Deutch
Français
DS
Data sovereignty
Your environments are hosted in controlled Swiss and EU facilities with no unapproved off-site transfers.
Trust & Compliance
Data protection engineered for resilient, sovereign operations.
Our infrastructure, governance, and culture are aligned to the GDPR and evolving European data frameworks. We keep your workloads sovereign, observable, and secure while you focus on building value for your customers.
-
1
Swiss & EU data residencyCustomer data stays within our owned data centres and trusted availability zones.
-
2
Verified security postureAnnual penetration testing, layered isolation, and 24/7 monitoring protect every tenant.
-
3
Transparent collaborationWe publish subprocessors, notify incidents promptly, and provide DPA-ready documentation.
Critical patch deployment
< 24 h
Intrusion tests / year
2x
Subprocessor disclosure
100%
Our Commitments
Security, privacy, and continuity by design.
We blend sovereign hosting, meticulous vendor governance, and human-centric support to help you maintain regulatory confidence at every stage of the data lifecycle.
SI
Security isolation
Logical and physical segmentation, hardened hypervisors, and network micro-segmentation prevent lateral movement.
TR
Total transparency
We document subprocessors, access scopes, and audit results so you can evidence compliance on demand.
IR
Incident readiness
Structured runbooks, 24/7 response teams, and mandatory breach notifications keep stakeholders informed.
Shared responsibility, clearly defined.
We champion a shared-responsibility model that secures the platform end-to-end while empowering customers to manage lawful processing within their applications.
- Our scope: Tier IV-ready facilities, identity safeguards, vulnerability patching, and resilient network & backup layers.
- Your scope: Role-based access, encryption of collected data, consent & retention policies, and controller obligations.
- Joint actions: Compliance tooling, templated DPIAs, and coordinated drills so you can prove readiness.
Platform uptime
99.99%
Guaranteed SLA backed by redundant regions and proactive failover testing.
Support availability
24 / 7
Specialised compliance engineers respond within contractual RTO windows.
Compliance Toolkit
Everything you need to document and audit processing.
Policies, agreements, and automation help you align with GDPR, nLPD, and complementary sector requirements without adding friction to your teams.
Signed Data Processing Agreement
Access our standard DPA or request bespoke clauses to cover your regulators’ expectations.
Audit-ready documentation
Comprehensive privacy, cookie, and security annexes to integrate with your control framework.
Dedicated Data Protection Officer
Our DPO advises teams, supervises lawful processing, and coordinates with authorities when required.
Observability & logging
Granular logging, retention controls, and export channels ensure you can evidence processing decisions.
Data Subject Rights
Empowering individuals with transparent workflows.
We help you respond to subject access requests quickly and securely, ensuring each right is respected without compromising integrity.
Right of access
Generate encrypted exports detailing stored personal data, processing purposes, and retention policies.
Right to rectification
Collaborative tickets route corrections to controllers, while we handle infrastructure-level updates seamlessly.
Right to erasure
Secure deletion playbooks, wipe certificates, and backup purges deliver full assurance to data subjects.
Right to portability
Standards-based exports are transmitted over encrypted channels to new controllers without service disruption.
Talk with our Data Protection Officer
Whether you are validating a DPIA, preparing for an audit, or responding to supervisory authorities, our team is here to help.
- Email: dpo@boxis.com
- Service desk: Open a secure compliance ticket
- Knowledge base: Browse implementation guides