Security and Privacy Policy » History » Version 1
Nico Schottelius, 02/05/2020 09:34 AM
1 | 1 | Nico Schottelius | h1. Security and Privacy Policy |
---|---|---|---|
2 | |||
3 | h2. Status |
||
4 | |||
5 | This document is **PRE PRODUCTION** |
||
6 | |||
7 | h2. Introduction |
||
8 | |||
9 | The following chapters describe our policy in regards to security and privacy concerns. |
||
10 | |||
11 | |||
12 | h2. Logging the necessary |
||
13 | |||
14 | Logs are taken only where necessary and kept only as long as relevant to operation procedure. |
||
15 | Specifically network traffic **content** is not logged. |
||
16 | |||
17 | h2. Non disclosure |
||
18 | |||
19 | No information is given to the public about our customers or customer use cases. |
||
20 | An exception to this is prior public information or explicit consent from the customer. |
||
21 | |||
22 | h2. Acting by Swiss law |
||
23 | |||
24 | According to Swiss laws, the **only** authority that is allowed to request network access |
||
25 | is the "PTSS":https://www.li.admin.ch/en . It may only request access after a Swiss court ruling and only for |
||
26 | cases that violate Swiss law. |
||
27 | |||
28 | h2. Access to data or network traffic from foreign entities |
||
29 | |||
30 | No access is granted. |
||
31 | |||
32 | h2. Access to data or network traffic from domestic entities |
||
33 | |||
34 | Access to our infrastructure is granted based on Swiss laws and requires a Swiss court order. |
||
35 | |||
36 | h2. Access to data or network traffic from our staff |
||
37 | |||
38 | For operational activities staff members can and will investigate network traffic to ensure the stability of our platform. |
||
39 | Access to customer specific data is strictly forbidden. |
||
40 | |||
41 | An exception to above rule is if the customer specifically granted permission for it. |