eucsoft

Infomaniak

Productivity suite · infomaniak.com · last read 2026-10-12

Identity

Legal entityInfomaniak Network SA
HQCH
Parent company—
Ultimate ownership—
EU contracting entity—
LEI—
US CLOUD Act reachNot determined from the sources read
Sourceinfomaniak.com · 2026-10-08

Data location

RegionEU data locationMinimum planSourceObserved
EUNo EU location—infomaniak.com2026-10-08

EU: The document commits to storing customer data in data centers "based exclusively in Switzerland", so it offers no EU storage location. It names no plan or price for storage location.

Subprocessor chain

No subprocessor list transcribed. Either the vendor does not publish one where we could reach it, or it is gated — see the documents table below for which.

Processing terms

From the vendor's data processing agreement · read 2026-10-09 · infomaniak.com

TermWhat the agreement says
Transfer mechanismSCC (module not stated)
Notice of new subprocessorsAdvance notice to the Client of any change or addition of a Sub-subcontractor; notice period and method not stated
If you object to oneClient may object within 30 days of notification, in writing (email sufficient), giving specific reasons and any proposed alternatives; if no objection in that period, the Sub-subcontractor may process the data
Breach notificationwithout undue delay after becoming aware of a breach
AuditCompliance information in standard documentation on website and on request; certificates/reports on written request; if insufficient, on-site technical inspection on agreed conditions; may incur reasonable additional fee

Terms as the agreement states them. Where it is silent on a term, there is no row; that is not a statement that the vendor does not offer it.

Assurance

SchemeStatusScopeSourceObserved
ISO 27001:2022 · ISO27001Certificate published—infomaniak.com2026-10-08
ISO 9001:2015 · ISO9001Certificate published—infomaniak.com2026-10-08
B Corp™Claimedrecognises companies that meet high standards in terms of social and environmental impact, governance and transparencyinfomaniak.com2026-10-08
ICANNClaimedSwiss registrar accredited by ICANNinfomaniak.com2026-10-08
ISO 14001:2015Claimed—infomaniak.com2026-10-08
ISO 50001:2018Claimed—infomaniak.com2026-10-08
Swiss HostingClaimedcustomer data, online tools, software as a service (SaaS) and factual data (commercial information, financial data, etc.) are hosted and executed in a data center located in Switzerlandinfomaniak.com2026-10-08
Swiss MadeClaimedcertifies that Infomaniak's head office is located in Switzerland and that its services are genuinely provided from Switzerlandinfomaniak.com2026-10-08

Claimed means the vendor asserts the scheme on its own page and offers nothing further. Available on request means the report or certificate exists but sits behind a request, a login or an NDA. Neither is a certificate we have seen. That is a distinction an auditor makes, so we make it too.

Official registers

What the authority publishes, not what the vendor claims. An entry covers the offering it names and nothing else: a FedRAMP authorisation for a government edition says nothing about the commercial service. No entry is not a finding about security - most vendors never apply - and an entry filed under a name not listed above would not have been found.

Support window

Not yet collected. This row will say not declared only once we have read a lifecycle or security page and found no period stated — see support windows.

Vulnerability reporting: [email protected] (security.txt, no Expires field; read 2026-10-11)

Documents

What we read, how it was disclosed, and when.
DocumentDisclosureTranscriptionHTTPObserved
certificationsPublicfull2002026-10-08
dpaPublicfull2002026-10-09
residencyPublicfull2002026-10-08

History

Nothing has moved since we started watching this vendor on 2026-10-08. Changes appear here only after a human has reviewed them.