SecretSafe
FR Français

Changelog

Every change to a vendor record, with the field, old and new value and the source. Subscribe via RSS. RSS feed

17 October 2026: full re-verification of every field against vendors’ own primary pages (trust centers, DPAs, sub-processor lists, security pages). Corrections below. Earlier wording is shown as it was published (English).

2026-10-17 · 119 fields corrected

ProfileFieldTypeBeforeAfter
Clio (Duo / Work)Art. 321 SCC auxiliary termsScore change not disclosed
not disclosed
 2/3
Mutual confidentiality clause (Terms s.4.1); no auxiliary-person (Art. 321 SCC) term found
Source
Clio (Duo / Work)No training on customer dataScore change 3/3
Data never used to train AI models
 2/3
No training of generalised LLMs on confidential information, but Terms allow de-identified, aggregated content and outputs to improve Clio's AI services
Source
CoCounsel (Thomson Reuters)Art. 321 SCC auxiliary termsScore change not disclosed
not disclosed
 2/3
General confidentiality: Data Security Addendum commits to protect confidentiality of customer data; DPA binds staff to confidentiality; no auxiliary-person term
Source
CoCounsel (Thomson Reuters)revFADP / GDPR processing agreementScore change not disclosed
not disclosed
 2/3
Public Thomson Reuters DPA v3 (effective 1 Feb 2025; GDPR/CCPA) with Swiss-U.S. DPF; FADP not named
Source
CoCounsel (Thomson Reuters)ISO 27001 / SOC 2Score change not disclosed
not disclosed
 3/3
Thomson Reuters ISO/IEC 27001:2022 certificate (CERT-002113, valid to 2028-10-05) lists CoCounsel Essentials (Core, Drafting, Knowledge Search) in scope; CoCounsel Legal not named in scope
Source
DeepJudgeArt. 321 SCC auxiliary termsScore change not disclosed
not disclosed
 2/3
Mutual confidentiality clause in Terms of Service; no auxiliary-person (Art. 321 SCC) term found
Source
DeepJudgerevFADP / GDPR processing agreementScore change not disclosed
not disclosed
 3/3
Public DPA incorporated into the terms; names the Swiss Federal Data Protection Act (definitions still cite the 1992 Act)
Source
HarveyArt. 321 SCC auxiliary termsScore change not disclosed
not disclosed
 2/3
Mutual confidentiality clause (Terms s.11.6); no auxiliary-person (Art. 321 SCC) term found
Source
JurataISO 27001 / SOC 2Score change not disclosed
not disclosed
 1/3
Runs on Microsoft Azure (ISO 27001, SOC 2 Type 2); own ISO 27001 underway, completion stated for Q4 2026
Source
Legora (incl. former Leya)Art. 321 SCC auxiliary termsScore change not disclosed
not disclosed
 2/3
Confidentiality clause covering Subscriber Content, surviving indefinitely (EU GTC cl. 7); DPA acknowledges law-firm confidentiality rules; no auxiliary-person term
Source
Lexis+ AI / ProtégéData storageScore change not disclosed
not disclosed
 2/3
AWS hosting in several regions incl. France, Germany, Ireland, UK; "local data hosting" stated for Europe incl. UK; region assigned to Swiss customers not stated
Source
Lexis+ AI / ProtégéWhere the AI runs / sub-processorsScore change 2/3
Language models process data in local region (Europe incl. UK)
 1/3
Product page: models process data in the local region (Europe incl. UK); global sub-processor list shows Anthropic (USA), OpenAI (USA) and Google (Global) for Lexis+ AI file uploads
Source
Lexis+ AI / ProtégéUS Cloud Act exposureScore change not disclosed
not disclosed
 1/3
RELX group (UK parent) on AWS and US AI providers; US affiliates (RELX Inc.) listed for data-centre operations
Source
Lexis+ AI / ProtégéArt. 321 SCC auxiliary termsScore change not disclosed
not disclosed
 2/3
General confidentiality claim for client and firm work; DPA requires confidentiality of authorised staff; no auxiliary-person term
Source
Lexis+ AI / ProtégérevFADP / GDPR processing agreementScore change not disclosed
not disclosed
 3/3
Public LexisNexis DPA with Swiss transfer terms: GDPR references read as the FADP, FDPIC as authority
Source
LuminanceArt. 321 SCC auxiliary termsScore change not disclosed
not disclosed
 2/3
Mutual confidentiality clause (Master Agreement cl. 13); no auxiliary-person term
Source
LuminancerevFADP / GDPR processing agreementScore change not disclosed
not disclosed
 2/3
Public DPA (GDPR, Art. 28) incorporated into the Master Agreement; Swiss-U.S. DPF certification; FADP not named
Source
Microsoft 365 CopilotArt. 321 SCC auxiliary termsScore change not disclosed
not disclosed
 2/3
General contractual commitment: data used only as the customer instructs (DPA/Product Terms); no auxiliary-person term
Source
Microsoft 365 CopilotrevFADP / GDPR processing agreementScore change not disclosed
