Security & data
Your data.
In Switzerland. Under your control.
What you entrust to Heimster stays in Switzerland, is encrypted and belongs to you. Where data has to leave Switzerland, we say so openly – in full.
Operated in Switzerland
Application, database, files, PDF generation and reach analytics run with a Swiss infrastructure provider in Geneva.
Encrypted
Encrypted transfer (TLS) and data encrypted at rest. Access tokens are kept separately in a key vault.
Backed up
Regular backups, encrypted and stored separately from the production system – with tested restores.
Only those allowed
Roles and permissions by company, branch and team, sign-in with passkey or second factor, one active session per licence.
Your data belongs to you
Trigger a full export yourself at any time – Excel, CSV, JSON, vCard, calendar and all files. Delete personal data on request with one click.
No selling, no training
We do not sell your data, do not use it for advertising and do not train general AI models with it.
The complete list
When data leaves Switzerland.
For a few features, there is no technical alternative. This list is complete – and you decide whether to use the feature.
Full details in the privacy policyAI features
Content an AI feature needs goes to specialised providers, currently mainly in the USA – through their business offerings, with no training on your data.
Your connected mailbox
If you connect Microsoft 365, your emails and appointments stay where you already keep them today.
Maps and address search
For address search and maps, individual address or coordinate queries go to map services – no contact data.
AI with limits
AI suggests. You decide.
Only within your organisation
AI features work exclusively with your own organisation's data and within your permissions.
Dictation without recordings
Audio is transcribed in memory only and never stored; transcripts are deleted after 30 days.
ChatGPT and Claude only with your sign-in
The connection only exists after you sign in and approve it. Revoking it ends access immediately.
Built into the product
Security you manage yourself.
- Data stays in Switzerland Application, database, files and backup copies are hosted by a Swiss provider; backups are stored encrypted every night in a second Swiss data centre.
- Complete data export Admins request the whole package themselves – Excel, CSV, JSON, vCard, calendar, SwissRETS, IDX and all files – link and code arrive by email.
- Erase personal data on request If someone requests erasure under the Swiss Data Protection Act (nDSG), «Erase personal data» removes their data including all copies; documents that must legally be kept remain and are flagged.
- One login per licence When someone logs in again, older browser sessions are ended – a shared login stands out, API keys keep working.
- Protected AI connections Only ChatGPT, Claude and Microsoft Copilot Studio get access to your data; the consent page shows the real recipient, and revoking takes effect immediately.
- QR-bill in your language The monthly licence invoice comes as a Swiss QR-bill with VAT shown – in German, French, Italian or English.
Found a vulnerability?
Report it to us directly. We reply personally and fix it as a priority.
Report a vulnerability