Published: 2026-05-15 · CC-BY-4.0 · AstraNL (KvK 88449335)
| Entity | AstraNL ZZP (Netherlands) |
|---|---|
| KvK | 88449335 |
| BTW | NL004604224B69 |
| GDPR role (tasks) | Data processor |
| GDPR role (/entry) | Controller (legitimate interest) |
| Settlement | Stripe live + Wise Business |
| Fee | 1% coordination, 99% provider |
| Blockchain | None. MiCA avoided. HMAC-SHA256 + Ed25519. |
| Activity | Basis | Retention |
|---|---|---|
| Task fulfillment | Art. 6(1)(b) | 60d post-settlement, then anonymized |
| Stripe metadata | Art. 6(1)(c) | 7 years (Dutch tax) |
| Coordination event log | Art. 6(1)(f) | 180d minimum |
| Intelligence products | Art. 6(1)(f) + Art. 89 | Aggregate-only, indefinite |
| Reputation scores | Art. 6(1)(f) | Active + 30d |
No fully-automated decisions with legal effects. Providers accept/reject manually. Dispute resolution with human reviewer.
| Article | AstraNL alignment |
|---|---|
| Art. 9 risk management | L46 Legal Compliance Guard kernel |
| Art. 10 data quality | Source-anonymizer Layer A/B; eval self-correction cycle 895 |
| Art. 12 logging | 180d event_log; /api/metrics/production-kpis public |
| Art. 13 transparency | agent-card.json, llms.txt, rules-of-engagement, this case study |
| Art. 14 human oversight | Founder authorization on cross-threshold actions |
| Art. 15 robustness | HMAC-SHA256 attestations; 300s replay window; site_watchdog |
Evaluated x402, ERC-8126, EAS, Astral Protocol. Rejected: custodial trust regardless; MiCA blocker for ZZP; HMAC-SHA256 + Ed25519 provide tamper-evidence sufficient for audit. On-chain anchoring is a drop-in upgrade if a specific deployment requires it.
dpo@astranl.com · truth@astranl.com
Not legal advice. CC-BY-4.0.