Trust centre
Security, backups, data residency and the legal documents your DPO and procurement team ask for, on one page each.
Security
Private networking, hardened machines, named access, tracked advisories and a full audit log, built to ISO 27001 controls.
Backups and recovery
Daily encrypted backups of the whole app, point-in-time recovery for databases from Business, and monthly restore tests with recovery objectives in the contract on Enterprise.
Data residency
Your data stays in the country you choose, Switzerland, the EU or your premises, with your contract naming each location.
Swiss nLPD
How Pilae supports your controller obligations under the revised FADP: processor agreement, records, data security and breach reporting.
Data processing agreement
Our standard DPA under the revised FADP and the GDPR, signed at onboarding, with every sub-processor for your service named in the agreement.
GDPR
Pilae as your GDPR processor: an art. 28 DPA, data in the EU or Switzerland, transfer safeguards, breach notice and help with data subject requests.
FINMA outsourcing
How Pilae meets the outsourcing controls of FINMA Circular 2018/3: inventory, due diligence, audit rights, subcontracting, data in Switzerland and a tested exit.
NIS2 and DORA
Contract terms, incident reporting support, register of information data, exit strategies and resilience testing for entities under NIS2 and DORA.
Jurisdiction and the CLOUD Act
A deployment designed so that the data sits where you choose and US-controlled services stay outside your data path.
Shared responsibility
Who runs what, Pilae or your team, on premises and in Pilae Cloud: hardware, network, apps, backups, access and your data.
Certifications
Built to ISO 27001 controls and NIST CSF, hosted in ISO 27001-certified datacentres, with audit rights and your security questionnaire answered.
Responsible disclosure
Report vulnerabilities to security@pilae.com. Acknowledgement within two business days, regular updates and safe harbour for good-faith research.
Tell us what you need to run.
Thirty minutes with an engineer, a written plan and a fixed price for the first workload.