normakte / Trust
A conformity file is kept for years. Anyone entrusting it to software must know: where it sits, who can touch it, and whether they can get it back at any time. It is written here, without marketing.
Account and file data are stored with Supabase Pte. Ltd in a data centre in the European Union (Frankfurt region). Row Level Security at database level ensures that an account can access only its own data — enforced technically, not just by the interface. The application runs via Netlify; transmission is encrypted only (HTTPS).
normakte works with a few named processors. No other third party receives your data.
| Service | For what | Place / basis |
|---|---|---|
| Supabase | Storage of account and file | EU (Frankfurt), Art. 28 GDPR |
| Netlify | Hosting of the application | DPF / standard contractual clauses |
| Stripe | Payment processing | Card data is collected by Stripe — normakte never sees it |
| Resend | Sign-in links, notifications | only the recipient email address |
Details and legal bases are in the privacy policy.
Every uploaded document is versioned and fixed with a checksum (SHA-256). A later change creates a new version; the old one remains provable. The ZIP export is verifiable bit for bit — what you get back is provably identical to what was stored. That is the difference between a folder of documents and a traceable chain of evidence.
Full export at any time, without asking. After cancellation, files remain readable and exportable for 90 days (terms, section 4); then they are deleted. Billing and payment data are kept separately for the statutory periods. No lock-in: what you entered, you take with you.
normakte is a drafting and calculation aid. It replaces neither the conformity assessment, nor a notified body, nor legal advice, and makes no automatic statement "your product is conform". It shows, per line: the requirement, its reference in the act and the evidence you entered with its justification. Responsibility stays with you — normakte makes it provable, not supposedly safe.
The public pages load no cookies, no tracking, no third-party fonts. The free tools compute in the browser; your entries do not leave it.
Register of all Machinery Regulation requirements, documents with checksum, declaration and nameplate with QR code – one trial file free until 20.01.2027.