DRAFT – for legal review. The platform is English only; a Bulgarian version is kept for the lawyer in docs/legal/.
This information forms part of the terms of use (section 6). Terms used here have the meaning given there.
What you can download
- The archive ("Company → Data export") can be created at any time on every plan and contains: the company profile and facilities; the battery models with their data and documents (original files); the items with their serial numbers, permanent addresses, status and data; every published passport version with its SHA-256 and electronic signature; the generated documents with every version; the QR pages with every published version and their documents; for an importer, the passports of the batches it placed on the market, with every signed version and the documents it may read (read-only; they are in the manufacturer's archive too); the EU registry registrations; the Customer's own cells; the links of new passports to the original ones; the public keys needed to verify the signatures; and a hash manifest.
- The audit log and the log of access to non-public data are downloaded separately as CSV files, within their retention periods.
- Other data that the Customer entered or generated in the Service and that is not in the archive (for example the history of dynamic data, packaging data, supplier requests, AI extractions, access given to third parties, scan statistics, a manufacturer's batches for its importers and support tickets) is exported on request, free of charge, within 30 days, in a structured, commonly used and machine-readable format.
What is not exported
- The following are not exported, because they are security credentials or concern the internal functioning of the Service: passwords and their hashes, two-factor secrets and recovery codes; the values of API keys, OAuth client secrets, webhook and single sign-on secrets; the Provider's private signing keys; the Provider's internal notes, server and security logs and technical records; the platform's source code, data model, templates and the cell library maintained by the Provider. These exclusions do not prevent or delay switching.
Formats
A ZIP archive with JSON (battery passport semantic model, schema 2.0.0), JSON Lines for versions, CSV for items and the original document files, with a hash manifest that the archive verification tool checks. The interfaces of the Service and their documentation are described on the developer pages of the website.
Switching procedure
- Notice. The Customer gives notice in writing through an account owner, in the platform or by e-mail to the address in the legal information. In the notice the Customer chooses to switch to another provider, to move its data to its own systems, or to have its data erased. The notice period ends on the date the Customer names, at most 2 months after the notice.
- Transition period. Switching starts at the end of the notice period and takes up to 30 days. During this period the Service continues under the contract and its prices, and the Provider gives reasonable assistance to the Customer and to the provider it names, keeps the data secure and informs the Customer of known risks to continuity.
- If 30 days is technically unfeasible, the Provider informs the Customer within 14 working days of the notice, gives the reasons and names another transition period of at most 7 months. The Customer may extend the transition period once by notice before it ends.
- When the Customer confirms the export, the permanent addresses of its published passports and QR pages redirect to the addresses it names (HTTP 308), under section 6.3 of the terms.
- The contract ends when switching is complete, and at the latest at the end of the transition period. If the Customer chose erasure, the contract ends at the end of the notice period.
- Retrieval period. For 30 days after the transition period, or after the end of the contract if the Customer chose erasure, the Customer can sign in and download its data.
- Erasure. After the retrieval period the Provider erases the Customer's exportable data, except the redirects (section 6.3 of the terms), the published passports kept under section 5.2 of the terms until they are handed over, and the records the Provider must keep by law. Copies in database backups are erased as the backups rotate, at the latest after 400 days.
Fees
- No fees are charged for switching or for downloading or transferring the data. The prices of the plan apply until the contract ends, including during the transition period. Fees already paid and AI credit are not refunded (section 7.4 and 7.7 of the terms).
Data location and access by authorities (Articles 28 and 32 of Regulation (EU) 2023/2854)
- The Provider, ANB Consult Ltd, VAT BG208982488, Bratiya Miladinovi 12, 4230 Asenovgrad, Bulgaria, is established in Bulgaria and is subject to EU and Bulgarian law. The data is stored and processed in the European Union by: hosting and database – [provider, country – to be completed]; documents and backups – [provider, country – to be completed]; AI reading of documents – [provider, EU region – to be completed]. E-mail is sent through Google Workspace (Google; parent company established in the United States), which may process the messages outside the Union. Where a provider's parent company is established outside the Union, its country is named here.
- Measures against unlawful access by authorities of third countries: data is stored and processed in EU regions only, except e-mail messages as set out in point 13; it is encrypted in transit, and copies of the database are encrypted before they leave the server; each Customer's data is isolated at database level; only named staff of the Provider can reach it, with two-factor authentication; subcontractors are bound to process the data only on the Provider's instructions and, except for the e-mail provider, only in the Union; requests from authorities are handled under section 10 of the terms.
Known limitations
Platform-specific settings (third-party access, form settings, API and webhook settings) and the logs are exported as data, but a new provider may apply them differently. Printed QR codes keep the batterycompliance.eu addresses and work after a switch through the redirect.