CommeliaPrivacy for people who share what matters most
People write to your team about their health, their children and their worries. Commelia is built around the Swiss Data Protection Act (DSG), meets the requirements of the GDPR and keeps personal data where it belongs.
Hosted in Switzerland
ISO 27001-certified data centres in Switzerland, operated by Infomaniak.
DSG and GDPR
Designed for the Swiss DSG, ready for organisations in Germany and the EU.
AI without memory
AI requests go only to providers that neither store nor train on your data.
Encrypted backups
Nightly backups, encrypted with AES-256 before they leave the server.
Built for the Swiss DSG — ready for the GDPR
Commelia processes conversations on behalf of your organisation. You stay in control as the controller, we act as your processor and give you the tools to meet your obligations.
Swiss Data Protection Act (DSG)
- Data is stored and processed in Switzerland
- Data processing agreement in line with Art. 9 DSG
- Privacy by design and by default (Art. 7 DSG)
- Built-in tools for access, export and deletion requests
General Data Protection Regulation (GDPR)
- Switzerland has an EU adequacy decision, so no extra transfer safeguards are needed
- Data processing agreement in line with Art. 28 GDPR
- Supports the rights of access, erasure and portability (Art. 15–20 GDPR)
- AI requests go through EU routing
Data processing agreement (DPA) available on request. privacy@commelia.com
Hosting
Your data stays in Switzerland
The database, files and backups all live in ISO 27001-certified data centres of Infomaniak, a Swiss hosting provider. Every connection is encrypted with TLS.
- Database, uploads and backups in Switzerland
- ISO 27001-certified infrastructure
- No tracking, no advertising, no data sales
Anonymization
Personal data stays out of knowledge and AI
Your knowledge base learns from your team's answers, but never from personal details. The same layer can hide personal data from the AI provider.
- Knowledge suggestions from closed conversations are anonymized and reviewed as drafts. Only published entries are used by the AI.
- Conversation summaries are anonymized before they are stored.
- Emails, phone numbers, AHV numbers, IBANs, card numbers and dates are always detected. Optionally, AI finds names, places and organisations too.
- With “Hide personal data from the AI provider”, details are replaced with placeholders before a prompt is sent and restored in the reply.
- Add your own terms, such as small local groups or villages, that must always be removed.
Visitors in control
Visitors decide what remains
Visitors are anonymous unless they give an email address or your website passes a verified identity. When they end a chat, they can have their messages deleted right away.
- One panel to rate the chat, request a transcript and delete their messages
- Message text, files, summaries and translations are removed immediately; only anonymous statistics remain
- Your integrations are notified by webhook to delete their copies
- Organisations with record-keeping duties can switch the option off
Retention
Nothing is kept longer than needed
Each project decides what happens to closed conversations after a number of months: keep, delete or anonymize them. Requests from individuals are handled in a few clicks.
- Automatic retention per project, run daily
- Export everything about a contact as JSON
- Delete a contact and all their conversations permanently
- Deleted organisations are purged after 30 days
AI
AI that respects confidentiality
The AI assistant suggests replies or answers routine questions itself, always within clear limits.
- Requests go through OpenRouter's EU routing, to zero-data-retention providers only
- Your data is never used to train AI models
- AI off, suggestions only or auto mode: chosen per project
- Sensitive topics and crisis signals are handed over to people
Security
Security at every layer
Encrypted backups
Nightly backups are encrypted with AES-256 before they are stored, and expire automatically.
Encryption in transit and at rest
TLS for every connection. Stored credentials, such as mailbox passwords, are encrypted with AES-256-GCM.
Two-factor authentication
Team members protect their accounts with an authenticator app.
Need-to-know access
Roles and groups decide who sees which project. Internal notes are never shown to visitors.
Tamper-proof audit log
Sensitive actions are logged. Records cannot be changed or deleted, not even by owners.
Source available
The source code is open for review, and you may run Commelia on your own server.
Subprocessors
We work with a small number of carefully chosen service providers.
| Provider | Purpose | Location |
|---|---|---|
| Infomaniak | Hosting, database, files and backups | Switzerland |
| Sweego | Email delivery | France |
| OpenRouter | AI requests (zero data retention, EU routing) | EU |
| Meta (WhatsApp) | WhatsApp channel, only if connected | EU / USA |
| Threema | Threema channel, only if connected | Switzerland |
Or keep everything in your own hands
Commelia is source available. Run it on your own server or in your own data centre, with your own AI key.
Questions about data protection?
We are happy to answer them and send you our data processing agreement.