not disclosed
 3/3
Covered by the public Microsoft Products and Services DPA (Microsoft as processor); a Switzerland amendment applies the DPA to the FADP once accepted
Source
Microsoft 365 CopilotISO 27001 / SOC 2Score change not disclosed
not disclosed
 3/3
Microsoft Copilot lists ISO 27001 and ISO 42001 among its certifications; Microsoft 365 ISO 27001:2022 certificate (2024-2027)
Source
OmnilexArt. 321 SCC auxiliary termsScore change not disclosed
not disclosed
 3/3
States it acts as the firm's auxiliary person (Art. 101 CO), bound by Art. 321 SCC; confidentiality covered in licence agreement (agreement not public)
Source
OmnilexNo training on customer dataScore change not disclosed
not disclosed
 3/3
Training on customer data excluded by contract
Source
RechtsKIArt. 321 SCC auxiliary termsScore change not disclosed
not disclosed
 2/3
General confidentiality: staff confidentiality commitments in TOMs; no auxiliary-person (Art. 321 SCC) term found
Source
RechtsKIrevFADP / GDPR processing agreementScore change not disclosed
not disclosed
 2/3
DPA under FADP/GDPR offered "if necessary" per GTC; DPAs with own sub-processors per Art. 9 nDSG; customer DPA not published
Source
RechtsKINo training on customer dataScore change not disclosed
not disclosed
 3/3
No AI training with customer data; Azure OpenAI contractually excludes training on customer data
Source
RechtsKIISO 27001 / SOC 2Score change not disclosed
not disclosed
 1/3
Infrastructure only: Safe Swiss Cloud ISO 27001; Azure/Firebase certifications listed; no own certification stated
Source
SilexArt. 321 SCC auxiliary termsScore change not disclosed
not disclosed
 2/3
Contractual confidentiality expressly covering information protected by Art. 321 SCC and the LLCA, extended to staff and sub-processors; no auxiliary-person status term
Source
SilexrevFADP / GDPR processing agreementScore change not disclosed
not disclosed
 2/3
DPA agreed with customers (referenced in CGU, sub-processors in its Annex A); acts as processor under the DSG; DPA not public
Source
SpellbookArt. 321 SCC auxiliary termsScore change not disclosed
not disclosed
 2/3
Terms acknowledge lawyer-client privilege and treat customer data as Confidential Information; no Swiss auxiliary-person term
Source
SpellbookrevFADP / GDPR processing agreementScore change not disclosed
not disclosed
 2/3
Processing terms built into the Terms of Service (sub-processors listed in trust center); GDPR listed in trust center; no standalone customer DPA or FADP reference found
Source
Swisslex AIArt. 321 SCC auxiliary termsScore change not disclosed
not disclosed
 2/3
General confidentiality (staff confidentiality agreements); AGB s.7 tells users not to enter client data unless a function is intended for it; no auxiliary-person term
Source
Weblaw Lawsearch AIData storageScore change not disclosed
not disclosed
 3/3
Lawsearch Enterprise AI: Swiss cloud or the firm's own servers (on-premises)
Source
Weblaw Lawsearch AIWhere the AI runs / sub-processorsScore change 1/3
Secured Azure environment using the OpenAI API; region not stated
 2/3
Default: OpenAI frontier models hosted on Microsoft Azure in Switzerland; customer may choose other models, incl. Swiss AI (Lawsearch Enterprise AI, per 28.09.2026 announcement)
Source
Weblaw Lawsearch AIUS Cloud Act exposureScore change 1/3
Azure + OpenAI API (US parents) unless locally operated
 2/3
Swiss vendor; default AI on Microsoft Azure Switzerland (US parent); Swiss cloud, Swiss models or on-premises selectable
Source
SilexUS Cloud Act exposureSource updated 2/3
Storage Swiss-owned; compute on Microsoft (US parent)
 2/3
Data at rest on Swiss-owned Infomaniak; inference on Azure Switzerland North; vendor acknowledges residual CLOUD Act exposure during in-memory inference, Swiss GPUs planned for 2027
Source
Swisslex AIrevFADP / GDPR processing agreementWording corrected not disclosed
not disclosed
 not disclosed
not disclosed
Weblaw Lawsearch AINo training on customer dataWording corrected not disclosed
not disclosed
 not disclosed
not disclosed
Clio (Duo / Work)revFADP / GDPR processing agreementScore change not disclosed
not disclosed
 2/3
Themis Data Processing Addendum; GDPR compliance stated
Source
Clio (Duo / Work)ISO 27001 / SOC 2Score change not disclosed
not disclosed
 3/3
Annual SOC 2 Type II and SOC 1 Type II
Source
CoCounsel (Thomson Reuters)Where the AI runs / sub-processorsScore change 1/3
Zero-retention third-party LLM APIs
 0/3
OpenAI GPT and Google Gemini interactions processed in the U.S.
