Trust & data

What we hold, and what we don't.

Procurement asks the same seven questions of every data vendor. Here are our answers, including the two where the answer is no.

The buyer's checklist.

Where did this data come from?

European company records are sourced from official national registers, public company communications and public web sources. Each signal carries the type of source it came from. Radar cards are individually checked against public sources before delivery, and those sources are kept.

How current is it — on this specific record?

Every API and MCP answer carries a coverage block: how recently we observed that company, and whether the absence of signals means anything. Signals carry their own dates, and a date that is a measurement rather than an event is marked as one.

Is your agent surface authenticated?

Both MCP servers require authentication — OAuth or an API key. Every tool call is metered against the key that made it. Most publicly listed MCP servers require no authentication at all.

Can access be revoked, properly?

Yes, and from both ends. There is a token revocation endpoint on our side, and a Disconnect button in the API panel. Removing a connector inside a client application does not end its access — our panel says so rather than letting you assume otherwise.

Do you publish coverage statistics?

Yes. The signal taxonomy returns a measured coverage block — dense and sparse categories, deep geographies, and what no public source holds. It is computed, not written by hand, so it cannot drift from reality.

Is the API deterministic and documented?

A versioned REST API with published documentation, plus two MCP servers with published tool costs. The same record answers all of them.

Do you hold SOC 2, or a signed DPA on file?

Not yet. We are a Netherlands BV, EU-hosted, and we publish our privacy, cookie and GDPR positions — but we do not hold a SOC 2 report and we are not going to imply otherwise on a page like this one. If your procurement process requires either, tell us early and we will tell you honestly where we are.

Removal

When a company asks to come out, it comes out.

Suppression is a first-class operation here, not a support ticket. A company can be suppressed on request with the reason and the reference recorded, which removes it from the index, from search, and from the queues that would otherwise put it back.

Cached fragments elsewhere on the site expire on their own within days rather than being left indefinitely. We would rather describe that honestly than claim an instant global purge that no system of this kind actually performs.

Make a data request

Netherlands BV

Amsterdam · KvK 93440480

EU-hosted

Data stays in the European Union

Published positions

Privacy, cookies, terms, GDPR

Subject requests

A route that works, not an inbox

The documents Privacy policy GDPR approach Terms Cookie policy Ask us something