Subprocessors
We use the services of the following companies
Infomaniak Network SA
Rue Eugène Marziano 25
1227 Geneva
Switzerland
CH-660.0.059.996-1
Purpose
Secure hosting of our cloud solutions, object storage and encrypted offsite backup (“Swiss Backup”), as well as Infomaniak AI/LLM services as an alternative to our self-operated ExeoAI solutions.
Location of processing
Data centres in Switzerland.
Evidence
ISO 27001 / ISO 14001 certified; security documentation (PAS, SoA) available via Infomaniak’s Trust Center.
Akenes SA (Exoscale)
Boulevard de Grancy 19A
1006 Lausanne
Switzerland
CHE-423.524.322
Purpose
Secure hosting of our cloud solutions, object storage and encrypted offsite backup — as a second Swiss cloud provider alongside Infomaniak, depending on project requirements.
Location of processing
Data centres in Switzerland (Zurich and Geneva zones).
Evidence
ISO/IEC 27001, 27017 and 27018 certified, SOC 2 Type II, BSI C5 and CSA STAR; data processing agreement (DPA) under the FADP and GDPR, audit reports available through Exoscale’s Compliance Center.
Hostpoint AG
Neue Jonastrasse 60
8640 Rapperswil-Jona
Switzerland
CHE-101.974.997
Purpose
Web hosting for simple web projects, email hosting and delivery, and management of domains registered by us.
Location of processing
Data centres in Switzerland
Personal data
Email communication data (sender/recipient, content during transmission).
Microsoft Schweiz GmbH
The Circle
PO Box
8058 Zurich Airport
Purpose: Internal business operations
Internal communication, support correspondence and data storage via Microsoft 365 (Exchange Online, OneDrive). This may involve processing personal data of our customers (e.g. in support emails or stored documents).
Purpose: Optional, selectable in our solutions
AI/LLM services (e.g. GPT via Azure OpenAI) as an alternative to our self-operated ExeoAI solutions.
Location of processing / safeguards
Processing takes place in Swiss or European data centres where possible. As part of the Microsoft Group, Microsoft is also subject to US law; compliance with data protection requirements is ensured through the Microsoft Data Protection Addendum and the EU Standard Contractual Clauses (SCCs). We limit the customer data processed in this context to what is necessary.