Capability Statement
Audited institutional proof package — governance, EU frame, national-scale delivery evidence.
OpenTrust Center · Counterparty under one desk
Five pillars · one named desk · audited counterparty.
Sovereignty, data localization, GDPR, certifications, and EC Commission alignment are routed through the same Compliance & Governance desk. Procurement teams should not need two weeks to ask for basic evidence; the documents are already on the page.
Counterparty register
Five pillars
Trust · 01 · EU sovereignty
EU listed counterparty, EU-resident leadership, EU-located infrastructure. Sovereignty is structural.
GDPR · NIS2 · eIDAS · EU AI Act
OpenTrust · 02 · Data localization
EU data residency by default. Sub-processor list available on request. Cross-border transfers documented under GDPR Chapter V.
EU residency · Sub-processors on request · Schrems II
OpenTrust · 04 · GDPR & privacy
Named DPO, downloadable DPA template, sub-processor list on request, 10-working-day signed-return SLA.
GDPR · DPO · DPA template · dpo@ascendia.eu
OpenTrust · 03 · Certifications
Active certifications, roadmap items, and conformance records — visible without theatrics.
WCAG 2.1 AA · EN 301 549 · ISO/IEC 27001 · NIS2
OpenTrust · 05 · European Commission alignment
EC DEC expert-group seat since 1 July 2024 · few technical counterparties hold one.
EC DEC · DG EAC · DEAP 2021–2027
OpenSub-processor disclosure
Ascendia processes Personal Data in EU member-state data centres by default. A complete, current sub-processor list — including entity name, service role, hosting region, data categories, and applicable transfer mechanism — is maintained and disclosed to Controllers on request. The list is available within 5 working days of a written request to the Data Protection Officer.
Request method
Written request to dpo@ascendia.eu
Response SLA
5 working days
Data residency default
EU member-state data centres
Transfer mechanism
SCCs for any EEA-exit paths · documented per sub-processor
The full sub-processor list is appended to the Data Processing Agreement template (Schedule C) available at ascendia-dpa-template-2026.
Procurement-ready evidence
Governance documents, compliance posture, and audit-trail artefacts in one place — structured for procurement, legal, and compliance review.
Audited institutional proof package — governance, EU frame, national-scale delivery evidence.
OpenGDPR Article 28 DPA template — parties, processor obligations, TOMs, sub-processor schedule, and signature block.
OpenSub-processor disclosure — EU data residency by default; full list on request to dpo@ascendia.eu within 5 working days.
OpenTrust-hub accessibility pillar. WCAG 2.2 AA · EN 301 549 v3.2.1 · EAA · WAD. VPAT, conformance declaration, and public roadmap on request.
OpenPublic statement per Implementing Decision (EU) 2018/1523 — compliance status, non-accessible content, methodology, feedback, enforcement.
OpenBVB-filed audited annual report — financial highlights, governance record, and listed-company accountability.
OpenDesk 03 · R&D, platform, compliance & governance
Gabriel Lazar
Research & Development Director — EC DEC member, technical evidence, accessibility, AI governance, and regulated-enterprise architecture
Service-level commitment
Inside this cluster
Trust Center groups the listed-company governance estate, the named institutional desks, the data-localisation and sovereignty posture, and the legal record that procurement, regulators, and counterparties consult. Anchored by the Bucharest Stock Exchange listing (BVB: ASC) since 2016.