Security and privacy

Case data deserves particular protection

A death produces data about the deceased, about relatives and about inheritance. We treat it accordingly — technically and organisationally.

Data held in Switzerland

The database and the file storage are located in Zurich. Case data is not transferred abroad.

Encryption

Transmission over HTTPS only, storage encrypted. Files are reachable only through signed links that expire.

Separation between businesses

Every funeral service is its own tenant. Access is narrowed to that tenant on every query — and secured again directly in the database.

Graded roles

Management, consultation and back office hold clearly separated rights. Anyone without signing rights is never offered the signature in the first place.

Logging

Changes to case data are logged with the person, the moment and the operation. Signatures are additionally stored with a timestamp and a checksum.

Personal accounts

Everyone on the team has their own account, created by email invitation. No shared logins — so it stays traceable who changed what.

Legal framework

Swiss data protection law as the foundation

Velorio is developed under the revised Swiss Federal Act on Data Protection and designed to be compatible with the GDPR. Funeral services remain the controllers of their case data; we process it as a processor under a data processing agreement.

  • A data processing agreement as part of the contract
  • Access and deletion requests handled through the responsible business
  • Retention of ten years by default, following the practice of the trade
  • Uploads are checked for type and size; executable files are excluded
What the funeral home software costs

What is still outstanding

Velorio is in the run-up to its pilot. An external security test and the final hardening of individual components are planned and will take place before productive use. We tell you openly where we stand — even when a tick mark comes later.

Questions about how data is processed?

We are glad to answer technical and legal questions in detail — including to your data protection adviser.