Guided register
Each activity gets its purpose, its legal basis, its categories of data, its recipients and its retention period, through questions about what the organisation actually does.
In preparation
Records of processing activities
The register of processing activities, the map of processors with the country where data actually sits, the breach procedure and the tracking of access requests.
Status : In preparation. Aimed first at fiduciaries, who will keep it on behalf of their clients. Sheet updated 12 September 2026.
Discuss your projectRecords of processing activities
The revised FADP provides for records of processing activities. Certain organisations with fewer than 250 employees are exempt, depending on their processing, including whether they process sensitive data on a large scale or conduct high-risk profiling.
The software aims to organise processing activities, providers and applicable obligations. Each organisation’s scope must be assessed.
Who it is for
- Fiduciaries handling compliance for their clients
- Companies of ten to two hundred people
- Associations and foundations
- Practices and clinics handling sensitive data
How it works
The register fills in by question, not by blank form.
Nobody can describe their processing activities cold. Everybody can answer what happens to the job applications they receive, or who does the bookkeeping.
Map of processors
Every provider is listed with the country where the data actually resides. The exercise usually reveals a dependency nobody had measured.
Breach procedure
An incident opens a record, starts a countdown and prepares the notification to the Federal Commissioner with the timeline it expects.
Access requests
Received, deadline, documents gathered, answer sent. A request from a data subject stops being an improvised emergency on a Friday evening.
Impact assessment
A questionnaire leads to the decision to run one or not, and keeps the record of the reasoning, which is exactly what you will be asked for.
Three languages
The register is kept and exported in French, German and Italian, which matters as soon as a company operates across regions.
Platforms
Limits
What this software will not do.
Compliance is not a file, it is a series of decisions taken by management. A tool can record them and bring them back up. It cannot take them.
- It does not make you compliant. It keeps the record and the evidence.
- It gives no legal advice.
- It does not monitor your systems and will not detect breaches for you.
- It does not cover sector-specific regimes, banking and insurance in particular.
Frequent questions
Register
Can our fiduciary keep it for us?
That is the first intended use. A firm manages the register of several clients from one console, each kept separate, and hands each of them an exportable register.
How is this different from a European compliance tool?
Swiss obligations are not the European ones. Thresholds, notifications, vocabulary and the supervisory authority all differ. A translated tool produces documents that cite the wrong regime.
What happens if a breach occurs on a public holiday?
The incident record opens from a phone, and the countdown starts there. A timeline captured as events happen is worth more than one reconstructed the following week.
Read next
Software for Swiss professional workflows.
Interested in a project?
Tell us which software and use cases interest you. We will explain its status and opportunities to contribute to preparation.
Discuss your project