For business customers
Data Processing Agreement
How BüroPilot processes personal data on your behalf when you store client and invoice information in the application.
01
Roles
You are the controller of the personal data you store in BüroPilot — typically the contact details of your clients. We act as processor and handle that data only on your documented instructions.
02
Subject and duration
Processing covers the storage, display, export and transmission of offers, invoices and reminders, for as long as your subscription is active.
03
Categories of data and data subjects
- Data subjects: your clients and their contact persons, and the users of your account.
- Data: names, addresses, email addresses, phone numbers, VAT numbers, document content and payment status.
04
Technical and organisational measures
- Encryption in transit and at rest.
- Row-level access rules so each account can only reach its own records.
- Role-based access for our team, limited to what support and operations require.
- Regular backups and restore testing.
- Audit history for document changes.
05
Sub-processors
We engage sub-processors for hosting, database operation and email delivery. We inform customers before adding a new sub-processor and remain responsible for their compliance.
06
Incidents
If a personal data breach affects your data, we inform you without undue delay with the information you need for your own notification duties.
07
Return and deletion
On termination you can export all data. After the transition period we delete it, unless legal retention duties apply.
08
Signed copy
Business customers who need a countersigned agreement can request one at hello@buropilot.ch.
Questions about this document?
Write to us and we will explain any section in plain language — or send a countersigned copy where that is needed.
hello@buropilot.ch