At iXZepta, privacy and data protection are integral to how the platform is designed and operated. This page explains the principles governing the processing of personal and customer data, including the use of cloud infrastructure and AI services.
iXZepta is designed for professional and organizational use. Specific data-processing, retention, residency and security requirements may additionally be governed by the applicable customer agreement or Data Processing Agreement.
iXZepta currently operates on managed cloud infrastructure that may process and store customer data outside Switzerland. We therefore do not currently guarantee Swiss-only data residency.
iXZepta is transitioning its production technology stack to AWS infrastructure located in Switzerland. Swiss data residency is intended to become the standard architecture for core platform data once this migration has been completed and verified.
Certain specialized services, including AI services, may continue to involve processing outside Switzerland. Where international processing occurs, iXZepta applies appropriate technical, organizational and contractual safeguards in accordance with applicable data-protection requirements.
Customers requiring a specific data-residency arrangement should contact iXZepta before submitting customer data.
Data is encrypted in transit using industry-standard transport encryption. Infrastructure and database providers apply encryption at rest according to their respective security controls.
Access to production systems and stored customer data is restricted to authorized personnel and service components based on operational need.
iXZepta continuously develops its technical and organizational security controls as part of the platform's enterprise architecture.
For customer content processed on documented customer instructions, the customer generally acts as controller and iXZepta acts as processor.
iXZepta may act as an independent controller for activities such as account administration, service security, service communications, legal compliance and other processing purposes described in this policy.
The applicable customer agreement and, where relevant, Data Processing Agreement govern these roles and responsibilities.
iXZepta processes personal and customer data only as necessary to provide and operate the service, maintain security, support customers and meet legal or contractual obligations.
We seek to minimize the personal data required for these purposes. iXZepta does not sell personal data or use customer content for third-party advertising or targeted advertising.
iXZepta uses third-party AI API services to analyse decision-related content and generate decision-support insights. Relevant customer content may be transmitted to these providers where required to perform the requested analysis.
iXZepta does not enable voluntary sharing of API inputs and outputs with OpenAI for model improvement. Under the applicable OpenAI API data controls, API content is not used to train or improve OpenAI models unless such data sharing is explicitly enabled.
AI service providers may retain API inputs and outputs for limited periods for security or abuse-monitoring purposes, subject to their applicable terms and legal or security exceptions. Provider retention is separate from data retained by iXZepta to operate the platform.
AI-generated findings are designed to support human review and decision-making. iXZepta does not make legally binding decisions on behalf of customers.
iXZepta uses selected third-party service providers to support the operation of the platform, including cloud infrastructure, database, AI processing, email delivery and related technical services.
These providers may process customer or personal data only to the extent required to provide their respective services and subject to applicable contractual and data-protection requirements.
Information about current sub-processors, their purpose and relevant processing locations is available from iXZepta upon request.
Personal and customer data is retained only for as long as required to provide the service, fulfil the purposes for which it was collected, or meet applicable legal or contractual obligations.
Retention and deletion arrangements may differ between evaluation environments, Design Partner Programs and contracted customer deployments and may be further defined in the applicable customer agreement or Data Processing Agreement.
Customers may request deletion of their data in accordance with applicable data-protection requirements and contractual arrangements.
Following deletion from active systems, limited copies may remain temporarily in technical backups or provider systems in accordance with applicable retention schedules and legal or security requirements.
iXZepta currently uses service providers that may process customer or personal data outside Switzerland.
Where customer data is processed outside Switzerland, iXZepta applies appropriate safeguards in accordance with applicable Swiss and European data-protection requirements. This may include contractual, organizational and technical safeguards depending on the service provider and processing location.
iXZepta's planned migration of its core production infrastructure to AWS infrastructure in Switzerland is intended to reduce international processing and storage of core platform data. Certain specialized services, including AI services, may continue to involve international processing and will be governed by the applicable data-protection arrangements.
Individuals may have rights to access, correct, delete or receive a copy of their personal data and, where applicable, to restrict or object to processing, request data portability, or withdraw consent.
These rights depend on the applicable data-protection law and the circumstances of the processing. Requests may be submitted to info@ixzepta.com.
Where iXZepta processes personal data on behalf of a customer, requests may need to be addressed to or coordinated with that customer as the relevant data controller.
iXZepta is a professional, business-focused service intended for users authorized by an organization and is not directed to children.
Organizations should not invite individuals under the age of 16 or submit children's personal data unless this has been expressly agreed with iXZepta and the processing is lawful under applicable data-protection requirements.
iXZepta maintains and continuously develops technical and organizational measures appropriate to the nature and risk profile of the service.
Privacy, security and data-processing information can be provided to customers as part of evaluation, enterprise procurement and vendor-risk assessments. Additional contractual safeguards may be agreed where appropriate for a customer engagement.
For privacy-related inquiries or to exercise data-protection rights, please contact:
info@ixzepta.comiXZepta AG i.G.
Hauptstrasse 15
8274 Tägerwilen, Switzerland
Privacy contact:
info@ixzepta.com