https://secretsafe.legal/en/changelog/SecretSafe: vendor record changesenhttps://secretsafe.legal/en/vendors/clio/#secrecy_321ss-2026-10-17-clio-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTMutual confidentiality clause (Terms s.4.1); no auxiliary-person (Art. 321 SCC) term found · https://www.clio.com/tos/https://secretsafe.legal/en/vendors/clio/#trainingss-2026-10-17-clio-trainingSat, 17 Oct 2026 10:00:00 GMTNo training of generalised LLMs on confidential information, but Terms allow de-identified, aggregated content and outputs to improve Clio's AI services · https://www.clio.com/tos/https://secretsafe.legal/en/vendors/cocounsel/#secrecy_321ss-2026-10-17-cocounsel-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTGeneral confidentiality: Data Security Addendum commits to protect confidentiality of customer data; DPA binds staff to confidentiality; no auxiliary-person term · https://www.thomsonreuters.com/content/dam/ewp-m/documents/thomsonreuters/en/pdf/information-security/tr-data-security-addendum-november-2023.pdfhttps://secretsafe.legal/en/vendors/cocounsel/#dpass-2026-10-17-cocounsel-dpaSat, 17 Oct 2026 10:00:00 GMTPublic Thomson Reuters DPA v3 (effective 1 Feb 2025; GDPR/CCPA) with Swiss-U.S. DPF; FADP not named · https://www.thomsonreuters.com/content/dam/ewp-m/documents/thomsonreuters/en/pdf/gdpr/global-customer-data-processing-addendum-updated-february.pdfhttps://secretsafe.legal/en/vendors/cocounsel/#certificationsss-2026-10-17-cocounsel-certificationsSat, 17 Oct 2026 10:00:00 GMTThomson Reuters ISO/IEC 27001:2022 certificate (CERT-002113, valid to 2028-10-05) lists CoCounsel Essentials (Core, Drafting, Knowledge Search) in scope; CoCounsel Legal not named in scope · https://www.thomsonreuters.com/content/dam/ewp-m/documents/thomsonreuters/en/pdf/information-security/tr-iso27001-certificate-002113.pdfhttps://secretsafe.legal/en/vendors/deepjudge/#secrecy_321ss-2026-10-17-deepjudge-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTMutual confidentiality clause in Terms of Service; no auxiliary-person (Art. 321 SCC) term found · https://www.deepjudge.ai/termshttps://secretsafe.legal/en/vendors/deepjudge/#dpass-2026-10-17-deepjudge-dpaSat, 17 Oct 2026 10:00:00 GMTPublic DPA incorporated into the terms; names the Swiss Federal Data Protection Act (definitions still cite the 1992 Act) · https://www.deepjudge.ai/dpahttps://secretsafe.legal/en/vendors/harvey/#secrecy_321ss-2026-10-17-harvey-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTMutual confidentiality clause (Terms s.11.6); no auxiliary-person (Art. 321 SCC) term found · https://www.harvey.ai/legal/terms-of-servicehttps://secretsafe.legal/en/vendors/jurata/#certificationsss-2026-10-17-jurata-certificationsSat, 17 Oct 2026 10:00:00 GMTRuns on Microsoft Azure (ISO 27001, SOC 2 Type 2); own ISO 27001 underway, completion stated for Q4 2026 · https://www.jurata.ch/en/enterprise/sicherheithttps://secretsafe.legal/en/vendors/legora/#secrecy_321ss-2026-10-17-legora-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTConfidentiality clause covering Subscriber Content, surviving indefinitely (EU GTC cl. 7); DPA acknowledges law-firm confidentiality rules; no auxiliary-person term · https://legora.com/legal/eu-general-terms-and-conditionshttps://secretsafe.legal/en/vendors/lexis-ai/#storagess-2026-10-17-lexis-ai-storageSat, 17 Oct 2026 10:00:00 GMTAWS hosting in several regions incl. France, Germany, Ireland, UK; "local data hosting" stated for Europe incl. UK; region assigned to Swiss customers not stated · https://www.lexisnexis.com/global/privacy/en/subprocessor.pagehttps://secretsafe.legal/en/vendors/lexis-ai/#inferencess-2026-10-17-lexis-ai-inferenceSat, 17 Oct 2026 10:00:00 GMTProduct page: models process data in the local