Art. 321 SCC and AI vendors as auxiliaries
When can a lawyer put client data into an AI tool without breaching professional secrecy? What the law says, what case law says about IT providers, and what remains open.
Guides
Short, sourced explainers for Swiss and EU lawyers. Informational only, not legal advice.
The US CLOUD Act for Swiss law firms
Why “hosted in Switzerland” does not settle the question when the provider is American, and how SecretSafe scores it.
revFADP vs GDPR: what your AI vendor’s DPA should cover
Swiss and EU processor rules side by side, cross-border transfers (including the Swiss-US DPF), and why a DPA alone does not solve professional secrecy.
EU AI Act basics for law firms
What applies now, what the 2026 Digital Omnibus postponed, and when a Swiss firm may be in scope.