Technical audit · 2026-06-16

rvo.nl

Website of the Dutch Enterprise Agency

Rvo.nl is the website of the Dutch Enterprise Agency (subsidies, business support, innovation). Homepage scan: 39 requests, 4 domains. The configuration is restrained. The agency runs its web statistics on its own subdomain, on the Piwik PRO platform, and not a single cookie was set during the session. Additionally, a functional help chatbot runs. The scan shows no Google Analytics, no Facebook, no advertising, no session recording, and no third-party commercial trackers. No violations were recorded.

Timeline of the leak

1272 ms · own Piwik PRO statistics
A container for the agency's own web statistics loads, built on the Piwik PRO platform, deployed on its own subdomain. No cookie is set in the process.
1693 ms · help chatbot
The help-chatbot launcher loads. This is a functional tool for visitor questions.
cookieless statistics, no consent required
The web statistics are deployed on the agency's own subdomain, and not a single cookie was set during the session. This is consistent with an anonymized mode exempt from consent.

Declared versus actual

Piwik PRO (statistics) — заявлен
Chatbot — заявлен

Detected trackers

Context

www.rvo.nl is the website of the Dutch Enterprise Agency (Rijksdienst voor Ondernemend Nederland): subsidies, grants, support for business, innovation, and foreign trade. The data controller is RVO, a government executive agency. The site is informational and service-oriented.

Scan: 39 requests to 4 domains, homepage, captured in a clean Edge browser without a VPN or ad blocker. The technical stack is restrained.

Who receives the data

There are no third-party commercial recipients.

The agency runs its web statistics on its own subdomain, on the Piwik PRO platform. Additionally, a functional help chatbot runs. The scan shows no Google Analytics, no advertising networks, no social media pixels, and no session recording.

A full banner for the statistics is not required here: it is deployed on the agency’s own subdomain, and not a single cookie was set during the session. This is consistent with an anonymized mode exempt from consent. The chatbot is a functional help tool.

Only in-house statistics and a functional chatbot. Before any interaction, the container for the agency’s own web statistics on its own subdomain and the help-chatbot launcher load. The scan contains no Google analytics, no advertising domains, no social plugins, and no session recording.

Conclusion

Rvo.nl is a restrained configuration for a government executive agency. Web statistics run on the agency’s own subdomain and without cookies, and aside from that, only a functional help chatbot runs. There is no third-party advertising, no Google analytics, no social media pixels, and no session recording whatsoever. The key takeaway for the reader: a government agency can manage with its own statistics on its own infrastructure, and here that is achieved without a single third-party commercial tracker and without a single cookie. No violations were recorded.

Evidence
Original (audit)
HAR file: nl/rvo-nl-2026-06-16.har
SHA-256: e526cb5759ff4664f69224e30369a8dbd7ed5bd2302bc463a4d56ea16be6c7ff
HAR files are stored on EU infrastructure (Proton Drive). SHA-256 is published for integrity verification.