Our security and compliance commitments

We apply the most modern and advanced security standards in the world. We are independent and fully hosted in Switzerland.

Trusted infrastructure

We exclusively entrust our infrastructure to Infomaniak SA, a sovereign and ethical Swiss company. No third-party provider has access to our systems; all our tools are internalized to ensure complete control of our environment.

Infomaniak datacenter in Geneva, Switzerland

Our infrastructure relies on an adaptive system that continuously adjusts to your needs to maintain optimal performance, even during the most intense activity spikes.

Compliance and certifications

All our services and data reside in Infomaniak datacenters certified Tier III+, ISO 9001, ISO 14001, ISO 27001, and ISO 50001. This Tier III+ classification guarantees 99.99% availability for the infrastructure supporting our services and applications.

We internally apply the same rigor as the ISO 27001 standard to our organization and software. Although not yet officially certified, we already align our processes and governance rules with the requirements of this international benchmark, ensuring you an equivalent level of traceability and security from today.

Your data is hosted exclusively in Switzerland, one of the strictest countries in the world regarding privacy, in full compliance with the LPD and GDPR. You can find more details on the collection, management, and protection of your personal data in our Privacy policy.

Data security

All your data is stored on our infrastructure, automatically backed up multiple times a day, and replicated across several datacenters to ensure service continuity in the event of a serious incident.

Furthermore, your data is in a custom environment accessible only from your offices and isolated from the rest of the world. Our teams use secure ZTNA access channels and policies to connect.

Your data is encrypted end-to-end, both during transit to your users and at rest on our servers. We use robust encryption algorithms, such as AES-256 and TLSv1.3, recognized for their resistance to future quantum threats.

Bank-level authentication

We have deployed the most advanced authentication protocols on the market, including Single Sign-On (SSO) via OpenID Connect (OIDC) and access keys, to eliminate the risks inherent in traditional passwords. Each session is also subject to automatic periodic renewal.

Granular permissions

You can precisely define each user's access. You control who can view, modify, or validate each resource, ensuring that everyone has only the rights necessary for their role.

Continuous monitoring

We continuously monitor our systems to proactively detect and resolve any potential issues. We also establish and maintain an audit log recording all interactions with your environment, which can be provided to you at any time upon simple request.