Your privacy is a priority, not an afterthought. We believe in transparency, user control, and responsible data practices. That means collecting only the information we need, keeping it secure, and giving you full visibility into how it's used.
devguard AG, Gussstrasse 10, 8180 Bülach, Switzerland, email [email protected] (company number CHE-337.485.768), hereinafter referred to as “devguard,” a company represented by Angelo Dini and Vadim Sikora as responsible persons, is the operator of the website www.devguard.ch and its subdomains and is therefore responsible for the collection, processing, and use of your personal data and for ensuring that data processing complies with applicable law.
This privacy policy applies to all online offerings of devguard AG, in particular to the main website www.devguard.ch and all subdomains and subordinate services (e.g., app.devguard.ch, frameworks.devguard.ch, auth.devguard.ch, and others, hereinafter collectively referred to as the “website”).
devguard takes data protection seriously and ensures appropriate security measures are in place. Naturally, devguard complies with the legal provisions of the Swiss Federal Act on Data Protection (DSG), the Swiss Ordinance to the Federal Act on Data Protection (VDSG), the Swiss Telecommunications Act (FMG), and, where applicable, other data protection regulations, in particular the General Data Protection Regulation of the European Union (DSGVO).
For reasons of better readability, the masculine form is used in this privacy policy for personal designations and specific nouns. Corresponding terms apply to all genders in the sense of equal treatment. The abbreviated language form is used exclusively for editorial reasons and does not imply any value judgment.
Please read the following information to understand what personal data devguard collects from you and for what purposes it is used.
devguard does not engage in profiling and does not use automated decision-making procedures within the meaning of Art. 22 DSGVO or Art. 5 lit. f DSG. Personal data is not processed for the purpose of creating personal profiles or for automated decision-making.
The personal data collected by devguard:
devguard processes personal data to provide its services and perform its contracts, to meet legal obligations, for its legitimate interests (such as operating, securing and improving the website and the platform), or with your consent where consent is needed.
Where processing is based on consent, the user can revoke it at any time (by emailing [email protected]). Revoking consent does not affect the legality of the processing carried out based on consent before revocation.
When visiting www.devguard.ch and its subdomains
When visiting www.devguard.ch and its subdomains, the servers temporarily store each access in a log file. The following data is collected without the user's intervention and stored until it is automatically deleted after 30 to 90 days, depending on the service:
Join the teams making compliance effortless. Start free, no setup friction, and stay continuously audit ready.
This data is collected and processed to enable service use (connection establishment), ensure system security and stability, optimize the Internet offering, and support internal statistical purposes. The IP address is used, in particular, to record the user's country of residence and to set the website's language accordingly. Furthermore, the IP address is evaluated in the event of attacks on the devguard network infrastructure and for statistical purposes.
When registering for the newsletter
Users can subscribe to the newsletter during registration on the website. The following data must be provided:
The above data is required for data processing. devguard collects this data exclusively to better tailor the information sent to users based on their interests.
When the user registers with devguard, devguard sends them an activation email. The user can then subscribe to the newsletter in their profile. Only after subscribing will their email address be added to the distribution list.
The user can revoke their consent at any time with future effect by using the unsubscribe link in the newsletter or deactivating the newsletter in the application. In the event of revocation, the user's data will be deleted from the newsletter distribution list, unless there is another legal obligation to retain it.
By registering, the user grants devguard their consent to process the data provided for the purpose of sending the newsletter to the address they have provided, as well as for statistical evaluation of usage behavior and optimization of the newsletter.
At the end of each newsletter, there is a link the user can use to unsubscribe at any time. When unsubscribing, the user can voluntarily provide the reason for unsubscribing.
The newsletter is sent via the mailing service provider “Amazon Simple Email Service (SES)”, an email and newsletter mailing platform from the US provider Amazon. You can view Amazon's privacy policy here. The mailing service provider is used based on devguard's legitimate interests in accordance with Art. 6 (1) lit. f DSGVO.
The mailing service provider may use the recipients' data in pseudonymous form, i.e., without assigning it to a user, to optimize or improve its own services, e.g., for technical optimization of mailing and newsletter presentation or for statistical purposes. However, the mailing service provider does not use the data of newsletter recipients to write to them itself or to pass it on to third parties.
devguard uses third-party email marketing services to send the newsletter. The newsletter may therefore contain a so-called web beacon (tracking pixel) or similar technical means. A web beacon is a 1x1-pixel invisible graphic associated with the user ID of the respective newsletter subscriber.