region (Europe incl. UK); global sub-processor list shows Anthropic (USA), OpenAI (USA) and Google (Global) for Lexis+ AI file uploads · https://www.lexisnexis.com/global/privacy/en/subprocessor.pagehttps://secretsafe.legal/en/vendors/lexis-ai/#cloud_actss-2026-10-17-lexis-ai-cloud_actSat, 17 Oct 2026 10:00:00 GMTRELX group (UK parent) on AWS and US AI providers; US affiliates (RELX Inc.) listed for data-centre operations · https://www.lexisnexis.com/global/privacy/en/subprocessor.pagehttps://secretsafe.legal/en/vendors/lexis-ai/#secrecy_321ss-2026-10-17-lexis-ai-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTGeneral confidentiality claim for client and firm work; DPA requires confidentiality of authorised staff; no auxiliary-person term · https://www.lexisnexis.co.uk/solutions/protege-general-ai.htmlhttps://secretsafe.legal/en/vendors/lexis-ai/#dpass-2026-10-17-lexis-ai-dpaSat, 17 Oct 2026 10:00:00 GMTPublic LexisNexis DPA with Swiss transfer terms: GDPR references read as the FADP, FDPIC as authority · https://www.lexisnexis.com/global/privacy/en/processor-terms.pagehttps://secretsafe.legal/en/vendors/luminance/#secrecy_321ss-2026-10-17-luminance-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTMutual confidentiality clause (Master Agreement cl. 13); no auxiliary-person term · https://www.luminance.com/legal/master-agreementhttps://secretsafe.legal/en/vendors/luminance/#dpass-2026-10-17-luminance-dpaSat, 17 Oct 2026 10:00:00 GMTPublic DPA (GDPR, Art. 28) incorporated into the Master Agreement; Swiss-U.S. DPF certification; FADP not named · https://www.luminance.com/legal/data-processing-addendumhttps://secretsafe.legal/en/vendors/m365-copilot/#secrecy_321ss-2026-10-17-m365-copilot-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTGeneral contractual commitment: data used only as the customer instructs (DPA/Product Terms); no auxiliary-person term · https://learn.microsoft.com/en-us/copilot/microsoft-365/enterprise-data-protectionhttps://secretsafe.legal/en/vendors/m365-copilot/#dpass-2026-10-17-m365-copilot-dpaSat, 17 Oct 2026 10:00:00 GMTCovered by the public Microsoft Products and Services DPA (Microsoft as processor); a Switzerland amendment applies the DPA to the FADP once accepted · https://learn.microsoft.com/en-us/copilot/microsoft-365/enterprise-data-protectionhttps://secretsafe.legal/en/vendors/m365-copilot/#certificationsss-2026-10-17-m365-copilot-certificationsSat, 17 Oct 2026 10:00:00 GMTMicrosoft Copilot lists ISO 27001 and ISO 42001 among its certifications; Microsoft 365 ISO 27001:2022 certificate (2024-2027) · https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-privacyhttps://secretsafe.legal/en/vendors/omnilex/#secrecy_321ss-2026-10-17-omnilex-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTStates it acts as the firm's auxiliary person (Art. 101 CO), bound by Art. 321 SCC; confidentiality covered in licence agreement (agreement not public) · https://omnilex.ai/en/law-firmshttps://secretsafe.legal/en/vendors/omnilex/#trainingss-2026-10-17-omnilex-trainingSat, 17 Oct 2026 10:00:00 GMTTraining on customer data excluded by contract · https://omnilex.ai/en/governmenthttps://secretsafe.legal/en/vendors/rechtski/#secrecy_321ss-2026-10-17-rechtski-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTGeneral confidentiality: staff confidentiality commitments in TOMs; no auxiliary-person (Art. 321 SCC) term found · https://www.rechtski.ch/en/privacy-policy/https://secretsafe.legal/en/vendors/rechtski/#dpass-2026-10-17-rechtski-dpaSat, 17 Oct 2026 10:00:00 GMTDPA under FADP/GDPR offered "if necessary" per GTC; DPAs with own sub-processors per Art. 9 nDSG; customer DPA not published · https://www.rechtski.ch/en/terms-and-conditions/https://secretsafe.legal/en/vendors/rechtski/#trainingss-2026-10-17-rechtski-trainingSat, 