SShortSingh.
Back to feed

How to Validate Dutch VAT Numbers in Node.js Using VIES and KVK

0
·1 views

Dutch VAT IDs (btw-id) follow a fixed 14-character format — NL plus nine digits, the letter B, and two digits — but a 2020 reform changed how sole-trader IDs are issued, breaking traditional local checksum validation. As a result, Dutch VAT validation in Node.js relies more heavily on the EU's VIES lookup service, with the KVK company register as a fallback. A common pitfall is customers submitting their private BSN-based omzetbelastingnummer instead of the public btw-id, both of which share a similar format but only the latter is valid in VIES. Developers are advised to normalise input before any network call, supporting both strict mode for API consumers and lenient mode for checkout forms that auto-corrects common formatting errors. The trailing two digits in a Dutch VAT ID are a sequence number, not a checksum, and should not be treated as verifiable check digits.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Developer adds empty-folder guard to prevent accidental full workspace deletion

A developer working on a Microsoft Fabric CI/CD pipeline discovered that deployment tools performing cleanup can delete an entire target workspace if the source folder is empty, since every target item appears as an orphan. The risk was identified during onboarding of new solutions, when folders had been created and pipelines wired up but no workspace items had yet been committed. To prevent accidental mass deletion, a pre-deployment guard function was written that aborts the process if the source directory contains no deployable items, with a descriptive error explaining what would have been deleted. An override flag, ALLOW_EMPTY_SOURCE, is available for cases where intentionally clearing a workspace is the goal. The guard was designed to run before any API or SDK calls, keeping it lightweight and independently testable without cloud dependencies installed.

0
ProgrammingDEV Community ·

Shopify Bans All Vape Product Listings Globally from 8 July 2026

Shopify issued removal notices to merchants selling electronic nicotine delivery systems on 24 June 2026, setting a deadline of 8 July 2026 for all such listings to be cleared. The ban covered devices, e-liquids, pods, disposables, coils, and accessories, regardless of whether products held FDA marketing authorisation. A spokesperson for the California Attorney General confirmed to Reuters that the policy applies globally, meaning legally compliant retailers outside the United States were also affected. Research cited in BMC Public Health found that Shopify hosted around 50% of sampled online vape stores, with 90% of those appearing to breach at least one federal rule. Merchants seeking alternatives must also navigate payment processing risks, as a coalition of attorneys general separately wrote to nine payment companies in April 2026 over vape sales.

0
ProgrammingDEV Community ·

Practical Architecture Guide for Building Secure Private AI Agents

Autonomous AI agents capable of executing multi-step tasks require a structured architecture that separates planning from permission enforcement to prevent unauthorized actions. A key principle is treating model output as a request to a policy layer, which independently decides whether each action is permitted before execution. Agents should be assigned narrow, bounded roles with scoped credentials, allow-listed tools, and explicit controls such as short-lived tokens and rate limits. Sensitive business data handling demands clear decisions about where data is stored, which model endpoints receive context, and who can inspect logs. Human approval checkpoints should be placed before high-consequence actions like sending messages, modifying production systems, or deleting data, while low-risk tasks can run automatically.

0
ProgrammingDEV Community ·

KeibiDrop Lets Investigators Browse Remote Files Without VPN or Full Disk Copy

KeibiDrop is a tool that mounts a remote computer's folder as a local read-only filesystem, allowing forensic examiners to browse, search, and selectively copy files without setting up a VPN or transferring an entire disk. Only the bytes actually accessed travel over the network, with a demo showing just 606 MB transferred out of 19.9 GB available on a remote Mac. Standard forensic tools such as KAPE work with the mount without any modification, and no kernel driver is required on the remote machine. In a test conducted in Bucharest over a shared internet connection relayed through Timisoara, file hashes matched on both sides and no metadata on the source machine was altered. The approach is intended to cut waiting time at the start of remote incident response or digital triage work.