The use of such services enables the evaluation of whether emails were opened via the newsletter. In addition, the click behavior of newsletter recipients can also be recorded and evaluated. devguard uses this data for statistical purposes and to optimize the newsletter's content and structure. The tracking pixel is deleted when you delete the newsletter.
To prevent tracking pixels in the newsletter, please set your email program not to display HTML messages.
Registration and Customer Account
It is possible to register and open a customer account. To do so, the following data must be provided:
The above data is required for data processing. devguard processes this data exclusively to personalize the information and offers sent to you and to better tailor them to your interests.
It may happen that content or services from third-party providers, such as city maps or fonts from other websites, are integrated into devguard's online offering. The integration of content from such third-party providers always requires that they collect users' IP addresses. Without the IP address, the content cannot be sent to the respective browser. The IP address is therefore necessary for the display of this content. Furthermore, third parties may set their own cookies and process user data for their own purposes. Usage profiles may be created from the processed data. devguard uses this content in a manner that is as data-minimizing and data-avoiding as possible and selects reliable third-party providers with regard to data security.
The following overview provides information about third-party providers and their content, along with links to their privacy policies, which contain further information about their data processing practices:
To fulfill contracts, devguard uses one or more payment service providers in accordance with Swiss data protection legislation and Art. 6 (1) (b) of the EU-DSGVO. The data processed by the respective payment service provider includes inventory data, such as name and address, bank details, such as account numbers or credit card numbers, passwords, TANs, and checksums, as well as contract, sum, and recipient-related information. This information is necessary to carry out the transactions. The data entered is processed and stored solely by the respective payment service provider.
devguard does not receive any information about (bank) accounts or credit cards, but only information confirming (acceptance) or rejecting the payment. Under certain circumstances, the data may be transmitted by the respective payment service provider to credit agencies. This transmission serves the purpose of identity and credit checks. Please refer to the terms and conditions and privacy policy of the respective payment service provider. The terms and conditions and privacy policy of the respective payment service provider, available on the website or transaction applications, apply to payment transactions.
The following payment service provider is used:
devguard will only disclose your personal data if you have expressly consented to this, if there is a legal obligation to do so, or if this is necessary to enforce devguard's rights, in particular to enforce claims arising from its relationship with you.
In addition, devguard will disclose your data to third parties to the extent necessary for the use of the website to provide the services you have requested and to analyze your user behavior. To the extent necessary for the purposes mentioned in sentence 1, the data may also be transferred abroad. If the website contains links to third-party websites, devguard has no influence on the collection, processing, storage, or use of personal data by third parties after you click on these links and accepts no responsibility for this.
devguard uses appropriate technical and organizational security measures to protect your stored personal data against manipulation, partial or complete loss, and unauthorized access by third parties. The security measures are continuously improved in line with technological developments.
devguard protects personal data against unauthorized access, loss, misuse, or manipulation using appropriate technical and organizational measures. These include, among other things:
devguard continuously adapts these measures to the state of the art and the risk profile.
You should always treat your payment information as confidential and close the browser window as soon as you have finished communicating with devguard, especially if you share your computer with others.
devguard also takes internal data protection very seriously. Employees and contracted service providers are bound to secrecy and compliance with data protection regulations.
devguard uses only technically necessary and data-saving cookies. PostHog runs without cookies. If devguard uses tools that need optional cookies in the future, this will only be done with your prior express consent (opt-in). You can control or deactivate the use of cookies at any time in your browser settings.
Cookies help in many ways to make your visit to the website easier, more enjoyable, and more meaningful. Cookies are information files that your web browser automatically stores on your computer's hard drive when you visit a website. Cookies do not damage your computer's hard drive, nor do they transmit personal data about users to devguard.
devguard uses cookies, for example, to remember your language and display settings. The use of cookies does not result in devguard receiving new personal data about you as an online visitor. Most Internet browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears when you receive a new cookie.
Disabling cookies may prevent you from using all of the website's features.
