Trust and vendor information
Normfort sp. z o.o. provides RegisterBench: company identifiers, LEI, EU hosting, subprocessors, security, exit and data export, register fields.
Last reviewed
Who we are
The service is provided by "NORMFORT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (in short: Normfort sp. z o.o.), registered office at ul. Dywizjonu 303 139/55, 01-470 Warszawa, Poland" [S-1].
Company register numbers: "under KRS number 0001256018, NIP 5223379795, REGON 545337418, share capital PLN 5,000.00" [S-2].
"Legal Entity Identifier (LEI) of the Provider: 259400J1H3VYOMLHDY43, issued on 2026-09-04 by KDPW (LOU)." [S-3]
The public GLEIF record of this LEI, read on 2026-11-01, gives the legal name "NORMFORT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ" [S-4], headquarters country "PL" [S-5], entity status "ACTIVE" [S-6], registration status "ISSUED" [S-7] and next renewal date "2027-09-04T14:30:52Z" [S-8].
Where your data is hosted
"Register data and backups are processed in the European Union." [S-9]
"Subprocessors: OVH (hosting of the application, the database and the operations host, in the EU), Scaleway (transactional e-mail, TEM, region PAR), Cloudflare (DNS, Pages for the public website, Email Routing for kontakt@, transitional analytics beacon), Hetzner (encrypted off-site copies of the backups, Storage Box, Helsinki, Finland)." [S-10]
"We notify clients of a change of subprocessor or of a processing location 30 days in advance." [S-11]
Payments: "For buyers in the EU and the UK the selling entity is Paddle.com Market Limited, with its registered office in London." [S-12] "Paddle acts as a separate controller for the payment data of the buyer; card data never reaches us." [S-13]
Security and continuity
"Transport is encrypted; backups are encrypted before they leave our infrastructure." [S-14]
"TOTP two-factor authentication is available and an organisation can require it from all its members." [S-15]
"Every mutation is written to an append-only audit log with actor, organisation and column diff." [S-16]
"Tenant isolation is enforced by the application and covered by automated tests." [S-17]
Backups: "automatic backups with a rotation of daily and monthly copies, and an alert when the latest backup is older than the configured maximum age" [S-18].
"Availability is an operational target of 99.5 per cent, communicated as a target and not as a contractual service level with penalties in version 1." [S-19]
"A public status page is in preparation and is not live on the date of this version of the Terms." [S-20]
"We notify the client of a personal data breach concerning the entrusted data without undue delay and no later than 48 hours after becoming aware of it, by an e-mail to the address of the account." [S-21]
"Assistance with an ICT incident related to the service is included at no additional charge" [S-22].
Support: "Support hours are business days, Monday to Friday excluding public holidays in Poland, from 9:00 to 17:00 Central European Time (CET/CEST)." [S-23] "Support requests are made by e-mail to support@registerbench.com" [S-24].
If we stop or you leave
"Export-all returns the complete data of your organisation in open formats (CSV/JSON/ZIP) and works in every account state, including a suspended account." [S-25]
"Export-all is self-serve, works in every account state and returns the data in the open formats of the ESA templates; the client can continue the work outside the service at any time." [S-34]
"You may terminate the agreement at any time by cancelling the subscription, with effect at the end of the paid period." [S-26]
On our side, termination is possible "for good cause, where you materially breach these Terms and do not remedy the breach within 30 days of our written request to do so, with effect at the end of that period" [S-28], for non-payment, or "if we discontinue the service as a whole, with at least 90 days notice, during which export-all remains available." [S-27]
"After cancellation the account stays in the export-blocked state with no end date" [S-29].
"Working data and import files are deleted automatically a configured number of days after a final export ( purge_after_days per organisation, default 30, which an OrgAdmin can change to another positive number of days), or immediately at the request of an OrgAdmin." [S-30]
"An OrgAdmin can hard delete the organisation: the deletion removes all data of the organisation and its stored files." [S-31] "The data may remain in backups for the period of their rotation, and until they are deleted they stay protected by the measures of Annex C." [S-32]
"You may use the packages and exports generated with the service for your own business, including filing them, also after the end of the agreement." [S-33]
"We give 30 days notice before a change of these Terms takes effect, and you may terminate before that date." [S-35]
Your register entry for RegisterBench
Column codes and field names below are copied from the EBA artefact "20241217 Annotated Table Layout DORADORA 4.0.xlsx", sheet "B_05.01" (rows 5 and 6), packed in "annotated_templates.zip".
| Column | Field name (EBA artefact) | Value for RegisterBench | Source |
|---|---|---|---|
| "0010" | "Identification code of ICT third-party service provider" | "259400J1H3VYOMLHDY43" | [S-3] |
| "0020" | "Type of code to identify the ICT third-party service provider" | "LEI" | [S-3] |
| "0030" | "Additional identification code of ICT third-party service provider" | client-specific | client-specific |
| "0040" | "Type of additional identification code of the ICT third-party service provider" | client-specific | client-specific |
| "0050" | "Legal name of the ICT third-party service provider" | "NORMFORT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ" | [S-4] |
| "0060" | "Name of the ICT third-party service provider in Latin alphabet" | client-specific | client-specific |
| "0070" | "Type of person of the ICT third-party service provider" | client-specific | client-specific |
| "0080" | "Country of the ICT third-party service provider's headquarters" | "PL" | [S-5] |
| "0090" | "Currency of the amount reported in RT.05.01.0070" | client-specific | client-specific |
| "0100" | "Total annual expense or estimated cost of the ICT third-party service provider" | client-specific | client-specific |
| "0110" | "Identification code of the ICT third-party service provider's ultimate parent undertaking" | client-specific | client-specific |
| "0120" | "Type of code to identify the ICT third-party service provider's ultimate parent undertaking" | client-specific | client-specific |
This table helps you fill the row for RegisterBench. The assessment of RegisterBench as your provider stays with you: "The responsibility for what is filed stays with the entity that files it." [S-37]
Insurance
Normfort sp. z o.o. does not hold professional indemnity or cyber insurance on the date of this page. We have asked insurance brokers for quotes.
Method and limits
"It is not legal advice and it does not interpret the regulation for you." [S-36]
Every statement on this page quotes or restates a sentence of the live registerbench.com pages or of the public GLEIF record, read on 2026-11-01. The sources are listed at the end of this page.
Fields marked client-specific depend on the client or have no value in these sources, so this page leaves them to the client.
Sources
- RegisterBench Terms of Service (S-1 to S-3, S-9 to S-12, S-14 to S-17, S-19, S-20, S-22, S-25 to S-31, S-33 to S-35): https://registerbench.com/terms/
- GLEIF public record of LEI 259400J1H3VYOMLHDY43 (S-4 to S-8): https://api.gleif.org/api/v1/lei-records/259400J1H3VYOMLHDY43
- RegisterBench Privacy Policy (S-13): https://registerbench.com/privacy/
- RegisterBench Data Processing Agreement (S-18, S-21, S-32): https://registerbench.com/dpa/
- RegisterBench Support and Availability Policy (S-23, S-24): https://registerbench.com/support-policy/
- RegisterBench home page (S-36, S-37): https://registerbench.com/