Sub-processors
The kinds of providers that help run Konsaro, what data they receive and where. Each is bound by a data processing agreement. Any customer can get the named list free of charge from info@softwarevision.ch.
| Service | Purpose | Personal data | Location and transfer safeguard |
|---|---|---|---|
| Data storage | Database, file storage and sign-in | All Customer Data, user accounts, phone numbers for two-factor sign-in, sign-in and audit logs | Switzerland (Zurich) — no transfer |
| Application hosting | Running the web application and scanning uploaded files for malware | Customer Data while the application processes it, server logs with IP addresses and browser details | Germany — adequacy (EU/EEA) |
| Backup copy of files | A daily backup copy of all uploaded files, kept on the application servers | Uploaded documents and the personal data they contain | Germany — adequacy (EU/EEA) |
| AI processing | AI features such as rephrasing and translating texts and suggesting tasks. Only used while AI features are switched on. Zero data retention. Never used to train AI models | Content that users submit to AI features | EU — adequacy (EU/EEA) |
| Error monitoring | Detecting and fixing technical errors | Technical error reports: error message, page address, browser and operating system. We configure it not to attach cookies or IP addresses, but a report can occasionally contain an identifier | Germany — adequacy (EU/EEA) |
| Email delivery | System emails such as invitations to Konsaro, sign-in links and meeting notifications | Name, email address, subject and text of the message, including meeting and agenda titles. No documents or attachments | Ireland (EU); provider based in the United States. Ireland — adequacy (EU/EEA). United States — Standard Contractual Clauses with the amendments required by Swiss law, or the Data Privacy Framework where the provider is certified |
| SMS delivery | Sending one-time sign-in codes by SMS | Phone number and the code | United States — Standard Contractual Clauses with the amendments required by Swiss law, or the Data Privacy Framework where the provider is certified |
Reviewing Konsaro for your board?
We walk your IT, security and board office teams through Konsaro and answer the open questions.
Request a security reviewWas this page helpful?