Ethicaline is a firm of seasoned professionals in compliance and investigations. We design Risk & Compliance business solutions from the cases we have handled • and we support you, from the first screening to the in-depth enquiry.
A fine understanding of regulatory frameworks, from Sapin II to the new Asian rules.
Real investigative know-how • fraud, corruption, beneficial owners, on-site verification.
A platform that industrializes the third-party program without diluting analytical rigour.
We set triage thresholds and the regulations in scope with you.
We deploy the platform and your teams run the programme.
We support your teams day to day; when a case demands it, our investigators take it further.
Most TPRM platforms stop at the questionnaire. Our origin as an investigation firm lets us go all the way through the risk: in-depth enquiry, documentary and on-site, is part of the offering.
Ethicaline is a firm dedicated to compliance and investigations. Our SaaS derives from that practice, delivering hands-on, tested solutions.
Capitalised experience, turned into business solutions, not a list of software features.
In the prevention and detection of failures and misconduct: corruption, AML/CFT, fraud, collusion, conflicts of interest…
Structuring a project-oriented approach, as leverage for analysis and decision making.
Obligation to map risks and document the assessment of third parties (clients, suppliers, intermediaries) under the anti-corruption regime.
EU corporate sustainability due diligence: identifying, preventing and remediating harms along the value chain.
Supply-chain due-diligence act: risk analysis and corrective measures across suppliers.
Anti-corruption law with extraterritorial reach: due diligence on intermediaries and business partners.
Asia-Pacific is accelerating. Singapore's MAS is redefining third-party risk, Australia's APRA imposes, with CPS 230, a demanding framework for service providers, and China is overhauling its supply-chain rules. A program that was adequate three years ago now has gaps.
Issued March 2026, they supersede the old outsourcing rules and extend expectations to all third-party arrangements: register, governance, full lifecycle and sub-contractors.
Operational-risk standard in force since July 2025 (material-provider contract compliance due by July 2026). Monitoring and continuity of critical providers.
Decrees 834 and 835 (2026) govern information gathering and due diligence. China also concentrates most FCPA actions and requires China-specific supplier verification.
Strengthened expectations on operational resilience and provider management for financial institutions.
Growing expectations on operational resilience, third-party risk and technology risk.
Business responsibility and sustainability reporting obligations, including the value chain, aligned with global standards.
This summary is provided for general information only and does not constitute legal advice. Applicable obligations depend on your situation: we recommend confirming your scope with your counsel.
Ethicaline TPRM handles sensitive third-party data. Data protection isn't a feature we bolted on • it's how the platform was built.
Your application data is stored in Zurich, Switzerland, on Supabase infrastructure in an AWS data-centre region. Switzerland benefits from an EU adequacy decision and a modern data protection law aligned with the GDPR.
Privacy is an architectural decision, not a policy afterthought. We collect only the data needed to run assessments, and keep personal data minimal and purposeful.
The platform is built to align with GDPR from the ground up • Swiss hosting with EU adequacy, data minimization, and controlled access as founding principles.
Access to the platform is authenticated, with role-based permissions that ensure users see only the data appropriate to their role.
Your application data is hosted in Zurich, Switzerland, on Supabase infrastructure (AWS, Zurich region). We have Data Processing Agreements with our processors and use Standard Contractual Clauses for any processing outside the EU and Switzerland. Data is encrypted in transit and at rest, and we support data access and deletion requests.
Certifications are held by our infrastructure providers, not by Ethicaline. Audit reports are available on request.
We keep this presentation deliberately high-level. The full detail of our architecture, hosting locations, sub-processors, certifications and data-processing terms is available in our GDPR documentation on request • contact us for the complete pack.
This site uses privacy-first, cookieless analytics and sets no tracking or marketing cookies. Privacy & Cookies