Skip to main content
Dahu AIDahu AIHome

Data & security

This page describes technical guarantees for the production environment (excluding internal development tooling). Legal detail is in the privacy policy.

Production data flow

Simplified diagram: your browser or API client → Swiss hosting infrastructure → AI processing on Swiss infrastructure (Infomaniak Swiss AI) → response over the same secure channel. Sensitive conversational content is encrypted at rest in the application database (APP_KEY).

Production data-flow diagramClientCH hostingSwiss AIReply

Connectivity and encryption

The website and API are served over HTTPS (TLS). Application sessions may be encrypted at rest when enabled; API tokens follow Laravel/Sanctum practices.

Application hosting

The application and account data are hosted with infomaniak (Suisse), as stated in the privacy policy. Displayed values come from the operator’s published configuration.

Data processed in Switzerland

Prompts, replies, user attachments, embeddings and related account metadata are processed within the Swiss hosting and cloud perimeter described in our contractual disclosures.

Services outside Switzerland

Card payments are processed by Stripe (United States). Transfers rely on the Swiss–U.S. Data Privacy Framework and, where EU law applies to individuals, EU Standard Contractual Clauses. We do not store card numbers.

Data location: factual comparison

Without naming vendors: many large consumer AI platforms rely on US regions and globally distributed clouds; Dahu AI constrains the described production flow to the Swiss-facing infrastructure and providers referenced here and in legal documents.

  • Large US AI platforms: reliance on US regions and varied retention policies.
  • Some European services: EU presence but often long subcontractor chains.
  • Dahu AI: production chain oriented to the Swiss inference and app hosting described.

Legal framework and certifications

Processing follows Swiss FADP; where GDPR applies to individuals, GDPR rights apply as well. Hosting may rely on ISO 27001-certified offerings depending on the underlying service.

Reporting and rights

For security reports, prefer the /.well-known/security.txt.

For personal-data requests, use the contact below or see the privacy policy. contact@dahuai.ch.