Avendar
Avendar is a Dutch AI platform for high-stakes public sector decisions. Its Caselink and Integrity applications collect, analyze and prioritize tips, documents and transactions for investigators, and deploy on-premise or in a European private cloud.
What is Avendar?
Avendar is a platform published by Avendar B.V., a Dutch company based in 's-Hertogenbosch on the JADS campus (Jheronimus Academy of Data Science, a TU Eindhoven and Tilburg University initiative). It serves high-stakes public sector decisions through one platform with two named applications: Caselink for public intelligence and Integrity for permit and subsidy screening. A third use case, welfare fraud investigation, appears on the platform page.
Caselink addresses large criminal investigations that receive hundreds of tips from the public. It synchronizes those tips from websites, social media and phone calls into a single source of truth, extracts entities such as names, addresses, licence plates and case facts, links related tips, places them on an interactive map and ranks what matters. Avendar states that Caselink “has been developed with the Dutch National Police and is currently being deployed across The Netherlands”.
Integrity structures the documents attached to a permit or subsidy application, cross-checks them against the application form, validates them with OSINT, analyzes them with AI, verifies authenticity through visible patterns and hidden watermarks, and visualizes entity relationships in a graph. It is built on the official Dutch Bibob form.
Risk detection is the shared engine: the platform page shows findings such as “4 anomalous fonts found in document, 1 invalid IBAN found” and a EUR 45,000 transaction flagged SUSPICIOUS among ordinary purchases marked Normal. Avendar frames this as Human AI: model decisions are visualized, feedback is simple, and model recommendations are always fully explainable and traceable, ensuring investigative units always stay in control.
The platform ingests unstructured data (email, call, PDF, CSV, ticket), connects to internal systems where APIs exist following Common Ground principles, and runs fully on-premise or in a European private cloud, packaged with Docker and Kubernetes under NL/EU and Zero Lock-in badges. Compliance is built in: non-editable audit trail, RBAC as standard, optional SSO, encryption at rest and in transit, and no access for Avendar employees.
Founded by Hugo Sleegers, Tijs Bronnenberg and Marijn van Aerle, former Floryn staff, with Thom Hopmans as CTO since March 2026, Avendar started in early 2025 with the National Police and the Ministry of Justice and Security as launch customers. Cited users include the municipalities of Amsterdam and The Hague. Its mission is making Europe safer with AI-driven decisions; the scope stays narrow, with no public API, mobile app or self-service sign-up.
What it does
- Collect and centralize public tips coming from websites, social media accounts and phone calls
- Recognize the entities in a case automatically: names, addresses, licence plates and case facts
- Prioritize signals and rank high-risk cases as findings marked high or medium
- Detect suspicious transactions and patterns matching known criminal typologies
- Analyze unstructured documents, extract their data and check completeness and validity
- Verify document authenticity through visible patterns and hidden watermarks
- Plot tips on an interactive map and visualize relationships between entities as a graph
When to use Avendar / When not to
A quick filter to help you decide if Avendar is the right fit.
When to use Avendar
- Police investigators working through hundreds of public tips in a large-scale criminal case
- Public officials running Bibob integrity screening on permit and subsidy applications
- Fraud investigators reviewing bank statements for suspicious transactions, invalid IBANs and known criminal typologies
- Municipalities and government ministries that require data sovereignty and an on-premise deployment
- Compliance and risk managers who need a non-editable audit trail, role-based access control and SSO
When not to use Avendar
- Individuals and freelancers: the platform is deployed inside an organization, never on a personal account
- Teams that need public pricing, online sign-up or a free plan: the only way in is the Contact sales button
- Developers and mobile-first users: there is no public API documentation, no iOS or Android app and no browser extension
- Organizations looking for a general-purpose AI assistant: the scope is limited to public intelligence and permit or subsidy integrity
- Buyers who need documented references outside the Netherlands: European expansion is announced, not yet evidenced
How to use Avendar
A typical end-to-end flow, from setup to results.