Source
CoCounsel (Thomson Reuters)US Cloud Act exposureScore change not disclosed
not disclosed
 0/3
US processing by US providers
Source
JuratarevFADP / GDPR processing agreementScore change not disclosed
not disclosed
 2/3
DPA under Art. 9 DSG / Art. 28 GDPR concluded with customers (per opinion); DPA not public
Source
JurataISO 27001 / SOC 2Score change 0/3
No ISO 27001/SOC 2 stated
 not disclosed
Runs on Microsoft Azure (ISO 27001, SOC 2 Type 2); own ISO 27001 underway, completion stated for Q4 2026
KetlArt. 321 SCC auxiliary termsScore change not disclosed
not disclosed
 2/3
Claims Art. 321 SCC compliance 'built into technical architecture'; no contractual auxiliary-person term found
Source
Lexis+ AI / ProtégéData storageScore change 2/3
Local Europe (incl. UK) region for UK offering
 not disclosed
AWS hosting in several regions incl. France, Germany, Ireland, UK; "local data hosting" stated for Europe incl. UK; region assigned to Swiss customers not stated
Lexis+ AI / ProtégéWhere the AI runs / sub-processorsScore change not disclosed
not disclosed
 2/3
Product page: models process data in the local region (Europe incl. UK); global sub-processor list shows Anthropic (USA), OpenAI (USA) and Google (Global) for Lexis+ AI file uploads
Source
Lexis+ AI / ProtégéISO 27001 / SOC 2Score change 2/3
SOC 2 Type 2 (UK page); ISO 27001 claimed
 3/3
SOC 2 Type 2 and ISO/IEC 27001 listed
Source
LuminanceWhere the AI runs / sub-processorsScore change 1/3
Core models in-house; generative features may use Azure or Google Cloud
 2/3
Core: not sent to external model provider; optional generative features via Azure/Google/OpenAI, location set by customer
Source
OmnilexrevFADP / GDPR processing agreementScore change not disclosed
not disclosed
 2/3
DPA template included in licence agreement (Trust Center)
Source
OmnilexNo training on customer dataScore change 3/3
No training on client data
 not disclosed
Training on customer data excluded by contract
SilexWhere the AI runs / sub-processorsScore change 2/3
Azure Switzerland North, ephemeral processing
 3/3
Self-hosted LLMs on Azure Switzerland North (ephemeral); no data sent to external AI providers
Source
SilexNo training on customer dataScore change not disclosed
not disclosed
 3/3
User data never trains or fine-tunes the models
Source
Swiss-NoxtuarevFADP / GDPR processing agreementScore change not disclosed
not disclosed
 3/3
Acts as Auftragsbearbeiter under DSG and GDPR; processing terms in AGB
Source
Swiss-NoxtuaNo training on customer dataScore change not disclosed
not disclosed
 3/3
Inputs used only to fulfil the request, not for training
Source
Swiss-NoxtuaISO 27001 / SOC 2Score change not disclosed
not disclosed
 2/3
ISO 27001, 27017, 27018, 42001, BSI C5 listed for Noxtua (technology partner), not the Swiss entity
Source
Weblaw Lawsearch AIData storageScore change 3/3
Swiss cloud or on-premises
 not disclosed
Lawsearch Enterprise AI: Swiss cloud or the firm's own servers (on-premises)
Source
Weblaw Lawsearch AIWhere the AI runs / sub-processorsScore change 2/3
Swiss-hosted Azure; configurable models
 1/3
Default: OpenAI frontier models hosted on Microsoft Azure in Switzerland; customer may choose other models, incl. Swiss AI (Lawsearch Enterprise AI, per 28.09.2026 announcement)
Source
Weblaw Lawsearch AIUS Cloud Act exposureScore change 2/3
Inference on Microsoft Azure (US parent) unless on-premises
 1/3
Swiss vendor; default AI on Microsoft Azure Switzerland (US parent); Swiss cloud, Swiss models or on-premises selectable
Source
Weblaw Lawsearch AINo training on customer dataScore change 3/3
No use of client data for training
 not disclosed
not disclosed
CASUSData storageWording corrected 3/3
Switzerland (Google Cloud Zurich europe-west6)
