Encrypted storage
Application and file storage are encrypted at rest and operated under the GDPR with a data-processing agreement. Files are never attached to emails – customers download them from a protected, personal link.
Security & compliance
Built for documents that must not leak
Passports, deeds and contracts deserve bank-grade handling. This page explains, without marketing fog, what happens to your files and why the procedures are legally sound.
Encrypted in transit and at rest
TLS 1.3 on every connection. Stored files are encrypted at rest, kept outside the web root and only served through an authenticated download route. Every download is logged.
Data minimisation
We collect only what the notary, translator or authority needs. ID scans are removed once the check is complete; order files are deleted 90 days after delivery; invoices are kept for the statutory 7 years.
Access control
Staff accounts are role-based: notaries and translators only see requests assigned to them. Sessions expire after 12 hours; every status change is recorded with the person and time.
§
Legal basis of the procedures
Notarial acts
All notarial acts are performed by an independent notary under the law that applies to that notary; electronically certified copies carry the notary’s qualified electronic signature.
Digital signatures
Where a document is delivered as a PDF with a qualified electronic signature, it is legally equivalent to a handwritten signature across the EU (eIDAS Regulation, Art. 25).
Apostilles
Apostilles are issued by the competent authorities designated under the Hague Apostille Convention of 1961 and are recognised in its member states.
Our role
Notaryzer is a private service provider that prepares files, coordinates with independent professionals and organises delivery. We are not a notary and not a public authority. Statutory notary and authority fees are passed through without markup.
Retention periods
| Data | Kept for | Why |
|---|---|---|
| ID document scans | Until the identity check is complete, max. 30 days | Verification only (GDPR Art. 5) |
| Uploaded documents and outputs | 90 days after delivery | Re-downloads and follow-up questions |
| Order data, timeline, emails | 3 years | Warranty and support |
| Invoices | 7 years | Statutory retention (Dutch tax law) |
| Server access logs | 7 days | Security |
Your rights
You can request access, correction, deletion or export of your data at any time. Write to [email protected] – we answer within 30 days, usually much faster.
Questions about data protection?
We are happy to explain the details before you upload anything.
Questions? Write to [email protected]