- Start from the website: there is no account, no sign-up and no download, so the entry point is a conversation with Avendar
- Click Request a demo to book a 30-minute slot through the Cal.com scheduling module embedded on the site
- Or click Contact sales, which leads to the contact page and its Schedule a meeting block
- Reach the team directly if preferred: info@avendar.com, +31 73 234 00 29, or Sint Janssingel 92, 5211 DA 's-Hertogenbosch
- Receive the pre-sales visit: Avendar says its team comes on site, to the workstation of the field specialists
- Scope compliance with Avendar's specialists where needed: analysis, compliance report and DPIA support are offered
- Choose the deployment model: fully on-premise, or a private cloud operated by European partners, using Docker and Kubernetes
- Connect the organization's internal systems where APIs are available, following Common Ground principles
- Configure access: RBAC comes as standard and the platform can be linked to an existing SSO
- Work day to day: tips, cases or application files arrive, the AI extracts, links and prioritizes them, and the investigator reviews or dismisses each finding, with every action recorded in the audit trail
Pros & Cons
Pros
- Claimed data sovereignty: data and models remain in the Netherlands, in a private cloud or on-premise, independent from external parties
- Explainability is front and centre: recommendations are traceable and the investigator stays the decision-maker
- Compliance posture displayed on every page: ISO 27001 certified, EU AI Act, GDPR and a non-editable audit trail
- Verifiable public sector references: the Dutch National Police, the municipalities of Amsterdam and The Hague, and the Ministry of Justice and Security
- Deployment flexibility: on-premise, Docker, Kubernetes and a Zero Lock-in commitment
- End-to-end support, including DPIA and compliance reporting, with an on-site presence at the customer
- Credible team and recent traction: founders from Floryn, a CTO formerly Lead Data Scientist at the Royal Marechaussee, EUR 2.2M raised in May 2026 and the 2026 Gerard & Anton Philips Award
Cons
- No public pricing, no plans and no pricing page: a budget cannot be estimated without going through sales
- No terms and conditions and no legal notice published: contractual terms, data ownership and warranties cannot be checked beforehand
- The published privacy policy covers the marketing website only, not the delivered platform
- Nothing is stated about training models on customer data, nor about an opt-out
- No named list of subprocessors: only categories are listed, plus Cal.com for the website
- No public API documentation, no mobile app, no browser extension and no declared interface language
- Documented deployments are all Dutch, the company is young and small (started early 2025, four open roles in August 2026), and evaluation requires a booked demo with no free trial or sandbox
Pricing & Plans
No pricing is published. The site has no pricing page, which was confirmed against the full sitemap, and it announces neither a free plan nor a free trial while explicitly excluding neither. The only entry points are the Contact sales and Request a demo buttons, which places Avendar in a contact-sales model: no lowest price point and no currency can be reported.
Data, GDPR & hosting
A consolidated view of how Avendar handles your data.
GDPR overview
GDPR implementation is stated explicitly and repeatedly. Every footer carries ISO 27001 Certified, EU AI Act Compliant and GDPR Compliant, and the platform page says Avendar “puts privacy first and ensures that data is protected in full compliance with GDPR, the EU AI Act, and ISO 27001 standards”. The published Privacy Policy Website v2.1 (June 2026) follows Articles 12 to 14 GDPR but covers the marketing site only, not the delivered platform. It names legal bases (legitimate interest, consent), lists access, rectification, erasure, objection, restriction and portability rights, promises an answer within four weeks extendable by two months, gives privacy@avendar.com as the contact and names the Dutch Autoriteit Persoonsgegevens as supervisory authority. Non-EEA transfers rely on standard contractual clauses or an adequacy decision. No DPO is named, and no audit report or ISO certificate is published.
Who owns the data?
No terms and conditions are published, so contractual ownership of data cannot be verified in advance. The only legal document online is the Privacy Policy Website v2.1 (June 2026), and it covers the marketing site only, not the delivered platform. For that site Avendar B.V. is the controller; the policy adds that “to the extent that we process your personal data as a processor on behalf of another controller, that controller can provide you with information”. In a deployment the customer organization therefore remains controller and Avendar acts as processor. Avendar states that data is stored and sent securely encrypted and that its employees do not have access to it, and that data and models remain in the Netherlands. No ownership, licence or reuse clause is published.
Reuse rights
No terms of service are published, and that is the main limitation: nothing publicly governs what a customer may do with the data it feeds into the platform or with the outputs it gets back, so the point can only be settled in the contract. What the site does describe points to customer control. Avendar states that the platform “can be hosted fully on-premise, and is therefore completely sovereign and independent from external parties, or run securely within our private cloud operated by European partners”, and displays a Zero Lock-in badge. Outputs are signals and recommendations for investigators, always explainable and traceable, so a human decides what is acted upon, and every action is written to a non-editable audit trail an administrator can review. On the marketing website only, the privacy policy allows Avendar to reuse business contact details for prospecting on a legitimate-interest basis, with a right to object.
