Procurement FAQ
Buyer, legal, privacy, and security answers for early SUNURA evaluation.
These materials are provided as transparent legal and operational information for SUNURA services. They do not constitute legal advice, legal representation, regulatory certification, or a guarantee that any customer is compliant with applicable law. Customers remain responsible for legal interpretation, implementation choices, and real deployment.
Contact: Address: Hendrik-Ido-Ambacht, The Netherlands. General contact: [email protected]. Telephone: +31-645752433.
What is SUNURA?
SUNURA is Article 50 disclosure operations and evidence tooling for customer workspaces, evidence capture, evidence packages, and public verification pages.
Does SUNURA provide legal advice?
No. SUNURA is software, not legal advice. Legal interpretation remains with the customer and counsel.
Does SUNURA certify compliance?
No. SUNURA records operational evidence; it does not certify legal compliance.
Where is data stored?
Data-location commitments depend on the selected production deployment, plan, and customer agreement. Enterprise data-location requirements can be documented by contract.
Does SUNURA support a DPA?
A DPA process page and template structure are available. Executed terms require legal review and contracting.
Does SUNURA support SSO?
SSO/SAML is an enterprise-contract feature, not included in self-service plans by default.
Does SUNURA support EU hosting?
EU hosting options are available through the selected deployment architecture or enterprise contract.
Does SUNURA support an enterprise SLA?
Yes, by contract. Self-service plans use support targets, not contractual service credits.
Does SUNURA support C2PA?
SUNURA supports C2PA-compatible workflows. Trusted C2PA signing and key custody require contracted production configuration.
What evidence does SUNURA export?
Evidence packages may include disclosure decisions, evidence captures, hashes, verification references, receipts, and PDF/CSV/JSON/ZIP exports depending on plan.
How does public verification work?
A public verification page can confirm selected evidence status without exposing the private customer workspace.
What is the security model?
SUNURA uses customer-workspace separation, authentication, hashed API keys, role boundaries, logging, and deployment-level security controls.
Can agencies manage multiple clients?
Yes. Agency workspaces are designed for client separation, bulk scanning, evidence capture, and client-ready evidence exports.
How do we delete data?
Deletion handling depends on plan, retention settings, legal preservation needs, and final contractual terms.