Security & compliance
Trust is your business. And ours.
Health data, policies, commissions: you manage sensitive information. That's why security isn't an add-on for us – it's standard equipment.
Hosted in Switzerland
Application, database and documents live at Infomaniak in Swiss data centres. No storage with US hyperscalers, sub-processors listed transparently.
Infomaniak · Schweiz / Switzerland
Data protection under the FADP
- Data processing agreement and record of processing activities
- Health data flagged as sensitive and protected
- Separate read and change logs, retained for at least one year
- Access requests, export and deletion with retention periods
- No structured field for clients' social-security numbers
Supervision and industry
- Tied/independent status, FINMA and VBV registers per person
- Recertification, training and professional liability with expiry warnings
- Art. 45 ISA disclosure, versioned with proof of delivery
- Advice records and checks under the health-insurance industry agreement
- Support for the annual FINMA reporting
Technical security
- Two-factor sign-in, mandatory for everyone if you wish
- Roles and permissions with data-access levels (own, team, company)
- Four-eyes approvals for sensitive operations
- Encrypted transport, daily backups
- Protection against brute force and privilege escalation
The software supports compliance with legal obligations; responsibility remains with your company. Certifications will only be listed here once obtained.
Compliance that happens in the workflow – not afterwards.
Obligations under the ISA, ISO, the health-insurance industry agreement and the FADP are built into the workflows. What has to be documented is documented as you work.
See it for yourself.
30 minutes, your workflows, your questions. We show the system live with sample data – no obligation.