Accessibility and security
Accessibility and vulnerability reporting
Two pages most suppliers leave empty
Accessibility statement
TresBizz BV wants nexzos.tresbizz.com to be usable by everyone, including visitors who use a screen reader, keyboard navigation or magnification. We aim at WCAG 2.2, level AA.
| Item | Where we stand |
|---|---|
| Standard applied | WCAG 2.2, level AA |
| Status | Partly compliant. The measures below are known and dated |
| Assessment | Internal review: automated test with axe-core 4.10 on all seventeen pages, in light and dark mode, on desktop and mobile widths, with zero remaining violations, plus a manual keyboard check. The external audit is still open |
| Last checked | 5 September 2026 |
| Scope | All pages of nexzos.tresbizz.com |
What is still open
- Subtitles and a transcript for the demo video are being made. Until then we send the text by email on request.
- The documents offered for download are still being fully tagged as accessible PDF.
- The external audit is planned, so this statement rests today on our own review. We will have it carried out as use of the site grows.
Run into something that keeps you out? Write to nexzos@tresbizz.com. We answer within two working days and say what we will do and when. If you still disagree with our answer, you can raise it with the supervisory authority in your own country.
Why this belongs here. We sell an operating system that falls under the European Accessibility Act, and we use that act as an argument. A site of our own with a statement removes the easiest objection a buyer could make.
Reporting a vulnerability
Found a weakness in NEXZOS or in this website? Tell us before you share it anywhere else. We work by coordinated disclosure.
How to report
Mail security@tresbizz.com with the steps to reproduce it. Encryption on request.
What we do
We confirm within two working days, keep you informed while we fix it, and tell you when it is closed.
What we ask
Give us reasonable time, work only on your own data, and leave the service running for others.
What you get
Credit in the release note if you want it. A reporter who keeps to these rules stays safe from legal action on our side.
What falls outside scope
We work with acknowledgement rather than a bug bounty or a reward. Social engineering, physical access and load tests on the live site fall outside it. If you are in doubt, ask first.
security.txt
Published at the standard location, https://nexzos.tresbizz.com/.well-known/security.txt, so both a person and an automated scanner find the channel.
| Contact | mailto:security@tresbizz.com |
| Expires | 2027-09-04T00:00:00.000Z |
| Preferred-Languages | en, nl, fr |
| Canonical | https://nexzos.tresbizz.com/.well-known/security.txt |
| Policy | https://nexzos.tresbizz.com/accessibility |
Under the Cyber Resilience Act a manufacturer of a product with digital elements is expected to operate exactly such a channel, well before the regulation applies in full on 11 December 2027.