I’d go with written confirmation or otherwise, with the relevant EU regulations quoted and linked to.