 3/3
Switzerland (Google Cloud Zurich, europe-west6)
Source
CASUSWhere the AI runs / sub-processorsWording corrected 2/3
CH + EU: Vertex AI Belgium; Azure OpenAI Switzerland North & Sweden Central; zero data retention
 2/3
CH + EU only: Google Vertex AI Belgium; Azure OpenAI Switzerland North & Sweden Central; zero data retention; no US inference
Source
CASUSUS Cloud Act exposureWording corrected 1/3
Swiss vendor; storage and inference on US-parent hyperscalers (Google, Microsoft)
 1/3
Swiss vendor, but storage and inference run on US-parent hyperscalers (Google, Microsoft)
Source
CASUSArt. 321 SCC auxiliary termsWording corrected 3/3
States it acts as auxiliary person (Hilfsperson); attorney-client privilege statement in Trust Center
 3/3
Terms of Service recognise CASUS and staff as auxiliary persons (Art. 321 SCC); Hilfsperson status listed as contractual commitment
Source
CASUSrevFADP / GDPR processing agreementWording corrected 3/3
DPA published in Trust Center; claims revDSG compliance
 3/3
DPA listed in Trust Center; states revFADP compliance
Source
CASUSNo training on customer dataWording corrected 3/3
No training, contractual, incl. model providers
 3/3
No training or fine-tuning, by CASUS or model providers (contractual)
Source
CASUSISO 27001 / SOC 2Wording corrected 1/3
Infrastructure ISO 27001 (Google/Azure); no own certification stated
 1/3
Infrastructure (Google Cloud, Azure) ISO 27001; no own certification stated
Source
Clio (Duo / Work)Data storageWording corrected 2/3
Account's chosen region
 2/3
Hosting choice incl. Europe (AWS EU)
Source
Clio (Duo / Work)Where the AI runs / sub-processorsWording corrected 1/3
Azure OpenAI; may temporarily process outside account region
 1/3
AI processed in customer's region per Clio; AI subprocessors AWS Bedrock, OpenAI, Google, Azure (US/EU) but Anthropic listed US-only
Source
Clio (Duo / Work)US Cloud Act exposureWording corrected 1/3
Microsoft (US parent) AI subprocessor
 1/3
Canadian vendor; US-parent AI and hosting subprocessors
Source
Clio (Duo / Work)No training on customer dataWording corrected 3/3
Not used to train external models
 3/3
No training of generalised LLMs on confidential information, but Terms allow de-identified, aggregated content and outputs to improve Clio's AI services
Source
CoCounsel (Thomson Reuters)Data storageWording corrected 0/3
US standard; UK, Australia, Canada regions; no EU region found
 0/3
US standard; region-based hosting in UK, Australia, Canada; no EU region stated
Source
CoCounsel (Thomson Reuters)No training on customer dataWording corrected 3/3
No training by TR or third-party LLMs
 3/3
Not used to train CoCounsel or LLMs, not stored by OpenAI/Google
Source
DeepJudgeData storageWording corrected 3/3
Customer-selectable; cloud, private cloud or on-prem
 3/3
Choice of DeepJudge cloud, customer cloud or on-premises
Source
DeepJudgeWhere the AI runs / sub-processorsSource updated 2/3
Azure OpenAI in Switzerland in CMS Switzerland deployment
 2/3
Choice of AI model and residency; default not stated
Source
DeepJudgeUS Cloud Act exposureWording corrected 2/3
Azure (US parent) in cloud setups; on-prem option
 2/3
Depends on deployment; on-prem option available
Source
DeepJudgeISO 27001 / SOC 2Wording corrected 3/3
ISO 27001
 3/3
SOC 2 Type II and ISO 27001
Source
HarveyWhere the AI runs / sub-processorsWording corrected 2/3
EU/CH processing option incl. subprocessors; Anthropic listed US-only (footnote)
 2/3
EU/CH processing option applies to subprocessors; Anthropic listed US-only (may be reached via Bedrock/Vertex)
Source
HarveyUS Cloud Act exposureWording corrected 0/3
US company (Harvey AI Corp); US subprocessors
 0/3
US vendor (Harvey AI Corp) and US subprocessors