Data retention & training
Hosting summary
Avendar states that the platform can be hosted fully on-premise, and is therefore “completely sovereign and independent from external parties”, or run within its private cloud operated by European partners. The about page adds: “complete control and data sovereignty; both data and models remain in the Netherlands in our private cloud, or on-premise within the organization itself”. The platform page carries NL/EU, Docker, Kubernetes, On-Prem, Deploy Anywhere and Zero Lock-in badges, and the product pages state that data is always processed securely and in a compliant manner. Data is stored and sent securely encrypted, and Avendar says its own employees have no access to it. Two limits are worth noting. No hosting provider, datacentre region or ISO 27001 certificate is published, so the jurisdiction claim rests on the vendor's statements. And the published privacy policy applies to the marketing website only; it allows transfers outside the EEA under standard contractual clauses or an adequacy decision, which says nothing about where the delivered platform runs. The website's own IP address, an Amazon anycast node geolocated in the United States, likewise describes the marketing site, not the platform.
Things to keep in mind
Risks and trade-offs to weigh before adopting Avendar.
- High-stakes domain: a wrong prioritization can delay a decisive tip, or push an irrelevant one to the top of the pile
- False positives land on real people: a SUSPICIOUS flag on a subsidy application or a transaction concerns an identifiable individual, and Avendar's own JADS bootcamp page names privacy, bias, false positives and legal robustness among the risks
- Possible model bias against certain populations or neighbourhoods, in a policing or administrative screening context
- Automation dependency: an investigator can stop exercising judgement on findings that are simply validated one after another
- Contractual opacity: with no published terms, data ownership, warranties and liability can only be checked in the contract, nothing public covers training on customer data or an opt-out, and no subprocessor is named
- Particularly sensitive data is processed, including criminal investigations, public tips and bank statements, so the impact of an incident would be severe, while the claimed compliance is backed by no published audit report or ISO 27001 certificate
- Young and small vendor: continuity is a genuine consideration for a long-term public contract
Setup & Integrations
Technical difficulty
High, and it is a project rather than an installation. There is no self-service: no account, no sign-up, no download. The platform is deployed on-premise or in a private cloud as Docker and Kubernetes containers, which is infrastructure work for the customer, plus integration with internal systems where APIs exist (Common Ground principles) and access configuration through RBAC and, optionally, an existing SSO. Avendar says it handles part of this with on-site support and specialists for analysis, compliance reporting and DPIA. No public documentation, installation guide or implementation timeline is published, so the real effort cannot be estimated in advance.
Deployment
Behind Avendar
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
What is Avendar?
Which applications does the Avendar platform include?
Who uses Avendar?
How much does Avendar cost?
Is there a free trial or a free plan?
Where is the data hosted?
Is the platform GDPR compliant?
Does Avendar train its models on customer data?
Is there an API or a mobile app?
How do I report a security vulnerability?
Should you pick Avendar?
Avendar is an openly narrow tool: one platform, two applications, one sector and, so far, one reference country. Caselink turns hundreds of public tips into a ranked, mapped case file for criminal investigations, while Integrity structures permit and subsidy applications around the official Dutch Bibob form. What is really being sold is less the model than the frame around it: sovereignty, explainability, a non-editable audit trail, ISO 27001 and EU AI Act compliance, with data and models kept in the Netherlands, on-premise or in a European private cloud.
For a company that only started in early 2025, the public references are unusually solid, from the Dutch National Police to the municipalities of Amsterdam and The Hague and the Ministry of Justice and Security, and the trajectory is favourable: EUR 2.2 million raised in May 2026 and the Gerard & Anton Philips Award in July 2026.
The counterweight is commercial and legal opacity. There is no published pricing, no terms and conditions and no legal notice, and the only legal document online is a privacy policy covering the marketing website, not the delivered platform. Nothing is stated in writing about training models on customer data or about an opt-out, and no subprocessor is named. Evaluation cannot be self-served either: no free trial and no sandbox, only a 30-minute demo by appointment.
Avendar is worth the detour for a European public organization that handles tips, permits, subsidies or fraud and needs an auditable system it can run on its own infrastructure. Before committing, ask the contract for what the site does not say: data ownership, model training and any opt-out, the named list of subprocessors, the ISO 27001 certificate and audit report, implementation timelines, and continuity guarantees proportionate to a young supplier on a long public contract.
- Choosing a selection results in a full page refresh.
- Opens in a new window.