Settings

Account · Company · Security · Payments · Integrations

Profile

Your details as a user — separate from the company.

The username cannot be changed once the account exists.
Changing a role requires action by the company owner

Company details

Collecting your company details was deferred at sign-up. Fill in what you need. You can edit or remove it later.

ECHA requires the full legal name for notifications.
Format: country code plus digits (e.g. NL123456789B01).
The emergency number printed on the safety data sheet (section 1.4).

2FA — two-factor authentication

Apps such as Google Authenticator, 1Password or Authy.

Checking 2FA status…
Your 2FA secret is encrypted to banking standards — nobody sees it, including us.

ECHA Submission Portal

Your Legal Entity and S2S keys for the connection to ECHA. You enter them once approval comes back from the ECHA Helpdesk (5–10 working days). Production submission is currently switched off — you file the notification from your own ECHA account.

Format: ECHA-aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee. You will find it in ECHA Industry Account → My Legal Entities.
The public OAuth2 identifier — safe to store.
Platform ECHA environment — ChemReady sets the ECHA environment for the whole platform — it cannot be changed here. A run in the test environment is not a PCN notification. You file the notification yourself in the ECHA Submission portal.
The OAuth2 secret. Encrypted to banking standards — we will not show it again after saving. Leave the field empty if you are not changing it.

Team

Invite users to your company. Only the owner can invite new people. Pass the temporary password on directly (by SMS or phone) — the user should change it at their first sign-in.

Enter any password. Pass it to the user directly — the system will not e-mail it.

Plan and payment

Your plan, invoices, payment method and cancellation are all managed on the Billing page. That is also where you open the Stripe portal to change your card, see payment history and download invoices.

API keys

Access keys for the ChemReady REST API (for example the CAS widget on your shop). The full key is shown once — store it somewhere safe.

Danger zone

These actions cannot be undone. GDPR /me/delete anonymises the account but keeps the regulatory audit log.

Export my data (GDPR)
A JSON dump of your personal data plus the last 1000 audit-log entries.
Delete account
Soft delete plus PII anonymisation. The audit log is NOT deleted (regulatory retention). Requires confirmation yes-delete-my-account.