Instant Management Systems B.V. uses robust security measures to protect your personal information. These measures include data encryption, restricted access controls, and regular security evaluations.
We process your personal data (name, email address) in line with the latest privacy regulations (GDPR). Here’s how:
Consent
By providing your contact details (e.g. via email or contact form), you explicitly agree to the processing of your personal data as described in this privacy statement. You can withdraw your consent at any time by contacting us.
(Sub) processors
Certain (sub)processors may transfer data outside the EU. To ensure compliance, these transfers are secured through mechanisms such as Standard Contractual Clauses or equivalent safeguards under recognized frameworks.

The subprocessors listed below support our general business operations and shared service delivery activities across our services.
| Legal name | Tool | Purpose | Compliance notes ↗️ |
|---|---|---|---|
| Automattic Inc. | WordPress | Website content management system | GDPR |
| Calendly, LLC | Calendly | Scheduling service for demos and support calls | SOC 2, GDPR |
| Celonis, Inc. | Make | Task automation and notification service | ISO 27001, SOC 2, GDPR |
| Google Cloud EMEA Limited | Google Workspace | Email and document management | ISO 27001, GDPR |
| Google Ireland Limited | Google Ads | Enhanced conversions | ISO 27001, GDPR |
| Savvy.codes B.V. | KAI | Customer support chatbot | ISO 27001, GDPR |
| SIEL Systems B.V. | Acumulus | Invoicing software | GDPR |
| SnelStart Software B.V. | SnelStart | Accounting software | ISO 27001, GDPR |
| Stripe LLC | Stripe | Payment service provider | SOC 2, PCI DSS, GDPR |
| TAGGRS B.V. | Taggrs.io | Server side tracking | ISO 27001, GDPR |
| Zoho | Zoho | CRM | ISO 27001, SOC 2, GDPR |

The subprocessors listed below are used specifically for the delivery of Instant 27001.
| Legal name | Tool | Purpose | Compliance notes ↗️ |
|---|---|---|---|
| Atlassian Pty Ltd | Confluence | Fulfillment of Instant 27001 for Confluence | ISO 27001, SOC 2, SOC 3, GDPR |
| ISOPlanner B.V. | ISOPlanner | Fulfillment of Instant 27001 for Microsoft 365 | ISO 27001, GDPR |

The subprocessors listed below are used specifically for the delivery of Instant Navigator.
| Legal name | Tool | Purpose | Compliance notes ↗️ |
|---|---|---|---|
| CBK.AI Ltd | ChatBotKit | Fulfillment of Instant Navigator | UK GDPR |
| Clerk, Inc. | Clerk | User management | SOC 2, GDPR |
| Vercel, Inc | Vercel | Hosting platform | ISO 27001, SOC 2, GDPR |
Data collection and retention
Personal data is processed solely for the purposes described in this privacy statement. When the data is no longer required, it will either be deleted or anonymized, except where legal retention obligations apply.
Third party access
Your data will be accessed by employees, partners and subcontractors only when necessary to perform a requested task (e.g. schedule a demo in a specific language or timezone).
Your rights
You have the right to access, correct, delete, or restrict the processing of your data. You can also request data portability or object to specific processing activities. We aim to respond to your request within one month.
Responsible disclosure
If you wish to report a (suspected) vulnerability or data breach, please direct your message to info (at) instant27001 (dot) com. We will process your message with due confidentiality.
We keep a registration of all (potential) data leaks. A data leak of substantial size and/or impact will be reported to the proper authorities and/or the affected data subject(s).
Legal
Instant 27001 and the checkbox logo are registered trademarks of Instant Management Systems B.V.
Instant Management Systems B.V. is registered with the Dutch Chamber of Commerce under number 82423172, VAT ID NL862465321B01. Postal address: Landverhuizersplein 97, 3072 MH, Rotterdam, The Netherlands.
The intellectual property rights regarding quoted standards are vested in the respective owners, such as (but not limited to) ISO, NEN and Stichting MedMij. Instant 27001 does not replace or include these licenses.
You must be logged in to post a comment.