Last updated on this deployment. Please read before generating a report.
VSME Report guides you through the datapoints of the EFRAG VSME Basic Module, then renders your answers into a structured, printable report together with a list of any required datapoints you have not yet filled. It follows the VSME structure. It does not audit your figures and it does not certify anything.
To generate your report, we store the email address you provide and the answers you enter into the form (company name, headcount, energy, emissions, workforce figures and the other VSME datapoints). The report page is rendered from those stored answers each time its link is opened. The link contains a random code; anyone who has the link can open the report, and search engines are told not to index it. Stored answers and reports are kept for 12 months after the report was created, or deleted sooner if you ask.
Your draft answers are also kept in your own browser's local storage so you can return to them. Your email address and any report code you paste are not written there.
Your email address is also recorded in our customer contact system, which is shared across our products so that one unsubscribe or deletion request covers all of them. We add your address to our product news mailing list only if you tick the box that says so. The box is off by default, and when you tick it we store a consent record (email, time, form and checkbox wording) in our own database. Emails are sent through Brevo, our email provider, and every mailing carries an unsubscribe link. If you buy a report, the report code and payment related messages are sent to you by email; those messages are needed to deliver what you bought and are not marketing.
Like any web server, ours receives your IP address and browser details with each request. They are used for the free report allowance (counted against a salted daily hash of your address, not the address itself), for security and to keep the service running. Our edge server keeps a size-capped access log for security (in practice about a week, including the requested address and its query string); the application itself keeps no access log, and neither is used to profile you.
We measure page views with our own self-hosted analytics. It sets no cookies. It does store a random identifier in your browser's local storage, and it records the pages you view including their query string, the referring page, your screen size and browser language. Session replay is switched on: it records the page as it is displayed to you, with mouse movement, scrolling and clicks; text you type into a field is masked, and the parts of the page that show your results or your answers are blocked from the recording; recordings are deleted after 30 days and page-view statistics are kept for 10 years. We also count visits on the server with a daily rotating hash of your address and browser string; the raw address is not stored in the analytics data and the hash cannot be linked across days. We do not use third-party trackers or advertising pixels, and we do not sell your data.
You can ask for a copy or the deletion of your data at any time using the contact address below. The full privacy notice lists who is responsible, every recipient, retention period and legal basis.
The figures in the report are the ones you enter. We do not verify them. Before you share a report with a bank or a customer, review the values and confirm they are correct and complete for your situation.
The service is provided on a best effort basis. It is designed to fail safe: if something cannot be reached, your draft remains in your browser and no data you entered is lost on the client side.
The first report is free. Paid reports are sold through Stripe Managed Payments: for each purchase Link, LLC, a Stripe company, is the merchant of record and handles invoicing, applicable VAT, receipts, refunds and statutory withdrawal rights for customers in the relevant jurisdictions. Your card details are entered on Stripe's checkout page and never reach our servers.
Questions about these terms or a data request: hello@innodigital.io.
Operated by InnoDigital (sole proprietorship, Poland; NIP 5761448946, REGON 524963224). Who is responsible for your data: Privacy notice.
We may update these terms as the service and the underlying VSME standard evolve. Material changes will be reflected on this page.