17 Oct 2026 10:00:00 GMTNo AI training with customer data; Azure OpenAI contractually excludes training on customer data · https://www.rechtski.ch/en/data-protection/https://secretsafe.legal/en/vendors/rechtski/#certificationsss-2026-10-17-rechtski-certificationsSat, 17 Oct 2026 10:00:00 GMTInfrastructure only: Safe Swiss Cloud ISO 27001; Azure/Firebase certifications listed; no own certification stated · https://www.rechtski.ch/en/privacy-policy/https://secretsafe.legal/en/vendors/silex/#secrecy_321ss-2026-10-17-silex-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTContractual confidentiality expressly covering information protected by Art. 321 SCC and the LLCA, extended to staff and sub-processors; no auxiliary-person status term · https://silex.legal/conditions-generales-dutilisationhttps://secretsafe.legal/en/vendors/silex/#dpass-2026-10-17-silex-dpaSat, 17 Oct 2026 10:00:00 GMTDPA agreed with customers (referenced in CGU, sub-processors in its Annex A); acts as processor under the DSG; DPA not public · https://silex.legal/conditions-generales-dutilisationhttps://secretsafe.legal/en/vendors/spellbook/#secrecy_321ss-2026-10-17-spellbook-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTTerms acknowledge lawyer-client privilege and treat customer data as Confidential Information; no Swiss auxiliary-person term · https://spellbook.com/legal/terms-of-servicehttps://secretsafe.legal/en/vendors/spellbook/#dpass-2026-10-17-spellbook-dpaSat, 17 Oct 2026 10:00:00 GMTProcessing terms built into the Terms of Service (sub-processors listed in trust center); GDPR listed in trust center; no standalone customer DPA or FADP reference found · https://spellbook.com/legal/terms-of-servicehttps://secretsafe.legal/en/vendors/swisslex/#secrecy_321ss-2026-10-17-swisslex-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTGeneral confidentiality (staff confidentiality agreements); AGB s.7 tells users not to enter client data unless a function is intended for it; no auxiliary-person term · https://www.swisslex.ch/de/legal/agbhttps://secretsafe.legal/en/vendors/weblaw/#storagess-2026-10-17-weblaw-storageSat, 17 Oct 2026 10:00:00 GMTLawsearch Enterprise AI: Swiss cloud or the firm's own servers (on-premises) · https://weblaw.ch/community/newsatweblaw/2026/lawsearch--ki-recherche-mit-schweizer-datenschutz---weblaw.htmlhttps://secretsafe.legal/en/vendors/weblaw/#inferencess-2026-10-17-weblaw-inferenceSat, 17 Oct 2026 10:00:00 GMTDefault: OpenAI frontier models hosted on Microsoft Azure in Switzerland; customer may choose other models, incl. Swiss AI (Lawsearch Enterprise AI, per 28.09.2026 announcement) · https://weblaw.ch/community/newsatweblaw/2026/lawsearch--ki-recherche-mit-schweizer-datenschutz---weblaw.htmlhttps://secretsafe.legal/en/vendors/weblaw/#cloud_actss-2026-10-17-weblaw-cloud_actSat, 17 Oct 2026 10:00:00 GMTSwiss vendor; default AI on Microsoft Azure Switzerland (US parent); Swiss cloud, Swiss models or on-premises selectable · https://weblaw.ch/community/newsatweblaw/2026/lawsearch--ki-recherche-mit-schweizer-datenschutz---weblaw.htmlhttps://secretsafe.legal/en/vendors/silex/#cloud_actss-2026-10-17-silex-cloud_actSat, 17 Oct 2026 10:00:00 GMTData at rest on Swiss-owned Infomaniak; inference on Azure Switzerland North; vendor acknowledges residual CLOUD Act exposure during in-memory inference, Swiss GPUs planned for 2027 · https://silex.legal/de/datenschutzrichtliniehttps://secretsafe.legal/en/vendors/swisslex/#dpass-2026-10-17-swisslex-dpaSat, 17 Oct 2026 10:00:00 GMTnot disclosedhttps://secretsafe.legal/en/vendors/weblaw/#trainingss-2026-10-17-weblaw-trainingSat, 17 Oct 2026 10:00:00 GMTnot disclosedhttps://secretsafe.legal/en/vendors/clio/#dpass-2026-10-17-clio-dpaSat, 