Protecting your data is our highest priority.
Moodtalk is built to recognised security and data protection standards. Here you will find where your data is held, how it is protected and why responses stay anonymous.
Hosting in Switzerland and the EU
Applications, databases, data storage and backups run in Microsoft Azure Switzerland North. The AI features run as a private OpenAI instance in an Azure region inside the EU.
GDPR and FADP compliant
Moodtalk processes personal data as a processor on behalf of the customer (the controller), under the EU GDPR (Art. 28) and the Swiss FADP. No data is sold or passed on to third parties.
Encrypted and certified
Encryption in transit and at rest, backups with AES-256. The data centre is ISO 27001 certified (as well as SOC 1/2/3, ISO 27017/27018/27701 and FINMA, among others). All external access passes through a web application firewall (OWASP CRS 3.2).
Anonymous by design
Responses are treated confidentially and displayed anonymously. Only profile details made visible with explicit consent are shown. Responses are never traced back to individuals.
Security and data protection in detail
What data is collected
Work email address, work-related feedback and collaboration preferences. Not collected: full names (except for team leads), personal identification data or location data.
Access and training
Internal access is granted on a need-to-know basis only and with two-factor authentication, reviewed quarterly. All employees undergo background checks and annual cybersecurity training.
Backup and disaster recovery
Daily snapshots plus log backups every 5 minutes, encrypted with AES-256. Identical PROD and INTG environments with failover; disaster recovery is tested annually.
Incident reporting
Security incidents are reported to the controller within 48 hours. All data access (viewing, changing, deleting) is logged.
Rights of data subjects
Access, rectification, erasure, restriction, data portability and objection are fully supported. At the end of the contract, data is deleted or returned.
Use of AI
AI is used for summaries, conversation prompts and suggested actions. It runs in a private instance in the EU, separate from public models.
Sub-processors
Moodtalk works with carefully vetted sub-processors. Changes are announced 30 days in advance.
Documents
The complete Trust Center documents — for security questionnaires, tenders or DPA requests, for example — are available here for download (PDF).
- Auftragsverarbeitungsvertrag (DPA / AVV) PDF
- Cloud Solution Provider PDF
- Backup-Plan PDF
- Disaster-Recovery-Plan PDF
- Personal Data PDF
- Users, Roles, Responsibilities PDF
- Handelsregisterauszug PDF
These documents are currently available in German only. We are happy to provide an English version on request.
Contact
We are happy to answer questions about security, data protection or the processing of your data. We will also send you the documents you need.
Trust Center and data protection:
support@moodtalk.ch
General enquiries:
hello@moodtalk.ch