to support@novogara.com. A signed DPA, a company extract, a written answer on a particular clause — it goes to the person who can actually answer it rather than into a sales queue.
Still stuck? Mail support@novogara.com — an engineer answers, at any hour. Back to the knowledge base