17 Oct 2026 10:00:00 GMTThemis Data Processing Addendum; GDPR compliance stated · https://www.clio.com/tos/subprocessors/https://secretsafe.legal/en/vendors/clio/#certificationsss-2026-10-17-clio-certificationsSat, 17 Oct 2026 10:00:00 GMTAnnual SOC 2 Type II and SOC 1 Type II · https://www.clio.com/security/https://secretsafe.legal/en/vendors/cocounsel/#inferencess-2026-10-17-cocounsel-inferenceSat, 17 Oct 2026 10:00:00 GMTOpenAI GPT and Google Gemini interactions processed in the U.S. · https://www.thomsonreuters.com/en/cocounselhttps://secretsafe.legal/en/vendors/cocounsel/#cloud_actss-2026-10-17-cocounsel-cloud_actSat, 17 Oct 2026 10:00:00 GMTUS processing by US providers · https://www.thomsonreuters.com/en/cocounselhttps://secretsafe.legal/en/vendors/jurata/#dpass-2026-10-17-jurata-dpaSat, 17 Oct 2026 10:00:00 GMTDPA under Art. 9 DSG / Art. 28 GDPR concluded with customers (per opinion); DPA not public · https://juratapublicassets.blob.core.windows.net/public-assets/documents/2026-08-11%20Kurzbesta%CC%88tigung%20Walder%20Wyss%20Berufsgeheimniskonformita%CC%88t%20Jurata%20Legal%20Agent.pdfhttps://secretsafe.legal/en/vendors/jurata/#certificationsss-2026-10-17-jurata-certificationsSat, 17 Oct 2026 10:00:00 GMTRuns on Microsoft Azure (ISO 27001, SOC 2 Type 2); own ISO 27001 underway, completion stated for Q4 2026https://secretsafe.legal/en/vendors/ketl/#secrecy_321ss-2026-10-17-ketl-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTClaims Art. 321 SCC compliance 'built into technical architecture'; no contractual auxiliary-person term found · https://www.ketl.ch/en/abouthttps://secretsafe.legal/en/vendors/lexis-ai/#storagess-2026-10-17-lexis-ai-storageSat, 17 Oct 2026 10:00:00 GMTAWS hosting in several regions incl. France, Germany, Ireland, UK; "local data hosting" stated for Europe incl. UK; region assigned to Swiss customers not statedhttps://secretsafe.legal/en/vendors/lexis-ai/#inferencess-2026-10-17-lexis-ai-inferenceSat, 17 Oct 2026 10:00:00 GMTProduct page: models process data in the local region (Europe incl. UK); global sub-processor list shows Anthropic (USA), OpenAI (USA) and Google (Global) for Lexis+ AI file uploads · https://www.lexisnexis.co.uk/solutions/protege-general-ai.htmlhttps://secretsafe.legal/en/vendors/lexis-ai/#certificationsss-2026-10-17-lexis-ai-certificationsSat, 17 Oct 2026 10:00:00 GMTSOC 2 Type 2 and ISO/IEC 27001 listed · https://trust.lexisnexis.com/https://secretsafe.legal/en/vendors/luminance/#inferencess-2026-10-17-luminance-inferenceSat, 17 Oct 2026 10:00:00 GMTCore: not sent to external model provider; optional generative features via Azure/Google/OpenAI, location set by customer · https://www.luminance.com/legal/subprocessorshttps://secretsafe.legal/en/vendors/omnilex/#dpass-2026-10-17-omnilex-dpaSat, 17 Oct 2026 10:00:00 GMTDPA template included in licence agreement (Trust Center) · https://trust.omnilex.ai/https://secretsafe.legal/en/vendors/omnilex/#trainingss-2026-10-17-omnilex-trainingSat, 17 Oct 2026 10:00:00 GMTTraining on customer data excluded by contracthttps://secretsafe.legal/en/vendors/silex/#inferencess-2026-10-17-silex-inferenceSat, 17 Oct 2026 10:00:00 GMTSelf-hosted LLMs on Azure Switzerland North (ephemeral); no data sent to external AI providers · https://silex.legal/en/securityhttps://secretsafe.legal/en/vendors/silex/#trainingss-2026-10-17-silex-trainingSat, 17 Oct 2026 10:00:00 GMTUser data never trains or fine-tunes the models · https://silex.legal/en/securityhttps://secretsafe.legal/en/vendors/swiss-noxtua/#dpass-2026-10-17-swiss-noxtua-dpaSat, 17 Oct 2026 10:00:00 GMTActs as Auftragsbearbeiter under DSG and GDPR; processing terms in AGB · https://swiss-noxtua.ch/agb.htmlhttps://secretsafe.legal/en/vendors/swiss-noxtua/#trainingss-2026-10-17-swiss-noxtua-trainingSat, 