Swiss Snip

Trust
Centre

Where your documents sit, who can reach them, and what your security reviewer can ask for.

security@swiss-snip.ch
Local tiers — data we hold
None
Swiss Chain — data location
Switzerland only
Subprocessors, all tiers
0
Outbound calls, all tiers
None

Where the data is

Local: in your workbook.
Swiss Chain: in Zurich.

On the Local and Complete tiers, everything below lives inside your .xlsx and nothing reaches us. The rows describe Swiss Chain.

Source documents
Sent for processing, held on our hardware in Zurich for the engagement, returned and deleted on request.
Rendered pages
Stored beside the source. The pane receives an image of the page on screen.
Word index
Text and coordinates from each page, in a database on the same machine.
Snip records and audit log
Same database. The log is append-only: every import, snip and deletion, with actor and time.
Backups
Encrypted and stored at a second Swiss location. Restores are rehearsed.
Extracted values
Written into your Excel cells on every tier, so they live wherever your workbook lives.

Machine learning

We run the model
on our own hardware.

On the Local and Complete tiers, extraction is deterministic: text layer, coordinates, search. No model is involved.

On Swiss Chain, AI extraction runs on an open-weights model we download and operate ourselves, at ETH Zurich Agentic AI Systems or inside your perimeter. Nothing is sent to an outside provider.

Subprocessors

The list is empty.

Subprocessor Purpose Location

0 No third party stores, processes or transmits your data, on any tier. The service makes no outbound connections.

Office.js

Every Excel add-in loads Office.js from Microsoft. It connects the pane to Excel and receives no document content.

If you use Microsoft 365, your workbook is stored by Microsoft. That is your arrangement, not a subprocessor of ours.

If the list ever changes

We will not add a subprocessor without written notice and time to object.

Compliance

What is in place,
and what is not.

  • Swiss data residency Swiss Chain data on our hardware at ETH Zurich; Local tiers hold nothing In place
  • TLS 1.3 in transit Enforced, with HSTS In place
  • Append-only audit log Every import, snip, replacement and deletion In place
  • Encryption at rest Per-tenant keys for stored documents Planned set date
  • Single sign-on and role-based access OIDC against your identity provider Planned set date
  • Independent penetration test Third-party test with a summary memorandum Planned set date
  • ISO 27001 Information security management certification Planned set date
  • SOC 2 Type II Relevant where a customer’s group requires it Planned set date
  • Cyber insurance Third-party cover for a security incident Planned set date
  • Documented BCP and DR plan Written, tested, and reviewed annually Planned set date

Documents

Available on request.

Email the security address and say which you need.

  • Data-flow description

    What crosses which boundary. The diagram below is the summary.

  • Subprocessor statement

    The empty list, with the Office.js note, in a form for your assessment.

  • Data processing agreement

    Under the revised FADP.

  • FINMA Circular 2018/3 outsourcing annex

    Audit rights, continuity, sub-outsourcing, data location, exit.

  • Deployment description

    What we run, where, and how it is backed up and restored.

Request the documents

Data flow

What crosses the boundary.

The add-in runs inside Excel’s sandbox and cannot write a document into the workbook.

Data flow between Excel and the SWISS SNIP server The customer's workbook holds extracted values and references only. Source documents, page renders, the word index and the audit log stay inside Switzerland. The service makes no outbound calls. Customer Excel workbook Extracted values Cell → page references Hidden _SSNIP sheet No source documents Task pane Displays one rendered page Swiss border upload page image, values Switzerland · Zurich SWISS SNIP server Source documents Rendered pages Word index (text and coordinates) Snip records Append-only audit log Hardware operated under Swiss law No foreign-operated subprocessor No outbound calls No model provider or analytics

Scroll the diagram sideways to read it in full.

Questionnaire

Security
questionnaire.

Where is our data?

Local and Complete: inside your workbook, and nowhere else. Swiss Chain: on our hardware in Zurich, or in your own datacentre if you choose to host it.

Is data encrypted in transit and at rest?

On the Local tiers your workbook’s own sensitivity label handles it. On Swiss Chain, in transit: TLS 1.3; at rest: an encrypted volume, with per-tenant keys planned.

Do you perform independent penetration testing?

Planned. The summary memorandum joins the document list once complete.

Does the product support single sign-on?

Login is email plus a one-time code. OIDC against your identity provider is planned.

Do you have a documented incident response plan?

A runbook covers backup and restore, with a named contact and prompt notification. A formal plan with defined escalation is planned.

Do you train models on customer data?

No. Your documents are never used to train a model.

Where is the company established?

SWISS SNIP AG, seat in Zurich, Switzerland. Commercial register number: to be added before publishing.

Have you appointed a data protection officer?

No. Use the security address above.

What happens to our data if we leave?

On the Local tiers, nothing: your workbooks already hold everything. On Swiss Chain, we delete everything we hold and log the deletion. Before that you can export your documents and every snip with its coordinates.

Can we run it ourselves instead?

Local and Complete already run entirely on your machines. Swiss Chain can run inside your own perimeter or on our hardware in Zurich.