Built like the compliance file it is.
Identity data of real people, held on behalf of a regulated business. The guardrails are not a settings page; they are the architecture.
EU-hosted, EU-owned
Data stays in EU data centres, processed by an EU entity on behalf of your firm, which remains the controller. Retention follows the Wwft, not a default.
BSN stays in the vault
Dutch citizen service numbers are masked on arrival and stored only in the vault, on a statutory basis. They never appear in outbound documents, shares or search results.
Every answer cites its source
No orphan answers. Each filled field points to the document, page and extraction that produced it, so review means checking, not guessing.
Tamper-evident audit log
Fills, releases, document versions and share events land in a hash-chained log. What happened is provable, in order, after the fact.
Scoped, watermarked shares
Counterparties get a scoped profile link, not an email thread full of PDFs. Downloads are watermarked per recipient and access can be withdrawn.
Form versions under watch
When a standard or questionnaire updates, unchanged answers migrate and changed ones return to review. Nothing silently answers an old question on a new form.
One platform,
built for this kind of work.
Counterpass does not run on improvised infrastructure. It shares its foundations with a legal practice that lives on the same standards.
Built by noLLM B.V.
Counterpass is a product of noLLM B.V., Amsterdam, and runs on the same EU platform foundations as Navabi: one stack for identity-grade documents, audit logging, secure links and e-mail that proves its sender.
Legal partner: Navabi
Navabi is the legal counsel practice we work with. The managed review desk, the data processing agreement and the red-list policy are maintained with their counsel, so the legal side is not an afterthought of the software.
Proven on a live fund
Counterpass is developed with an AFM-registered fund manager in Amsterdam as first design partner, on real inbound onboardings rather than demo data.
A security overview, the data processing agreement and the subprocessor list are available on request.
Stop retyping your own fund.
You hear from us within one working day.