Data Processing Agreement (DPA)
Last updated: 2026-07-09
Roles
The client is the controller; Aneonymat acts as processor (Art. 28 GDPR, FADP).
Purpose and duration
Reversible pseudonymisation or permanent anonymisation, depending on the chosen mode, for the dossier's duration (TTL 30 days for reversible; no mapping for permanent).
Security (Art. 32 GDPR)
Per-dossier encryption, TLS, Swiss hosting, audit log, mandatory human review.
Further sub-processors
Infomaniak, Mistral, Stripe.
Assistance
Aneonymat assists the client and notifies any breach. Contact: aneonymat@neojusticia.ch.