17 Oct 2026 10:00:00 GMTInputs used only to fulfil the request, not for training · https://swiss-noxtua.ch/sicherheit/https://secretsafe.legal/en/vendors/swiss-noxtua/#certificationsss-2026-10-17-swiss-noxtua-certificationsSat, 17 Oct 2026 10:00:00 GMTISO 27001, 27017, 27018, 42001, BSI C5 listed for Noxtua (technology partner), not the Swiss entity · https://swiss-noxtua.ch/sicherheit/https://secretsafe.legal/en/vendors/weblaw/#storagess-2026-10-17-weblaw-storageSat, 17 Oct 2026 10:00:00 GMTLawsearch Enterprise AI: Swiss cloud or the firm's own servers (on-premises) · https://lawsearch.weblaw.ch/lawsearchhttps://secretsafe.legal/en/vendors/weblaw/#inferencess-2026-10-17-weblaw-inferenceSat, 17 Oct 2026 10:00:00 GMTDefault: OpenAI frontier models hosted on Microsoft Azure in Switzerland; customer may choose other models, incl. Swiss AI (Lawsearch Enterprise AI, per 28.09.2026 announcement) · https://lawsearch.weblaw.ch/lawsearchhttps://secretsafe.legal/en/vendors/weblaw/#cloud_actss-2026-10-17-weblaw-cloud_actSat, 17 Oct 2026 10:00:00 GMTSwiss vendor; default AI on Microsoft Azure Switzerland (US parent); Swiss cloud, Swiss models or on-premises selectable · https://lawsearch.weblaw.ch/lawsearchhttps://secretsafe.legal/en/vendors/weblaw/#trainingss-2026-10-17-weblaw-trainingSat, 17 Oct 2026 10:00:00 GMTnot disclosedhttps://secretsafe.legal/en/vendors/casus/#storagess-2026-10-17-casus-storageSat, 17 Oct 2026 10:00:00 GMTSwitzerland (Google Cloud Zurich, europe-west6) · https://www.getcasus.com/securityhttps://secretsafe.legal/en/vendors/casus/#inferencess-2026-10-17-casus-inferenceSat, 17 Oct 2026 10:00:00 GMTCH + EU only: Google Vertex AI Belgium; Azure OpenAI Switzerland North & Sweden Central; zero data retention; no US inference · https://www.getcasus.com/securityhttps://secretsafe.legal/en/vendors/casus/#cloud_actss-2026-10-17-casus-cloud_actSat, 17 Oct 2026 10:00:00 GMTSwiss vendor, but storage and inference run on US-parent hyperscalers (Google, Microsoft) · https://www.getcasus.com/securityhttps://secretsafe.legal/en/vendors/casus/#secrecy_321ss-2026-10-17-casus-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTTerms of Service recognise CASUS and staff as auxiliary persons (Art. 321 SCC); Hilfsperson status listed as contractual commitment · https://trust.getcasus.com/https://secretsafe.legal/en/vendors/casus/#dpass-2026-10-17-casus-dpaSat, 17 Oct 2026 10:00:00 GMTDPA listed in Trust Center; states revFADP compliance · https://trust.getcasus.com/https://secretsafe.legal/en/vendors/casus/#trainingss-2026-10-17-casus-trainingSat, 17 Oct 2026 10:00:00 GMTNo training or fine-tuning, by CASUS or model providers (contractual) · https://www.getcasus.com/securityhttps://secretsafe.legal/en/vendors/casus/#certificationsss-2026-10-17-casus-certificationsSat, 17 Oct 2026 10:00:00 GMTInfrastructure (Google Cloud, Azure) ISO 27001; no own certification stated · https://www.getcasus.com/https://secretsafe.legal/en/vendors/clio/#storagess-2026-10-17-clio-storageSat, 17 Oct 2026 10:00:00 GMTHosting choice incl. Europe (AWS EU) · https://www.clio.com/security/https://secretsafe.legal/en/vendors/clio/#inferencess-2026-10-17-clio-inferenceSat, 17 Oct 2026 10:00:00 GMTAI processed in customer's region per Clio; AI subprocessors AWS Bedrock, OpenAI, Google, Azure (US/EU) but Anthropic listed US-only · https://www.clio.com/tos/subprocessors/https://secretsafe.legal/en/vendors/clio/#cloud_actss-2026-10-17-clio-cloud_actSat, 17 Oct 2026 10:00:00 GMTCanadian vendor; US-parent AI and hosting subprocessors · https://www.clio.com/tos/subprocessors/https://secretsafe.legal/en/vendors/clio/#trainingss-2026-10-17-clio-trainingSat, 17 Oct 2026 10:00:00 GMTNo training of generalised LLMs on confidential