Presenting emi to leadership, sharing it with your team or reviewing it offline? Download our executive brochure (PDF, FR). Download brochure

HomeTrustGDPR

Data protection

GDPR and Swiss FADP, explained simply.

You don’t need a law degree to deploy AI responsibly. Here are the essentials of the two frameworks protecting personal data — and the concrete ways emi is built to help you comply.

Take the checklist Your hosting

This page is provided for informational purposes only and does not constitute legal advice. For guidance tailored to your organization, please consult your legal counsel or Data Protection Officer (DPO).

Two laws, one shared mindset

What the GDPR and the Swiss FADP require

One applies across the European Union, the other in Switzerland. Both rest on the same core principle: individuals must stay in control of their personal data.

European Union

GDPR

General Data Protection Regulation, in force since May 25, 2018.

Applies whenever an organization processes personal data of individuals located in the European Union — employees, customers, suppliers or job applicants.

Supervised by national data protection authorities (such as the CNIL in France)

Governs transfers of personal data outside the European Union

Switzerland

Swiss FADP (nLPD)

Revised Federal Act on Data Protection, in force since September 1, 2023.

Modernizes Swiss privacy law and aligns it closely with European standards. Applies to personal data processing activities carried out in Switzerland.

Supervised by the Federal Data Protection and Information Commissioner (FDPIC)

Switzerland is recognized by the EU as providing an adequate level of protection

What both frameworks share

Inform individuals clearly

Process only necessary data

Protect data with robust security

Uphold individual data rights

Bind service providers by contract

Notify security breaches promptly

How emi helps you comply

Concrete settings, not vague promises

emi is built to support your day-to-day compliance. While compliance remains your organization’s responsibility, emi gives you practical controls out of the box.

Data minimization

You choose what AI is allowed to read. Every Knowledge Base document has a one-click “Readable by emi” switch.

Access permissions

Manage, Contribute, Read or None: each user only sees documents relevant to their role, and emi enforces those permissions in its answers.

Zero model training

Your data is never used to train any AI model. It is used solely to answer your requests.

EU-adequate hosting country

Your data is hosted in Switzerland, officially recognized by the European Union as providing adequate data protection.

Company AI charter

Upload your internal AI usage charter so every team member reads and accepts it before getting started.

Who sees what?

Test compartmentalized folder permissions role by role on our Privacy page.

Try it →

Who does what

Data controller & processors: clear roles

In a standard enterprise deployment of emi, responsibilities break down as follows.

Your company

Data controller

You decide why and how AI is used in your business, and which documents are entrusted to it.

emi · Apresta

Data processor

Processes data strictly on your behalf, under your instructions, and never for its own purposes.

Our Swiss host

Sub-processor

Operates the Swiss data centers: Infomaniak Network SA, ISO 27001 certified.

Exact legal roles depend on your organization and use cases and are formalized in our Data Processing Agreement.

Individual rights

Five key rights — and how they work in practice

Employees, clients or contacts may ask to exercise their personal data rights. Here is how emi helps you respond smoothly.

Right	In plain English	Inside emi
Access	Know what personal data is held about them and receive a copy.	Handled through your workspace administrator, with our team’s assistance whenever needed.
Rectification	Have inaccurate personal data corrected.	User details (name, department, role) can be edited anytime in Administration; documents can be replaced in the Knowledge Base.
Erasure	Have personal data deleted when no longer needed.	Deleting a document from the Knowledge Base immediately removes it from emi’s answers. Conversations and accounts are deleted upon admin request; at contract end, everything is permanently erased within 60 days.
Portability	Retrieve data in a structured, readable format to move elsewhere.	Original documents and structured conversation exports are available on request (see Data protection).
Objection	Object to specific uses of personal data.	Any document can be toggled off for AI reading, and every user can revoke their own connectors at any time.

Readiness checklist

Are you ready to roll out enterprise AI?

Tick the items already in place in your company. Under each item, see how emi covers it for you.

Your progress25%

2 of 8 item(s)

A good start Several items remain before a worry-free rollout. emi covers most of them out of the box.

30-minute video call

Have a compliance question? Let’s talk it through live.

Bring your legal counsel or DPO along and review with our team what emi changes in practice for your data protection posture.

Book a compliance call Email our team

Answers on Swiss hosting and cross-border data flows

Our Data Processing Agreement (DPA) and processing register details

Open items from your checklist and how emi addresses them

No obligation, scheduled at a time that suits you

Documentation

Available upon request

Need formal documentation for your legal counsel or Data Protection Officer? Just ask and we’ll send it right over.

Dedicated contact: contact@apresta.fr

Data Processing Agreement (DPA)

Sets out exactly how we process your data — and everything we commit never to do with it. Available upon request.

Record of processing details

All practical information needed to add emi to your GDPR processing register. Available upon request.

Sub-processor list

Every infrastructure partner involved in operating emi, along with their hosting country. Available upon request.

Explore next

Trust

Hosting

Follow a request’s journey and review our Swiss host’s certifications.

Read →

Trust

Privacy

Zero training, compartmentalized access, AI charter.

Read →

Resources

FAQ

All answers about emi in one place.

Read →

Questions from your legal team? Let’s tackle them together.

A 30-minute video call to walk through emi and answer every data protection question.

Book a compliance call Browse the FAQ

Book a demo