Your data is sensitive
It stays yours
Identity, medical and immigration records for people deployed in complex jurisdictions. We treat that as the constraint it is.
End-to-end encryption, everywhere in the system: in transit between your browser and our servers, and at rest in the database. Documents, certificates and personal records are never stored or moved unencrypted, at any point in the pipeline.
TLS 1.3 in transit, AES-256 at rest — the current industry standard on both fronts.
Sovereign Swiss hosting at Infomaniak, GDPR and Swiss LPD compliance built into the platform, not bolted on. Every AI process runs under a strict zero data retention (ZDR) policy: inputs and outputs are never stored, never reused, never seen by anyone but you.
Infomaniak is ISO 27001 certified for information security management, holds a FINMA circular 2018/3 outsourcing mapping for regulated clients, and operates entirely within Swiss and EU jurisdiction — outside the reach of the US Cloud Act. See Infomaniak's Trust Center for full detail.
Per-tenant isolation, role-based access, and a native audit log on every document and decision. Each client's data lives in its own isolated tenant, never pooled, never queried across accounts. Permissions are scoped by role, down to which fields a coordinator or client can see. Every read, write and approval is logged, timestamped and traceable back to a person.
Ask OpStaff, the copilot inside the platform, follows the same rules. It is read-only, answers only with what the signed-in user is allowed to see, and is not available to contractors.
Your data is exportable at any time, in open formats (CSV, JSON, PDF). There's no minimum notice, no fee, and no negotiation to leave: personnel records, certificates, timesheets and audit history all leave with you, in a state you can load straight into another system.
Some platforms in this space bill individuals to be listed in their system. We don't, and we won't. The cost of compliance belongs to the company requiring it.