Use this checklist to identify the information you need for your procurement, privacy and security review. The website and non-binding portfolio enquiry have their own notices. For hosting, check which documents form part of your service agreement; publishing guidance does not make it part of your contract. Existing customers retain their applicable agreements.
| Review question | What to check |
|---|---|
| Who operates the current website and enquiry? | The legal and trust index and website and enquiry privacy statement identify the operator of this website and enquiry service. Before ordering a paid service, check the full identity of the seller named in your contract. |
| What browser storage do the website and portal use? | The cookies and browser-tab storage notice explains storage on this website and in the separate client portal. |
| What does creating an account or sending an enquiry mean? | The account and non-binding enquiry terms apply only in the version you have accepted. An enquiry does not order hosting. |
| Which controls are described for the enquiry? | The enquiry security information describes controls for enquiries. It does not establish a hosting certification or promise a hosting service level. |
| Which hosting obligations would apply to my service? | Read the standard documents on service agreements, data processing, acceptable use, managed services, backup responsibilities and support. These standard texts become contractual only when their versions and completed service schedules are agreed in an Order. Check processing schedules, switching and exit and the portability register as well. |
| Where would service data and backups be held? | Ask for the completed schedule for your product and the annexes to its data processing agreement (DPA). A VM in the Netherlands does not tell you where backups are held, which countries administrators can access data from, which suppliers are involved or what transfer safeguards apply. |
| What would a paid order contain? | Before relying on an offered service, ask for a completed Order naming you as the buyer, the exact versions of the agreed documents, the price and VAT treatment, cancellation and payment terms, and a record of your active acceptance. |
When considering VM Start with Managed OS, ask which disks are protected, how restoration was tested, who provides support and handles escalation, and how your data can be exported or deleted when the service ends. The standard service description does not include application management, a 24/7 response, a numerical recovery target or a service credit. Any additional commitment must be expressly agreed in your Order.
This checklist does not establish that Novasean is certified, that an unverified supplier list applies to a particular service, that you have agreed a hosting contract, or that your workload is accepted. Medical personal data are outside the intended standard service. If your use case may involve them, discuss it without sending the data itself.