Source
HarveyrevFADP / GDPR processing agreementWording corrected 2/3
Security Addendum; Swiss-US DPF certified
 2/3
Security Addendum; Swiss-U.S. DPF certified
Source
HarveyNo training on customer dataWording corrected 3/3
No training, ZDR required of model providers
 3/3
No training, contractual; ZDR required of model providers
Source
JurataData storageWording corrected 3/3
Azure Switzerland North
 3/3
Switzerland, Microsoft Azure Switzerland North
Source
JurataWhere the AI runs / sub-processorsWording corrected 2/3
Switzerland or EU
 2/3
Switzerland and EU (Azure), never in the USA; zero data retention at LLM provider
Source
JurataUS Cloud Act exposureWording corrected 1/3
Hosted on Microsoft (US parent)
 1/3
Swiss vendor hosted on Microsoft (US parent)
Source
JurataArt. 321 SCC auxiliary termsWording corrected 3/3
External law-firm opinion (11 Aug 2026): usable as Hilfsperson with contractual secrecy incl. Microsoft
 3/3
Jurata engaged as Hilfsperson under Art. 321 StGB and expressly acknowledges secrecy (Walder Wyss opinion, 11 Aug 2026)
Source
JurataNo training on customer dataWording corrected 3/3
No training on client data
 3/3
No use of data for training
Source
KetlData storageWording corrected 3/3
Switzerland (Geneva/Zurich datacentres)
 3/3
Swiss datacentres in Geneva and Zurich, operated by Swiss companies
Source
KetlWhere the AI runs / sub-processorsSource updated 3/3
Switzerland; own models, no third-party US LLM
 3/3
Proprietary models developed, trained and hosted in Switzerland; no third-party LLM
Source
KetlUS Cloud Act exposureWording corrected 3/3
Swiss company, Swiss infrastructure (Exoscale, Infomaniak) per vendor
 3/3
Swiss vendor; Swiss infrastructure (Exoscale, Infomaniak) per vendor
Source
KetlISO 27001 / SOC 2Wording corrected 1/3
Vendor certification not disclosed; host Infomaniak is ISO 27001
 1/3
No vendor certification stated; host Infomaniak is ISO 27001
Source
Legora (incl. former Leya)Data storageWording corrected 2/3
EU/EEA (Azure)
 2/3
EU/EEA region (Microsoft Ireland hosting) selectable
Source
Legora (incl. former Leya)Where the AI runs / sub-processorsWording corrected 2/3
EU/EEA subprocessors incl. OpenAI Ireland; outside EU needs consent
 2/3
EU/EEA subprocessors incl. Microsoft and OpenAI Ireland; processing outside EU needs consent
Source
Legora (incl. former Leya)No training on customer dataWording corrected 3/3
No training or fine-tuning
 3/3
Will not use data to train or fine-tune any AI models
Source
Legora (incl. former Leya)ISO 27001 / SOC 2Wording corrected 3/3
ISO 27001:2022; SOC 2 Type 2 claimed
 3/3
ISO/IEC 27001:2022 (audited yearly); SOC 2 requirements claimed
Source
Lexis+ AI / ProtégéNo training on customer dataSource updated 3/3
Not used to train or fine-tune; providers contractually prohibited
 3/3
Does not train or fine-tune AI models on customer data
Source
LuminanceData storageWording corrected 2/3
Customer-selected AWS region
 2/3
Customer-selected AWS region, backups in same region
Source
LuminanceUS Cloud Act exposureWording corrected 1/3
AWS/Azure/Google (US parents)
 1/3
UK vendor on AWS; optional US-parent AI providers
Source
LuminanceNo training on customer dataWording corrected 2/3
De-identified usage insights may improve product; not confidential data
 2/3
Licence to use customer data for product improvement/private learning; usage insights exclude confidential info
Source
LuminanceISO 27001 / SOC 2Wording corrected 3/3
ISO/IEC 27001:2022
 3/3
ISO/IEC 27001 (certificate on request)
Source
Microsoft 365 CopilotWhere the AI runs / sub-processorsWording corrected 1/3
EU Data Boundary; flex routing can send data outside unless disabled
 1/3
EU Data Boundary; flex routing can process outside (US, CA, AU) unless disabled
