diff --git a/backend/zetikettes/tikette/views.py b/backend/zetikettes/tikette/views.py
index 840a033..c3ac205 100644
--- a/backend/zetikettes/tikette/views.py
+++ b/backend/zetikettes/tikette/views.py
@@ -50,6 +50,14 @@ def quirk_bold_allergens(ingredients):
     return ", ".join(out)
 
 
+def handler403(request, exception):
+    return JsonResponse({'status': 'notok', 'message': 'permission denied'}, status=403)
+
+
+def handler404(request, exception):
+    return JsonResponse({'status': 'notok', 'message': 'endpoint not found'}, status=404)
+
+
 @auth_only
 @ensure_csrf_cookie
 def get_list(request):
diff --git a/backend/zetikettes/zetikettes/urls.py b/backend/zetikettes/zetikettes/urls.py
index 2e4e1b3..28eb906 100644
--- a/backend/zetikettes/zetikettes/urls.py
+++ b/backend/zetikettes/zetikettes/urls.py
@@ -33,3 +33,6 @@ urlpatterns = [
     path('signin', tikette.views.signin),
     path('signout', tikette.views.signout),
 ] + static(settings.MEDIA_URL, document_root=settings.MEDIA_ROOT)
+
+handler403 = 'tikette.views.handler403'
+handler404 = 'tikette.views.handler404'