Privacy

The operator named in the imprint is responsible for the public website. For the data that a customer organisation processes in the portal, that organisation is the controller and the operator acts as its processor.

Privacy contact

[To be supplied by the operator]

The public pages can be read without an account. The web server records technical access data (IP address, time, requested page, browser) to run and protect the service. The website uses no analytics, no advertising and no third-party trackers. Fonts are served from this server.

Only necessary cookies are set: your language choice, the organisation address you came from and, after you sign in, your session. The light or dark theme is stored in your browser. There is no cookie banner because no optional cookies are used.

In the portal, organisations store case documents, analyses, strategies, messages and generated documents. Data is isolated per organisation in the database, access follows roles, and changes are recorded in an audit log.

The following providers process data on behalf of the operator.

• Database and authentication: Supabase, region Zürich, Switzerland.
• Application server: Hetzner, Germany. Uploaded files are stored with Hetzner in Germany or with Supabase in Zürich.
• AI processing: cloud models from Anthropic (Claude) and OpenAI. Text sent to the AI can be processed outside Switzerland and the EU. A residency rule per AI task limits which providers may be used.
• Email delivery (invitations, notifications): Resend.

Depending on the law that applies to you (Swiss FADP, EU GDPR, Brazilian LGPD), you may ask for access to your data, its correction or deletion, and you may object to processing. For data in the portal, contact the organisation that invited you first.

This notice is updated when the service or the providers change. The current version is always on this page.