Security & compliance

We attach great importance to the secure handling of event data. Our solution is hosted on Swisscom servers in Switzerland and protected in a secure environment. Oniva was developed under the high requirements of Swisscom and is DSG and GDPR compliant.

Oniva offers a Software-as-a-Service (SaaS) model where security is a shared responsibility between Oniva, Swisscom (Switzerland) Ltd and our customers. Oniva uses Swisscom as a cloud infrastructure provider to offer a highly available, scalable and secure service. Swisscom is responsible for the physical facilities, hardware, network and security of the virtualization platform. Oniva is responsible for application level security, logging and monitoring of security events and monitoring the uptime of the service, among other things.

Customers are responsible for using Oniva appropriately and using event data in accordance with their own data protection requirements. Examples of customer responsibilities include providing complete and accurate information to Oniva, ensuring the security of devices used to access the service, managing access to the service and events shared with users, reporting security issues to Oniva, data security, and managing the security of other applications or integrations used in the customer environment.