Data held in Switzerland
The database and the file storage are located in Zurich. Case data is not transferred abroad.
Security and privacy
A death produces data about the deceased, about relatives and about inheritance. We treat it accordingly — technically and organisationally.
The database and the file storage are located in Zurich. Case data is not transferred abroad.
Transmission over HTTPS only, storage encrypted. Files are reachable only through signed links that expire.
Every funeral service is its own tenant. Access is narrowed to that tenant on every query — and secured again directly in the database.
Management, consultation and back office hold clearly separated rights. Anyone without signing rights is never offered the signature in the first place.
Changes to case data are logged with the person, the moment and the operation. Signatures are additionally stored with a timestamp and a checksum.
Everyone on the team has their own account, created by email invitation. No shared logins — so it stays traceable who changed what.
Legal framework
Velorio is developed under the revised Swiss Federal Act on Data Protection and designed to be compatible with the GDPR. Funeral services remain the controllers of their case data; we process it as a processor under a data processing agreement.
Velorio is in the run-up to its pilot. An external security test and the final hardening of individual components are planned and will take place before productive use. We tell you openly where we stand — even when a tick mark comes later.
We are glad to answer technical and legal questions in detail — including to your data protection adviser.