Skip to main content

Trust Center

Everything you need to evaluate how Zation handles security, privacy, and compliance — in one place. This is the landing page for our public trust and legal documentation, and the reference our customers, partners, and auditors start from.

Our commitment​

Zation builds Microsoft-native, Swiss-made FinOps tooling. We treat security, data protection, and sustainability as product features, not afterthoughts. Our platform processes configuration, cost, and telemetry data from customer tenants — no content of any kind: no mail, no files, no chat messages, no Copilot prompts or responses, no Dynamics 365 records.

Licence optimisation is a per-user calculation, so the Platform does process personal data about your users — display name, user principal name, job title, department, and usage counters. That is the data the analysis needs, and nothing beyond it.

Privacy Mode puts that identity under your control: you can replace it with a pseudonymous identifier across the Platform, and choose per download how much identity a generated report carries. The setting is yours to change, applies to data already collected, and is fully reversible. That page also sets out what the control covers and what it does not.

Data stays in Switzerland North, and every customer's data is logically isolated and enforced server-side.

Standards and basis​

Our security, privacy, and sustainability documentation is built on established data-protection law and recognised industry best practice, in particular the Swiss Federal Act on Data Protection (revDSG) and the EU GDPR. The documents below set out in detail how we apply them.

Security​

  • Security & Trust — the technical and organizational measures we apply: customer isolation, Swiss data residency, encryption, secrets management, logging, and our permanent audit trail.
  • Vulnerability Disclosure — how to report a security issue to us responsibly.

Privacy & data protection​

  • Privacy Policy — how we handle personal data under the Swiss revDSG and the GDPR.
  • Privacy Mode — replacing user identity with a pseudonymous identifier, the three report transparency levels, and the documented limits of both.
  • Data Processing Agreement (DPA) — our contractual data processing terms for customers.
  • Sub-Processors — the third parties we rely on and what they process.

Terms & conduct​

Responsible AI & sustainability​

Company​

  • Imprint — legal entity and contact details.

Contact​

For security, privacy, or compliance questions not answered here, reach us at trust@zation.io.