The following cookies are used on www.devguard.ch:
For security reasons and to protect the transmission of confidential content, this website uses SSL encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
When SSL or TLS encryption is activated, the data you transmit to devguard cannot be read by third parties.
devguard uses analytics tools to understand how the website and the platform are used, and to keep improving them.
PostHog
devguard uses PostHog for product analytics, hosted in the EU and without cookies. PostHog receives the account ID, events and pages viewed, device and browser, IP address and country, and session replays with typed input masked. It stores no names or email addresses, and the data is deleted after 30 days. PostHog's privacy policy can be found at: https://posthog.com/privacy
When you connect a service to devguard (for example Google Workspace, GitHub, GitLab, Jira, Asana or Slack), you grant devguard access through the service's own authorization, usually "Sign in with …" or an access key you create. devguard asks only for the permissions the features you enable need, and it reads only the fields those features use.
Access tokens and keys are stored encrypted. Check results are stored with your workspace. This data is not sold and is not shared with third parties, except the processors listed in this policy that host and run devguard. When you ask devguard's in-app assistant about your checks, the results may be processed by AWS Bedrock, which does not use them to train any model. devguard does not use data received from connected services to develop, improve or train generalized AI or machine-learning models.
devguard's use and transfer of information received from a connected service follows that service's developer policies, such as the Google API Services User Data Policy, including its Limited Use requirements.
You can disconnect a service at any time under your organization's Settings > Integrations. You can also revoke devguard's access in the service's own account or app settings.
You have the right to request information about the personal data stored about you by devguard free of charge. In addition, you have the right to have incorrect data corrected and the right to have your personal data deleted, provided that this does not conflict with any legal retention obligations or permissions that allow devguard to process the data. You also have the right to request a restriction of data processing and to object to data processing.
You also have the right to request the return of the data you have provided to devguard. Upon request, devguard will also transfer the data to a third party of your choice. You have the right to receive the data in a commonly used file format.
You can contact devguard for the aforementioned purposes via the email address [email protected].
You can assert your data protection rights (in particular, information, correction, deletion, restriction, objection, revocation, and data portability) at any time by sending an email to [email protected]. Additional identification information may be required for verification purposes. Such requests are usually processed within 30 days in accordance with legal requirements.
You can also inform devguard what should happen to your data after your death by issuing appropriate instructions.
All information on the devguard website has been carefully checked. devguard endeavors to provide information that is up-to-date, accurate, and complete. Nevertheless, the occurrence of errors cannot be completely ruled out, which means that devguard cannot guarantee the completeness, accuracy, and timeliness of information, including journalistic and editorial content. Liability claims arising from material or immaterial damage caused by the use of the information provided are excluded, unless there is evidence of wilful intent or gross negligence.
devguard may change or delete texts at its own discretion and without notice, and is not obliged to update content. The use of or access to this website and applications is at the visitor's own risk. devguard, its clients, or partners are not responsible for damages, such as direct, indirect, incidental, specifically determinable, or consequential damages, allegedly caused by visiting this website and therefore assume no liability for this.
devguard also accepts no responsibility or liability for the content and availability of third-party websites that can be accessed via external links on this website. The operators of the linked sites are solely responsible for their content. devguard expressly distances itself from all third-party content that may be relevant under criminal or civil law or that violates public decency.
devguard only stores personal data for as long as is necessary to use the above-mentioned tracking, advertising, and analysis services within the scope of legitimate interest, to perform services to the extent specified above that you have requested or to which you have given your consent, and to comply with legal obligations.
We only store personal data for as long as is necessary for the respective purpose. For example, server, error and security logs are deleted after 30 to 90 days, depending on the service, and contract and billing-related data is stored for ten years, unless longer retention periods are required by law.
If you are a resident of an EU country, you have the right to complain about data processing by devguard at any time to the competent data protection supervisory authority at your place of residence.
If you are a resident in Switzerland, you have the right to complain about devguard's data processing with the Federal Data Protection and Information Commissioner (EDÖB), Feldeggweg 1, CH-3003 Bern, at any time.
This privacy policy is not part of any contract. We may amend this privacy policy at any time. The version published on this website is the current version.
If this privacy policy is translated into different languages, only the German version shall be authoritative.
Last update: Bülach, November 3, 2026