The German version is binding. This translation is provided for information only.
Encrypted data residency in Zurich · Swiss key sovereignty · revDSG, GDPR and the EU AI Act · operated on infrastructure certified to ISO 27001 and SOC 2 Type II
This page describes the platform in regular operation, as it is provided to new customers.
Your data stays in Switzerland
All client, contract and document data is held encrypted in a certified data centre in Zurich, including the data the search draws on. That data is not held in the US
Swiss hardware key
The master key for particularly sensitive details is held in a hardware security module in Switzerland, outside the infrastructure of our cloud providers. It does not leave the module.
Built for particularly sensitive data
AHV numbers, health details, contract data: built for exactly the categories where other tools stop
Two laws, one standard
AI processing under applicable data protection law: the revised Swiss Data Protection Act, the European GDPR and the requirements of the EU AI Act
Provable without gaps
Every advisory step is logged in a cryptographic chain and retained for ten years. Tamper-evident, exactly the evidence your supervisory authority wants to see
Your data trains nothing
No model training, no storage and no access by staff of the AI provider — contractually assured
AI analysis in data centres in the EU, without training on your data
→
Result in the file
The result is held in Switzerland and every step remains traceable
Data location and sovereignty
Everything that is stored stays encrypted in Switzerland.
Database and primary storage in a certified Swiss data centre in Zurich
The data the search draws on is held in Switzerland as well
Audit logs in Switzerland with 10-year retention
Your data is held in Switzerland and processed in Switzerland: application, database and file storage run in Zurich. Only for the AI analysis is a document sent encrypted to data centres in the EU, contractually assured and without training on your data; the result is held in Switzerland again. Storage and analysis therefore take place exclusively in Switzerland and the EU.
Encryption
Your own digital vault. Without our release, particularly sensitive details such as AHV numbers stay unreadable.
AES-256 for all stored data, TLS 1.2+ for every connection
Field-level encryption for particularly sensitive details: AHV numbers, dates of birth, policy numbers, claims reports
Hardware-backed key management with regular rotation
Key sovereignty rests with a Swiss company, the database can be rendered cryptographically unreadable at any time
Swiss hardware key: the master key for particularly sensitive details is held in a hardware security module in Switzerland, outside the infrastructure of our cloud providers, and does not leave the module
Network security
Our database is not reachable from the open internet.
Private networking, the database is never reachable over the public internet
Private cloud connectivity, the database is not reachable over the public internet, only via a private, internal network tunnel
Network-isolated infrastructure in Switzerland
Private DNS resolution, addresses are resolved only within the internal network
A specialised protection service against denial-of-service and automated attacks sits in front of the platform. It inspects every request in memory and passes it on encrypted to the application in Zurich; it does not store any portal content.
AI with data protection
Storage is 100 % in Switzerland. The AI analyses your documents in data centres in the EU, contractually assured and without training on your data.
The AI processes. And forgets at once.
The AI reads a document only in working memory, in data centres in the EU. Nothing remains there after the analysis.
0
Storage after processing
0
Access by people at the AI provider
0
Training on your data
AI analysis exclusively in data centres in EU member states, contractually assured
No model training, no storage and no access by staff of the AI provider, contractually assured
For general market and news research the platform uses an internet search. Client and document data is not passed to the search.
Designed for revDSG, GDPR and the requirements of the EU AI Act
Every analysis stays traceable and is logged in an audit-proof manner
Access control
Every tenant is technically separated. Two-factor login is mandatory.
Multi-Factor Authentication (MFA) for all employees
Role-Based Access Control (RBAC) on the principle of least privilege
Strict tenant isolation, multi-tenant separation at the data layer
Separate service accounts with minimal permissions
Access to the encryption keys is separated from all other system access and authorised in its own right
Separate database users for app, analytics and backup
Audit and monitoring
Every access is logged, immutable for 10 years.
Hash-chain logging of all functional mutations and all accesses to particularly sensitive data (read_sensitive); additionally server-side database auditing at the infrastructure layer
Central log platform with long-term retention
Immutable, hash-chained audit trail with no deletion path, held in Switzerland
24/7 monitoring of the infrastructure
Backups and disaster recovery
Daily backups, encrypted as well, stay in Switzerland.
Continuous backups with point-in-time recovery
Backups in Switzerland, no cross-region replication outside CH/EU
Encrypted backups using the same keys as the production system
Versioned storage buckets (ransomware-resistant)
File storage
Files are never public. Upload links are valid for a maximum of 15 minutes.
Public Access Prevention enforced
Uniform access control at container level, no accidentally public files
Own encryption keys for file storage as well
Signed URLs with short validity (max. 15 minutes for uploads)
Lifecycle rules for temporary data
Access logging in a separate audit bucket
Compliance frameworks
Audited infrastructure in line with Swiss, EU and international standards.
Aligned with the revDSG (Swiss Federal Act on Data Protection)
Aligned with the GDPR
Aligned with the requirements of the EU AI Act (Regulation 2024/1689)
ISO 27001 + SOC 2 Type II, the entire server and pipeline infrastructure on which SOTHURA SAFE runs operates in data centres certified to ISO 27001 and SOC 2 Type II
FINMA Circ. 2018/3 outsourcing, aligned with the requirements for insurer clients
Access, deletion, export. Completed within 30 days.
Access, rectification and deletion within ≤ 30 days
Data portability, export of your own data possible at any time
Incident reporting to supervisory authorities and data subjects, as quickly as possible (Art. 24 nFADP); for EU-related incidents additionally within 72 hours (GDPR Art. 33)
We respond to qualified reports within three business days. Please provide a clearly described reproduction path, the affected component and — where possible — an assessment of the impact.
Safe Harbor. We will not pursue security researchers under civil or criminal law as long as (i) the report is made in good faith, (ii) only your own test accounts are used, (iii) no third-party customer data is viewed, copied or disclosed, (iv) no denial-of-service tests or social-engineering attacks against employees take place, and (v) a reasonable period for remediation is granted before public disclosure. Unauthorised penetration tests, exploitation of vulnerabilities beyond what is necessary for reporting and the harvesting of third-party data are not permitted and will be prosecuted under criminal law (Art. 143, 143bis, 144bis CC).
April 2026: Initial publication of the security page.
The formalities
SOTHURA SAFE GmbH, Wassergasse 5, 4573 Lohn-Ammannsegg, Canton of Solothurn. Registered in the commercial register of the Canton of Solothurn, UID CHE-429.131.582. Management is held by Silvio Siegenthaler and Michel Di Vito, joint signature by two. The full provider identification is set out in the legal notice.