Sealed deposit
A document once deposited can no longer be modified or deleted before its due date, including by a system administrator.
Keep accounting records for ten years, with integrity you can prove.
A vault where a document arrives, receives its fingerprint and its timestamp, stops moving, and deletes itself once the legal period has run.
Status : In preparation. Sold alongside the processing register rather than on its own. Sheet updated 11 September 2026.
Ten years, and a condition almost nobody meets
Swiss accounting law requires books, accounting records and the annual report to be kept for ten years. The ordinance on the keeping and preservation of account books adds a less familiar requirement: where the medium can be altered, integrity must be guaranteed by a technical means, timestamping for instance.
A folder on a shared drive meets neither condition. It can be changed without a trace, and it proves nothing on the day it is asked to prove something.
Modules that do this correctly do exist, but inside an enterprise resource planning suite, which means taking the suite along with them.
Who it is for
- Companies required to keep accounts
- Fiduciaries and audit firms
- Associations and foundations subject to audit
How it works
What goes in does not change.
Immutability is not a setting an administrator can lift. It is a property of the vault, and the log shows it was not lifted.
Fingerprint and timestamp
Every entry receives its fingerprint and its timestamp. That pair is what demonstrates, years later, that the document is the one that was deposited.
Readable log
Who deposited, who consulted, when, and what was attempted without succeeding. The log is itself tamper-evident.
Export for the auditor
A sealed export with its integrity evidence, in a format the audit firm can open without our software.
Deletion at term
Once the legal period has run, the document is deleted. Keeping it longer is not more prudent, it is a different breach.
Taking over existing archives
Archives already accumulated come in as a batch, with the original date preserved and the deposit date recorded separately.
Platforms
Limits
What this software will not do.
Audit-proof archiving demonstrates that a document has not changed. It says nothing about what it contained on the day it was created.
- It does not check the accounting accuracy of what is deposited.
- It does not replace a backup: the two answer different risks.
- It does not decide which records fall under the legal obligation. That stays with the company and its fiduciary.
- It is not meant to keep documents beyond their retention period.
Frequent questions
Vault
Is ordinary cloud storage not enough?
It keeps, but it does not prove. The question asked during an inspection is not whether the document still exists, it is whether it is the same one. Without a fingerprint and a timestamp, the answer rests on the word of whoever runs the storage.
Where are the records kept?
On infrastructure located in Switzerland, with a copy in a second Swiss data centre. The location is in the contract.
What happens if we leave the service?
The sealed export exists for that and runs at any time. It opens without our software, otherwise the archive would depend on our survival, which is a poor idea for a ten-year obligation.
Read next
Swiss software for the obligations nobody has tooled.
Is one of these already a problem for you?
Early access goes to organisations willing to be involved in getting it right. Tell us which one concerns you and what you do instead today.
Write to us