Do you store the VAT numbers I validate?

Data & compliance

Do you store the VAT numbers I validate?

Yes, for your own checks. Each check you run is recorded as your audit history – the result, company details, and verifiedAt timestamp – accessible via the API and dashboard for as long as your account is active, so you can prove a check happened at the time of a transaction.

What is kept and who can see it

  • The record holds the checked VAT number, the validation result, the checkId, the verifiedAt timestamp, the company enrichment fields and, if you set a requester VAT, the VIES consultation number.
  • vatnode doesn’t build an archive of third parties’ checks beyond your own audit records.
  • A check you run isn’t visible to the business you checked or to anyone else.

Retention

  • While your account is active, your check history is stored in full.
  • 5 years after the date of each check, the record is anonymised. That is our own retention period, not a statement of how long you must keep your invoices and supporting records, which each member state sets. Anonymisation removes the identifying fields: the queried VAT number, the VIES consultation number, company name and address, registry code and name, tax ID and its name, company form, registration date, any industry description, and the link to the API key that ran the check. Country code, date and validity result remain as anonymised statistics that can no longer be linked to anyone.
  • If you delete your account, the check records are de-linked from it so they can no longer be traced back to you; they are not deleted straight away because each also documents a check on a third party. Your email and name are replaced immediately and the remaining account record is deleted 30 days later.
  • Bulk validation jobs are deleted 30 days after you submit them; the underlying checks stay in your history on the schedule above.

Export and deletion

You can request an export or deletion at any time by emailing [email protected]. The privacy policy says requests are answered within 30 days. Full retention terms are in the privacy policy and DPA.

Next steps

For what to keep on your side as an audit record, see the audit-trail guide.

Related questions