Source
Microsoft 365 CopilotUS Cloud Act exposureWording corrected 0/3
US company
 0/3
US vendor
Source
Microsoft 365 CopilotNo training on customer dataWording corrected 3/3
Prompts/responses not used to train foundation LLMs
 3/3
Prompts, responses and Graph data not used to train foundation LLMs
Source
OmnilexData storageSource updated 3/3
Microsoft Azure Zurich
 3/3
Microsoft Azure, Zurich
Source
OmnilexWhere the AI runs / sub-processorsSource updated 2/3
Switzerland plus selected EU countries
 2/3
Switzerland and selected EU countries recognised by FDPIC
Source
OmnilexUS Cloud Act exposureSource updated 1/3
Hosted on Microsoft (US parent)
 1/3
Swiss vendor hosted on Microsoft (US parent)
Source
RechtsKIData storageWording corrected 3/3
Switzerland only (Safe Swiss Cloud)
 3/3
Exclusively in Switzerland (Safe Swiss Cloud)
Source
RechtsKIWhere the AI runs / sub-processorsWording corrected 2/3
Azure Switzerland North by default; Swiss LLM mode selectable
 2/3
Default: Microsoft Azure Switzerland North; Swiss LLM mode selectable per request
Source
RechtsKIUS Cloud Act exposureWording corrected 2/3
Default inference on Microsoft (US parent); Swiss-only mode available
 2/3
Default inference on Microsoft (US parent); Swiss-only mode optional
Source
SilexData storageWording corrected 3/3
Infomaniak, Geneva (Swiss-owned), incl. backups
 3/3
Infomaniak, Geneva (Swiss-owned), incl. backups; no client data stored on Azure
Source
SilexUS Cloud Act exposureWording corrected 2/3
Storage Swiss-owned; inference on Microsoft (US parent)
 2/3
Data at rest on Swiss-owned Infomaniak; inference on Azure Switzerland North; vendor acknowledges residual CLOUD Act exposure during in-memory inference, Swiss GPUs planned for 2027
Source
SilexISO 27001 / SOC 2Wording corrected 1/3
ISO 27001 targeted for Q3 2026 (not yet confirmed)
 1/3
ISO 27001 in progress, targeted Q3 2026 (not yet certified per page)
Source
SpellbookNo training on customer dataWording corrected 3/3
No training by LLM providers (contractual)
 3/3
Third-party LLMs contractually barred from training on customer data
Source
Swiss-NoxtuaData storageWording corrected 3/3
Swiss T Cloud (T-Systems Switzerland)
 3/3
Swiss T Cloud Public (T-Systems Schweiz AG, Zollikofen)
Source
Swiss-NoxtuaWhere the AI runs / sub-processorsWording corrected 2/3
Default model in Switzerland; optional 'Minerva' may process in EU or CH
 2/3
Default Athena model processed in Switzerland; optional 'Minerva' routes to frontier models in EU or CH via named subprocessors
Source
Swiss-NoxtuaUS Cloud Act exposureWording corrected 3/3
Deutsche Telekom/T-Systems infrastructure (non-US) per vendor
 3/3
Default stack independent of US hyperscalers per vendor; Minerva option may use other providers
Source
Swiss-NoxtuaArt. 321 SCC auxiliary termsWording corrected 3/3
States it acts as Hilfsperson under Art. 321 StGB; terms bind subprocessors
 3/3
Terms bind provider, staff and subprocessors as Hilfspersonen under Art. 321 StGB
Source
Swisslex AIData storageWording corrected 3/3
Dedicated servers in Swiss data centres
 3/3
Dedicated servers in Swiss data centres, accessible only to Swisslex
Source
Swisslex AIWhere the AI runs / sub-processorsWording corrected 3/3
Own servers in Switzerland, adapted open-source models; no data exchanged with AI providers
 3/3
Own servers in Switzerland, adapted open-source models; no data exchange with AI manufacturers
Source
Swisslex AIUS Cloud Act exposureWording corrected 3/3
No external AI provider per vendor
 3/3
Swiss vendor; no external AI provider per vendor
Source
Swisslex AINo training on customer dataWording corrected 3/3
User data not used to train AI models
 3/3
No training of AI models with user data
Source