Terms of service
Draft, to be reviewed by a lawyer before launch.
These terms apply to the use of Meldklok, offered by Beltar B.V. in the Netherlands. By creating an account you accept them. Last updated 2026-08-31.
1. What Meldklok is
Meldklok is a software tool. It monitors the software bills of materials you upload against the public exploitation feeds it names, it tracks the deadlines of Article 14 of Regulation (EU) 2024/2847, it prepares notification dossiers and it stores evidence.
Meldklok is not legal advice. It does not decide whether an event has to be reported, it does not assess conformity, and it does not submit anything to any authority.
2. What we do not promise
- We do not promise that the feeds we monitor are complete or correct. They are public sources maintained by others.
- We do not promise that every affected component in your product is detected. Matching depends on the data in your SBOM.
- We do not promise a timely or successful submission. A person of yours submits in the Single Reporting Platform.
- Using Meldklok is not a statement of compliance with the Cyber Resilience Act or with any other rule.
3. Your account and your people
You are responsible for the accuracy of the data you enter, for keeping your notifier and backup current, and for the acts of the users you invite. Two factor authentication is required for administrators and for users who are notifier or backup on a product.
You may not use Meldklok to store data you have no right to store, and you may not attempt to reach the data of another customer.
4. Subscription and payment
The subscription is per product per month, monthly or prepaid annually, and is billed through Stripe. The quantity follows the number of products in your organisation; adding or removing a product changes the quantity and Stripe prorates the difference.
A failed payment never blocks an open incident. After a grace period it blocks adding products, uploading SBOMs and switching monitoring on. Prices exclude VAT.
5. Availability
We aim for 99.5% availability of the web application and we treat the alert pipeline as the critical path, so feed jobs and outgoing alerts survive a deploy. This is a target, not a service level agreement with credits. Planned maintenance is announced when it is likely to be noticed. "to verify" before launch.
6. Liability
Our total liability under these terms is limited to the fees you paid in the twelve months before the event that caused the damage. We are not liable for indirect or consequential damage, including a missed deadline, a fine, or loss of profit.
Nothing in these terms limits liability for intent or deliberate recklessness.
7. Term, termination and your data
The subscription runs for the period you chose and renews unless you cancel before the end of it. You can cancel in the customer portal.
On termination you can export your data first. After a grace period of 30 days we delete it, except the invoices we have to keep, and except backups, which expire on their own schedule.
8. Changes
We may change these terms. A material change is announced by email at least 30 days before it takes effect, and you may terminate before that date if you do not accept it.
9. Law and court
Dutch law applies. Disputes go to the competent court in the Netherlands. Contact: albert@beltar.nl, Beatrixstraat 21, 8322 GC Urk.
Beltar B.V., Beatrixstraat 21, 8322 GC Urk, the Netherlands. albert@beltar.nl.