information, but Terms allow de-identified, aggregated content and outputs to improve Clio's AI services · https://www.clio.com/security/https://secretsafe.legal/en/vendors/cocounsel/#storagess-2026-10-17-cocounsel-storageSat, 17 Oct 2026 10:00:00 GMTUS standard; region-based hosting in UK, Australia, Canada; no EU region stated · https://www.thomsonreuters.com/en/cocounselhttps://secretsafe.legal/en/vendors/cocounsel/#trainingss-2026-10-17-cocounsel-trainingSat, 17 Oct 2026 10:00:00 GMTNot used to train CoCounsel or LLMs, not stored by OpenAI/Google · https://www.thomsonreuters.com/en/cocounselhttps://secretsafe.legal/en/vendors/deepjudge/#storagess-2026-10-17-deepjudge-storageSat, 17 Oct 2026 10:00:00 GMTChoice of DeepJudge cloud, customer cloud or on-premises · https://www.deepjudge.ai/securityhttps://secretsafe.legal/en/vendors/deepjudge/#inferencess-2026-10-17-deepjudge-inferenceSat, 17 Oct 2026 10:00:00 GMTChoice of AI model and residency; default not stated · https://www.deepjudge.ai/securityhttps://secretsafe.legal/en/vendors/deepjudge/#cloud_actss-2026-10-17-deepjudge-cloud_actSat, 17 Oct 2026 10:00:00 GMTDepends on deployment; on-prem option available · https://www.deepjudge.ai/securityhttps://secretsafe.legal/en/vendors/deepjudge/#certificationsss-2026-10-17-deepjudge-certificationsSat, 17 Oct 2026 10:00:00 GMTSOC 2 Type II and ISO 27001 · https://www.deepjudge.ai/securityhttps://secretsafe.legal/en/vendors/harvey/#inferencess-2026-10-17-harvey-inferenceSat, 17 Oct 2026 10:00:00 GMTEU/CH processing option applies to subprocessors; Anthropic listed US-only (may be reached via Bedrock/Vertex) · https://www.harvey.ai/legal/subprocessorshttps://secretsafe.legal/en/vendors/harvey/#cloud_actss-2026-10-17-harvey-cloud_actSat, 17 Oct 2026 10:00:00 GMTUS vendor (Harvey AI Corp) and US subprocessors · https://www.harvey.ai/legal/subprocessorshttps://secretsafe.legal/en/vendors/harvey/#dpass-2026-10-17-harvey-dpaSat, 17 Oct 2026 10:00:00 GMTSecurity Addendum; Swiss-U.S. DPF certified · https://www.harvey.ai/legal/privacy-policyhttps://secretsafe.legal/en/vendors/harvey/#trainingss-2026-10-17-harvey-trainingSat, 17 Oct 2026 10:00:00 GMTNo training, contractual; ZDR required of model providers · https://www.harvey.ai/securityhttps://secretsafe.legal/en/vendors/jurata/#storagess-2026-10-17-jurata-storageSat, 17 Oct 2026 10:00:00 GMTSwitzerland, Microsoft Azure Switzerland North · https://www.jurata.ch/en/enterprise/sicherheithttps://secretsafe.legal/en/vendors/jurata/#inferencess-2026-10-17-jurata-inferenceSat, 17 Oct 2026 10:00:00 GMTSwitzerland and EU (Azure), never in the USA; zero data retention at LLM provider · https://www.jurata.ch/en/enterprise/sicherheithttps://secretsafe.legal/en/vendors/jurata/#cloud_actss-2026-10-17-jurata-cloud_actSat, 17 Oct 2026 10:00:00 GMTSwiss vendor hosted on Microsoft (US parent) · https://www.jurata.ch/en/enterprise/sicherheithttps://secretsafe.legal/en/vendors/jurata/#secrecy_321ss-2026-10-17-jurata-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTJurata engaged as Hilfsperson under Art. 321 StGB and expressly acknowledges secrecy (Walder Wyss opinion, 11 Aug 2026) · https://juratapublicassets.blob.core.windows.net/public-assets/documents/2026-08-11%20Kurzbesta%CC%88tigung%20Walder%20Wyss%20Berufsgeheimniskonformita%CC%88t%20Jurata%20Legal%20Agent.pdfhttps://secretsafe.legal/en/vendors/jurata/#trainingss-2026-10-17-jurata-trainingSat, 17 Oct 2026 10:00:00 GMTNo use of data for training · https://www.jurata.ch/en/enterprise/sicherheithttps://secretsafe.legal/en/vendors/ketl/#storagess-2026-10-17-ketl-storageSat, 17 Oct 2026 10:00:00 GMTSwiss datacentres in Geneva and Zurich, operated by Swiss companies · https://www.ketl.ch/en/abouthttps://secretsafe.legal/en/vendors/ketl/#inferencess-2026-10-17-ketl-inferenceSat, 