Aller au contenu principal
Trust & compliance

Your RFP grid, answered in 5 business days.

Procurement, security, legal, DPO — everything they are about to ask, on one page.

  • SOC 2 TYPE II
  • ANNUAL PENTEST
  • GDPR
  • EU HOSTING
  • OPENID CONNECT
  • TLS 1.3 · AES-256
  • RBAC JRC145830
  • GS1
  • NF Z42-013
  • eIDAS 2.0
  • AFNOR
  • REVERSIBILITY
The grid

Organised like your grid, not like our brochure

Certifications & audits

  • SOC 2 Type II

    Security, availability, confidentiality, integrity.

  • Annual pentest

    Penetration test run every year.

  • ISMS aligned with ISO 27001

    Aligned, not certified to date.

  • Audit logging

    Every API call logged, timestamped, exportable.

Hosting & data

  • European hosting provider

    Database and servers in Europe.

  • No transfer outside the EU

    Across the whole processing chain.

  • TLS 1.3 · AES-256

    Encrypted in transit and at rest.

Personal data & GDPR

  • GDPR compliance

    Full data reversibility, no lock-in.

  • Minimisation by design

    A DPP describes a product, not a person.

  • Data subject rights

    Dedicated contact: privacy@arianee.org.

Identity & access

  • OpenID Connect

    Or API key, your choice.

  • OAuth 2.0 · JWT

    Short-lived tokens.

  • 5-tier RBAC

    Public, consumer, operator, repairer, authority (JRC145830).

  • IP restriction

    Allow-listing per environment.

Standards & interoperability

  • GS1 · Digital Link

    GS1 partner.

  • JSON-LD · Schema.org · W3C

    Open data model, no proprietary format.

  • AFNOR member

    French and European standardisation.

  • EU DPP Registry

    DPP Service Provider, ESPR Art. 3.f.

Legal archiving & evidence

  • Arkhineo · NF Z42-013

    French third-party archiver (Docaposte).

  • eIDAS 2.0

    Timestamping and electronic seals.

  • Evidence pack

    Dated PDF, field by field, admissible.

  • Non-repudiation

    No deletion, no silent rewrite.

Reversibility

The passport outlives your choice of provider.

Not a marketing promise: a formal plan you can attach to your file.

Reversibility plan

Exit procedure, formats, timelines.

Full export

Product data and event history, in JSON-LD.

Portable identifiers

QR codes already printed stay resolvable.

No vendor dependency

Open standards, replaceable operator.

The pack

What you get

  • 01Security questionnaire filled in — yours, in your own format
  • 02Architecture diagram and data location
  • 03Reversibility plan and exit procedure
  • 04Attestations and audit reports, under NDA
François Pujo
Got a questionnaire for us?

François Pujo

Industrial & Battery Project Manager

François is our Battery Pass expert, working alongside industrial players worldwide to integrate DPP into their production lines and across the entire life of the product.

Talk with François →

Send it as-is. We send it back filled in.

Content reviewed on 10 September 2026.