Core and back-office: behind the scope line¶

The core sits deepest: the Centric and PinkRoccade back-office, burgerzaken and the financial systems, resting on the base registrations beneath. Mature and mostly not internet-facing, on the map it never appears as a host of its own.

It still leaves prints in the layers above. formulieren resolves by CNAME onto a supplier-hosted domain, which names the vendor running it. The SAML metadata behind inloggen carries an entityID that identifies the connecting service. A submitted form’s confirmation often quotes a case reference in a format particular to the back office that issued it. None of these is a front door. Together they identify which vendor runs the core and where it sits, without the core ever being a direct target.