Privacy Policy

This privacy statement will inform you of the processing of your personal data on the Operand website which is offered as "Software as a Service (SaaS)" by Releasewise B.V. (“Releasewise”). Operand offers a collaborative tool for due diligences, audits, and assessments.

We understand that you wish to protect your privacy and your personal data. We know the protection and security hereof is important to you. We will always process your personal data in accordance with the applicable laws and regulations concerning data protection, such as the General Data Protection Regulation (GDPR) and the Dutch Telecommunications Act. This privacy statement informs you of the way in which we collect, process, and protect your personal data, for what purposes and on which legal grounds.

When using our website, Releasewise will be qualified as the data controller concerning your personal data. If a company makes use of our services, we act solely as data processor. For more information about the processing of your personal data via applications of our customers, we refer you to the privacy statement of the respective companies.

The general details of Releasewise are: Releasewise B.V. (75862751), Borgerderstraat 8 9527 TD, Bronneger, The Netherlands,

We will not process your personal data for any other purposes than stated in this privacy statement. Your personal data will not be retained any longer than is necessary for the purposes for which the data was collected, unless further processing of your data is required by any data protection laws and regulations.

We will ask your prior consent for the processing of your personal data, unless we have a legitimate interest hereto. If the processing is based on your consent, you have the right to withdraw this consent at any time. Please be aware that this withdrawal will not affect the lawfulness of the processing based on consent before its withdrawal.

Our website

We collect personal data via our website which may relate to you.

Mailing lists

If you have created an account via our website and have become a customer of Releasewise, we will occasionally send you emails to update you about new features or other news regarding our services.

You can unsubscribe from receiving these emails at any time by clicking on the link at the footer of every mailing list email we send, or you can send an email to

In addition hereto, we can send you the necessary emails about your account or payments.

Your account

You can sign up via our website to try out our Operand service free for a limited number of days. During the sign up process we ask you to fill in your name, your email address and a password. Please keep the combination of your email address and this password secret.


We only make use of functional cookies e.g. to automatically sign you in. No web analytics cookies or any other cookies are used.

Your rights

Since we collect and use your personal data, you have the right to request from us access to and rectification or erasure of personal data or restriction of processing concerning your personal data, and to object to processing as well as the right to data portability.
Regarding the processing of your personal data by Releasewise you thus have the right to:

  • obtain confirmation as to whether or not your personal data are being processed, and, where that is the case, access the personal data and other information relating hereto;
  • obtain rectification of inaccurate personal data and to have incomplete personal data completed;
  • obtain the erasure of your personal data, where the personal data is no longer necessary, you have withdrawn your consent and there is no other legal ground for the processing, you have objected to the processing, and/or where your personal data have been unlawfully processed;
  • obtain the restriction of processing, where the accuracy of your personal data is contested, the processing is unlawful, your personal data are no longer necessary for Releasewise but you require those in relation to legal claims, and/or where you have objected to the processing and this objection is pending;
  • receive your personal data in a structured and machine-readable format and to transmit these data directly to another data controller.

Releasewise will respond to your request within four weeks. If you do not agree with the contents hereof, the rejection of your request, or the processing of your personal data in any other way, you are entitled to lodge a complaint with the Dutch Data Protection Authority.

Third parties

We will solely share your personal data where you have given us your explicit consent hereto, or where this is necessary for the performance of a contract, a legal obligation or for legitimate interests of Releasewise, or where we are obliged to disclose your personal data on the basis of a request by or order of a competent authority.

If your personal data will be transferred to parties that are not located within the European Union, we will make sure that there is an adequacy decision of the European Commission in place, or that there are other appropriate safeguards set up. You are entitled to obtain a copy of these suitable safeguards by sending an email to that end to

Some of the personal data collected is shared with third party service providers and our business partners.

Google (

We use Google Workplace. All email we receive passes through Gmail, and all data associated with email such as your email address and any headers are stored by Google. In addition we use Google Drive to store spreadsheets and other documents which may include your name and email address.

Postmark (

We use Postmark to send transactional email to customers, such as notifications about errors and performance issues. To do this, we provide them with your email address whenever such an email is sent.

Stripe (

If you’re a paying customer, your credit card data, name, (office) address and email address are securely stored and processed by our payment provider Stripe. We can see this information, though credit card data is limited to the expiry date and the last four digits of your card. We cannot see your credit card number or CVC (Card Verification Code).

Security measures

We have implemented the appropriate technical and organizational measures to ensure that your personal data will be processed in accordance with the applicable data protection laws and regulations, and to ensure a high level of security and integrity of your personal data. All data traffic runs over SSL. We keep the application data you send us in ISO 27001, SOC 1, SOC 2/SSAE 16/ISAE 3402, PCI Level 1, FISMA Moderate, and Sarbanes-Oxley (SOX) certified facilities in Europe.


We may change or modify this privacy statement from time to time. We will only process your personal data in accordance with the privacy statement that applied at the time your personal data was collected. We strongly advise you to consult the most recent version of this privacy statement. If you have any questions about this statement, don’t hesitate to contact