Your sensitive third-party data deserves a platform that doesn't create risk of its own. Here is how Ethicaline TPRM protects it.
Application data is stored on Supabase infrastructure in an AWS data-centre region in Zurich. Switzerland benefits from an EU adequacy decision and a data protection law aligned with the GDPR.
Data travels over encrypted connections and is encrypted where it is stored.
Each organisation's data is separated from the others, and access is checked on every request.
Role-based permissions, multi-factor sign-in, and single sign-on through Microsoft Entra ID (OIDC).
An audit trail and exportable reporting show who did what, and when.
We collect only the data needed to run assessments, and we support data access and deletion requests.
We have Data Processing Agreements with our processors and use Standard Contractual Clauses for any processing outside the EU and Switzerland.
Our infrastructure providers hold independent certifications (SOC 2 Type II, ISO 27001). These certifications are held by our providers, not by Ethicaline; audit reports are available on request.
A security overview, our Data Processing Agreement and the hosting providers' audit reports are available on request.
In Zurich, Switzerland, on Supabase infrastructure (AWS, Zurich region). Switzerland benefits from an EU adequacy decision. Data is encrypted in transit and at rest. See the Trust Centre.
Yes. We support data access and deletion requests.
Yes. We have Data Processing Agreements with our processors and use Standard Contractual Clauses for any processing outside the EU and Switzerland.
Yes, on request: a security overview, our Data Processing Agreement and the hosting providers' audit reports. Contact us for the trust pack.
This site uses privacy-first, cookieless analytics and sets no tracking or marketing cookies. Privacy & Cookies