By clicking “Allow,” you agree to the storage of cookies on your device to improve page navigation, analyze site usage, and support our marketing efforts. For more information, see our cookie policy.
We attach great importance to the secure handling of event data. Our solution is hosted on Swisscom servers in Switzerland and protected in a secure environment. Oniva was developed under the high requirements of Swisscom and is DSG and GDPR compliant.
Oniva offers a Software-as-a-Service (SaaS) model where security is a shared responsibility between Oniva, Swisscom (Switzerland) Ltd and our customers. Oniva uses Swisscom as a cloud infrastructure provider to offer a highly available, scalable and secure service. Swisscom is responsible for the physical facilities, hardware, network and security of the virtualization platform. Oniva is responsible for application level security, logging and monitoring of security events and monitoring the uptime of the service, among other things.
Customers are responsible for using Oniva appropriately and using event data in accordance with their own data protection requirements. Examples of customer responsibilities include providing complete and accurate information to Oniva, ensuring the security of devices used to access the service, managing access to the service and events shared with users, reporting security issues to Oniva, data security, and managing the security of other applications or integrations used in the customer environment.
“State of the art” application security
“State of the art” application security
Swiss data storage
Data is stored exclusively on high-performance Swiss data centers from Swisscom.
Datacenter certifications
Oniva is stored on Swisscom servers and certified with ISO 27001, SOC2/ISAE3402 standards.
Data anonymization at the push of a button
Anonymize all personal data after the event at the push of a button and store personal data only where necessary.
Individual privacy policy
Individual data protection regulations
Integrate your own privacy policy to meet the requirements of DSG, GDPR, and your organization.
Single sign-on (SSO)
SSO allows users to authenticate within their own systems without having to enter additional login credentials.
Private cloud
Take advantage of the options and individual security measures within a private cloud infrastructure from Swisscom (Switzerland).
GDPR & DSG compliant
Processing and storage of personal data on the basis of the General Data Protection Regulation of Switzerland and the European Union (EU).
Security in the company
Oniva authenticates users individually via a central identity provider and uses two-factor authentication wherever possible.
Oniva employees regularly take part in security and data protection training, which includes security in technical and non-technical roles. All employees are committed to handling data in a trustworthy manner and contribute to the protection of customer data.
Data protection
Find out more about the data processing agreement here as a summary.
