Security and Privacy Policy » History » Version 1
Nico Schottelius, 02/05/2020 09:34 AM
| 1 | 1 | Nico Schottelius | h1. Security and Privacy Policy |
|---|---|---|---|
| 2 | |||
| 3 | h2. Status |
||
| 4 | |||
| 5 | This document is **PRE PRODUCTION** |
||
| 6 | |||
| 7 | h2. Introduction |
||
| 8 | |||
| 9 | The following chapters describe our policy in regards to security and privacy concerns. |
||
| 10 | |||
| 11 | |||
| 12 | h2. Logging the necessary |
||
| 13 | |||
| 14 | Logs are taken only where necessary and kept only as long as relevant to operation procedure. |
||
| 15 | Specifically network traffic **content** is not logged. |
||
| 16 | |||
| 17 | h2. Non disclosure |
||
| 18 | |||
| 19 | No information is given to the public about our customers or customer use cases. |
||
| 20 | An exception to this is prior public information or explicit consent from the customer. |
||
| 21 | |||
| 22 | h2. Acting by Swiss law |
||
| 23 | |||
| 24 | According to Swiss laws, the **only** authority that is allowed to request network access |
||
| 25 | is the "PTSS":https://www.li.admin.ch/en . It may only request access after a Swiss court ruling and only for |
||
| 26 | cases that violate Swiss law. |
||
| 27 | |||
| 28 | h2. Access to data or network traffic from foreign entities |
||
| 29 | |||
| 30 | No access is granted. |
||
| 31 | |||
| 32 | h2. Access to data or network traffic from domestic entities |
||
| 33 | |||
| 34 | Access to our infrastructure is granted based on Swiss laws and requires a Swiss court order. |
||
| 35 | |||
| 36 | h2. Access to data or network traffic from our staff |
||
| 37 | |||
| 38 | For operational activities staff members can and will investigate network traffic to ensure the stability of our platform. |
||
| 39 | Access to customer specific data is strictly forbidden. |
||
| 40 | |||
| 41 | An exception to above rule is if the customer specifically granted permission for it. |