NLEN
Get a free demo

Privacy Policy

Version 0.1, July 2026

Cloudpliant provides compliance-screening software for organisations subject to the Dutch anti-money-laundering act (Wwft). This policy explains what personal data we process, in which role, and what your rights are.

Two roles

For visitors of this website and holders of a Cloudpliant account we are the data controller: we decide how account data (name, e-mail, login data) is used.

For the persons our customers screen (their clients and beneficial owners) we are a data processor: the customer, the Wwft-obliged institution, is the controller and instructs us via the product. Their legal basis is typically the legal obligation of art. 6(1)(c) GDPR arising from the Wwft. Requests about this data should be addressed to the institution that screened you; we assist them under our data processing agreement.

What we process

  • Account data: name, e-mail address, password hash, OAuth identities you connect (Google, Exact Online, HubSpot).
  • Screening data (as processor): names, dates of birth, country, business-register (KvK) data, insolvency-register results, sanctions/PEP match results and the reports built from them.
  • Technical data: server logs (IP address, timestamp) kept briefly for security and abuse prevention.

Where and how long

All production data is stored within the European Union. Account data is kept while your account exists. Screening data is retained according to the retention period configured by the responsible institution (default 5 years, the Wwft minimum in art. 33) and deleted automatically afterwards.

Sub-processors

  • Google Cloud (EU region): application hosting and storage
  • PostgreSQL database hosting (EU region)
  • OpenSanctions Datenbanken GmbH (Germany): sanctions and PEP matching
  • Brevo (France): transactional e-mail

Cookies

The application uses only functional cookies (session login). The marketing site sets no tracking or analytics cookies, which is why you see no cookie banner.

Your rights

You can access, correct or delete your account data at any time via Settings or by contacting privacy@cloudpliant.com. Note that transparency rights of screened persons can be restricted where the Wwft prohibits tipping off (art. 23 GDPR). You can lodge a complaint with the Autoriteit Persoonsgegevens.