17 Oct 2026 10:00:00 GMTProprietary models developed, trained and hosted in Switzerland; no third-party LLM · https://www.ketl.ch/en/abouthttps://secretsafe.legal/en/vendors/ketl/#cloud_actss-2026-10-17-ketl-cloud_actSat, 17 Oct 2026 10:00:00 GMTSwiss vendor; Swiss infrastructure (Exoscale, Infomaniak) per vendor · https://www.ketl.ch/en/blogs/legal-ai-solutions-comparisonhttps://secretsafe.legal/en/vendors/ketl/#certificationsss-2026-10-17-ketl-certificationsSat, 17 Oct 2026 10:00:00 GMTNo vendor certification stated; host Infomaniak is ISO 27001 · https://www.infomaniak.com/en/trust-centerhttps://secretsafe.legal/en/vendors/legora/#storagess-2026-10-17-legora-storageSat, 17 Oct 2026 10:00:00 GMTEU/EEA region (Microsoft Ireland hosting) selectable · https://legora.com/legal/eu-pre-approved-sub-processorshttps://secretsafe.legal/en/vendors/legora/#inferencess-2026-10-17-legora-inferenceSat, 17 Oct 2026 10:00:00 GMTEU/EEA subprocessors incl. Microsoft and OpenAI Ireland; processing outside EU needs consent · https://legora.com/legal/eu-data-processing-agreementhttps://secretsafe.legal/en/vendors/legora/#trainingss-2026-10-17-legora-trainingSat, 17 Oct 2026 10:00:00 GMTWill not use data to train or fine-tune any AI models · https://legora.com/securityhttps://secretsafe.legal/en/vendors/legora/#certificationsss-2026-10-17-legora-certificationsSat, 17 Oct 2026 10:00:00 GMTISO/IEC 27001:2022 (audited yearly); SOC 2 requirements claimed · https://legora.com/legal/security-measureshttps://secretsafe.legal/en/vendors/lexis-ai/#trainingss-2026-10-17-lexis-ai-trainingSat, 17 Oct 2026 10:00:00 GMTDoes not train or fine-tune AI models on customer data · https://trust.lexisnexis.com/https://secretsafe.legal/en/vendors/luminance/#storagess-2026-10-17-luminance-storageSat, 17 Oct 2026 10:00:00 GMTCustomer-selected AWS region, backups in same region · https://www.luminance.com/legal/technical-organisational-measureshttps://secretsafe.legal/en/vendors/luminance/#cloud_actss-2026-10-17-luminance-cloud_actSat, 17 Oct 2026 10:00:00 GMTUK vendor on AWS; optional US-parent AI providers · https://www.luminance.com/legal/subprocessorshttps://secretsafe.legal/en/vendors/luminance/#trainingss-2026-10-17-luminance-trainingSat, 17 Oct 2026 10:00:00 GMTLicence to use customer data for product improvement/private learning; usage insights exclude confidential info · https://www.luminance.com/legal/master-agreementhttps://secretsafe.legal/en/vendors/luminance/#certificationsss-2026-10-17-luminance-certificationsSat, 17 Oct 2026 10:00:00 GMTISO/IEC 27001 (certificate on request) · https://www.luminance.com/legal/technical-organisational-measureshttps://secretsafe.legal/en/vendors/m365-copilot/#inferencess-2026-10-17-m365-copilot-inferenceSat, 17 Oct 2026 10:00:00 GMTEU Data Boundary; flex routing can process outside (US, CA, AU) unless disabled · https://learn.microsoft.com/en-us/privacy/eudb/eu-data-boundary-ongoing-partial-transfershttps://secretsafe.legal/en/vendors/m365-copilot/#cloud_actss-2026-10-17-m365-copilot-cloud_actSat, 17 Oct 2026 10:00:00 GMTUS vendor · https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-privacyhttps://secretsafe.legal/en/vendors/m365-copilot/#trainingss-2026-10-17-m365-copilot-trainingSat, 17 Oct 2026 10:00:00 GMTPrompts, responses and Graph data not used to train foundation LLMs · https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-privacyhttps://secretsafe.legal/en/vendors/omnilex/#storagess-2026-10-17-omnilex-storageSat, 17 Oct 2026 10:00:00 GMTMicrosoft Azure, Zurich · https://omnilex.ai/en-ushttps://secretsafe.legal/en/vendors/omnilex/#inferencess-2026-10-17-omnilex-inferenceSat, 17 Oct 2026 10:00:00 GMTSwitzerland and selected EU countries