Data processing
1. Processing sequence
User input → expenditure calculation in the browser → submission of the aggregate result and document identification data → technical PDF generation → download by the user. Signature and QR data are included in the document.
2. Data categories
Company information, optional organisation identifier, reference year, country, document language, aggregate CO₂e result, technical document metadata, contact email, payment reference, access-key credit state and minimal technical logs for security or troubleshooting.
3. Storage
Detailed expenditure is not kept in a Certif-Scope database. No recoverable PDF copy is retained. Support exchanges may be retained up to twelve months. Access-key and credit state is stored separately to manage expiry and consumption. Payment and invoicing records are processed by Stripe.
4. Technical providers
Vercel: hosting and deployment. Stripe: payment and invoices. Resend: transactional and support emails. Cloudflare KV: access-key and credit state. PDFShift: PDF conversion using the data necessary to produce the requested document.
5. Responsibilities
The operator manages the service’s necessary processing. Users remain responsible for the accuracy and lawful submission of their information. Reading documentary data does not establish the accuracy of declared expenditure or emissions.
6. Informational document
This page describes the service’s processing. It is not a data-processing agreement and does not modify separate contractual obligations.
7. Contact
Questions about processing or privacy: contact@certif-scope.com.