1. Background and Purpose
Raven Computers works systematically with data and privacy protection, IT and cyber security, and responsible use of data.
The company works to comply with applicable legislation, including the General Data Protection Regulation (GDPR), and is also working towards meeting the requirements relevant to the business with the aim of obtaining the Danish D-mark.
Raven Computers is not directly subject to the Danish legislation implementing NIS2. Raven Computers uses the term NIS2-Light to describe a proportionate and practical approach to relevant cyber security principles, including where security and documentation requirements may become relevant through customers and supply chains.
This page serves as the entry point to Raven Computers’ compliance and documentation framework and provides an overview of the public documents and internal documentation areas used as part of the company’s work with data and privacy protection, IT and cyber security, responsible use of data, and the Danish D-mark.
The public documents can be accessed directly from this page. Internal governance, control, and supporting documentation is not published, but the overview identifies the relevant areas by name or description together with a relevant date, making it visible which areas Raven Computers maintains documentation for.
Internal documentation is not disclosed as a general rule. Following a case-by-case assessment, and only to the extent necessary, it may be made available in connection with a Danish D-mark assessment or requirements from relevant public authorities. In other circumstances, disclosure will take place only where Raven Computers determines that there is a documented, legitimate, and necessary need.
Any disclosure takes account of information security, personal data, confidential business information, and other protected interests, and may therefore be limited to relevant extracts or evidence that a specific requirement has been met. The overview does not confer any general right of access to Raven Computers’ internal documentation.
The documentation framework is reviewed at least once annually during the company’s established update period from December to February, and also following material changes in legislation, the risk landscape, supplier relationships, system use, processing of data, or internal procedures.
The documentation is updated where the review or material changes make this necessary. Minor editorial changes or routine operations do not necessarily require revision. If no material changes are identified during the annual review, the existing documentation remains in force.
Where material changes are made to the Terms and Conditions or the Data and Privacy Policy, all active customers in Raven Computers’ customer database are informed of the update by email.
This approach is risk-based and proportionate to the size and activities of Raven Computers.
2. Documentation Overview
The overview below shows Raven Computers’ public core documents together with the company’s internal governance and documentation framework. The public documents can be opened directly from the overview.
The internal entries describe documentation areas which, wherever practicable, form part of one consolidated internal governance and documentation framework. They should therefore not be understood as separate policies or documents unless explicitly stated. Specific agreements and other evidence may be listed separately where this demonstrates compliance.
| Document / Documentation Area | Status | Date |
|---|---|---|
| Data and Privacy Policy (Public) | Current | 05-10-2026 |
| Terms and Conditions (Public) | Current | 05-10-2026 |
| Internal governance and documentation framework (consolidated) – documentation framework for the Danish D-mark, GDPR accountability, IT and cyber security, and responsible use of data | Under Preparation | — |
| ↳ Governance, responsibility, and compliance review – responsibility, ongoing governance, review, and maintenance | Under Preparation | — |
| ↳ Processing, data, systems, and asset overview – processing activities, data types, systems, roles, retention, access, and relevant security measures | Under Preparation | — |
| ↳ Suppliers and processors – roles, processing relationships, agreements, relevant security matters, dependencies, and risks | Under Preparation | — |
| ↳ Data Processing Agreement – Visma e-conomic A/S | Documented | 13-02-2026 (obtained) |
| ↳ Data Processing Agreement – Internet 123 / i123 | Documented | 12-02-2026 (obtained) |
| ↳ Risk management – identified risks, existing controls, residual risk, and relevant legitimate-interest and DPIA assessments | Under Preparation | — |
| ↳ Data subject rights – workflow and documentation for handling relevant GDPR rights | Under Preparation | — |
| ↳ Security incidents and personal data breaches – assessment, handling, documentation, and any required notification or communication | Under Preparation | — |
| ↳ IT and cyber security – relevant technical and organisational security controls, access, updates, protection, and technical operation | Under Preparation | — |
| ↳ Backup, recovery, and operational continuity – backup, recovery, and relevant arrangements for operational disruption | Under Preparation | — |
| ↳ Website, cookie, and tracking controls – checks covering public information, cookies, tracking, legal documents, and website changes | Under Preparation | — |
| ↳ AI and responsible use – actual AI use, data minimisation, supplier relationships, human oversight, risks, and relevant controls | Under Preparation | — |
| ↳ Data ethics – responsible use of data, necessity, fairness, transparency, and human oversight | Under Preparation | — |
| ↳ D-mark preparation and evidence framework – status of relevant requirements and references to the documentation and evidence supporting compliance | Under Preparation | — |
3. Status Definitions
- Current: The document or documentation area is current, has been reviewed, and forms part of Raven Computers’ current documentation framework.
- Documented: Specific underlying documentation, an agreement, or other evidence is held.
- Under Revision: Existing documentation is undergoing active revision.
- Under Preparation: The documentation has not yet been finalised as part of the current documentation framework.
The date indicates the relevant documentation, review, or control date for the entry. For external documentation, the date may indicate the documented date on which it was obtained until a later review is recorded.
Last updated: 8 October 2026