recognised by FDPIC · https://omnilex.ai/en-ushttps://secretsafe.legal/en/vendors/omnilex/#cloud_actss-2026-10-17-omnilex-cloud_actSat, 17 Oct 2026 10:00:00 GMTSwiss vendor hosted on Microsoft (US parent) · https://omnilex.ai/en-ushttps://secretsafe.legal/en/vendors/rechtski/#storagess-2026-10-17-rechtski-storageSat, 17 Oct 2026 10:00:00 GMTExclusively in Switzerland (Safe Swiss Cloud) · https://www.rechtski.ch/en/legal-ai-comparison/https://secretsafe.legal/en/vendors/rechtski/#inferencess-2026-10-17-rechtski-inferenceSat, 17 Oct 2026 10:00:00 GMTDefault: Microsoft Azure Switzerland North; Swiss LLM mode selectable per request · https://www.rechtski.ch/en/legal-ai-comparison/https://secretsafe.legal/en/vendors/rechtski/#cloud_actss-2026-10-17-rechtski-cloud_actSat, 17 Oct 2026 10:00:00 GMTDefault inference on Microsoft (US parent); Swiss-only mode optional · https://www.rechtski.ch/en/legal-ai-comparison/https://secretsafe.legal/en/vendors/silex/#storagess-2026-10-17-silex-storageSat, 17 Oct 2026 10:00:00 GMTInfomaniak, Geneva (Swiss-owned), incl. backups; no client data stored on Azure · https://silex.legal/en/securityhttps://secretsafe.legal/en/vendors/silex/#cloud_actss-2026-10-17-silex-cloud_actSat, 17 Oct 2026 10:00:00 GMTData at rest on Swiss-owned Infomaniak; inference on Azure Switzerland North; vendor acknowledges residual CLOUD Act exposure during in-memory inference, Swiss GPUs planned for 2027 · https://silex.legal/en/securityhttps://secretsafe.legal/en/vendors/silex/#certificationsss-2026-10-17-silex-certificationsSat, 17 Oct 2026 10:00:00 GMTISO 27001 in progress, targeted Q3 2026 (not yet certified per page) · https://silex.legal/en/securityhttps://secretsafe.legal/en/vendors/spellbook/#trainingss-2026-10-17-spellbook-trainingSat, 17 Oct 2026 10:00:00 GMTThird-party LLMs contractually barred from training on customer data · https://spellbook.com/legal/terms-of-servicehttps://secretsafe.legal/en/vendors/swiss-noxtua/#storagess-2026-10-17-swiss-noxtua-storageSat, 17 Oct 2026 10:00:00 GMTSwiss T Cloud Public (T-Systems Schweiz AG, Zollikofen) · https://swiss-noxtua.ch/sicherheit/https://secretsafe.legal/en/vendors/swiss-noxtua/#inferencess-2026-10-17-swiss-noxtua-inferenceSat, 17 Oct 2026 10:00:00 GMTDefault Athena model processed in Switzerland; optional 'Minerva' routes to frontier models in EU or CH via named subprocessors · https://swiss-noxtua.ch/sicherheit/https://secretsafe.legal/en/vendors/swiss-noxtua/#cloud_actss-2026-10-17-swiss-noxtua-cloud_actSat, 17 Oct 2026 10:00:00 GMTDefault stack independent of US hyperscalers per vendor; Minerva option may use other providers · https://swiss-noxtua.ch/sicherheit/https://secretsafe.legal/en/vendors/swiss-noxtua/#secrecy_321ss-2026-10-17-swiss-noxtua-secrecy_321Sat, 17 Oct 2026 10:00:00 GMTTerms bind provider, staff and subprocessors as Hilfspersonen under Art. 321 StGB · https://swiss-noxtua.ch/agb.htmlhttps://secretsafe.legal/en/vendors/swisslex/#storagess-2026-10-17-swisslex-storageSat, 17 Oct 2026 10:00:00 GMTDedicated servers in Swiss data centres, accessible only to Swisslex · https://www.swisslex.ch/en/legal/privacyhttps://secretsafe.legal/en/vendors/swisslex/#inferencess-2026-10-17-swisslex-inferenceSat, 17 Oct 2026 10:00:00 GMTOwn servers in Switzerland, adapted open-source models; no data exchange with AI manufacturers · https://www.swisslex.ch/en/legal/aihttps://secretsafe.legal/en/vendors/swisslex/#cloud_actss-2026-10-17-swisslex-cloud_actSat, 17 Oct 2026 10:00:00 GMTSwiss vendor; no external AI provider per vendor · https://www.swisslex.ch/en/legal/aihttps://secretsafe.legal/en/vendors/swisslex/#trainingss-2026-10-17-swisslex-trainingSat, 17 Oct 2026 10:00:00 GMTNo training of AI models with user data · https://www.swisslex.ch/en/legal/ai