Security

The security of our customers’ data and systems is of the highest priority for planix. We make every effort to ensure the confidentiality, integrity and availability of all information. This document provides an overview of our security principles and of the measures we apply to protect your data.

planix maintains a comprehensive information security management system based on recognised standards such as the requirements of the Swiss Federal Act on Data Protection (FADP) as well as – to the extent applicable – the General Data Protection Regulation (GDPR). Clear roles, responsibilities and processes ensure that security aspects are integrated into all areas of the business.

The protection of personal data is at the heart of what we do. Access to personal information is strictly regulated and permitted only to authorised employees who are subject to a confidentiality obligation. We collect and process only such data as is necessary for the provision of our services.

We use state-of-the-art encryption technologies to protect data during transmission (TLS/SSL) and at rest. Access to our systems is secured by multi-level authentication mechanisms. Firewalls, network protection systems and regular security reviews help to identify and remedy potential vulnerabilities. Access keys and secrets are stored encrypted and never appear in any log. All software development processes at planix follow the principle of “security by design”.

Our systems are operated in certified data centres that meet the highest security and compliance standards. Physical access to servers is strictly controlled and permitted only to authorised personnel. The infrastructure is protected against power failure, fire and other risks. Redundant systems and backups ensure continuous operation. All data is backed up automatically; recovery from backups is tested. Technical logs are deleted after 30 days.

We monitor our systems around the clock in order to detect anomalies at an early stage. Vulnerability management as well as patch and update processes ensure that our software is always kept up to date. Data is backed up regularly in order to enable rapid restoration in an emergency.

planix supports strong password policies and offers multi-factor authentication (MFA). User rights are granted according to the principle of least privilege and are reviewed regularly. Sessions are terminated automatically when they are inactive, in order to prevent unauthorised access. planix administration is protected by two-factor authentication. planix staff see project content only if the customer expressly requests it; every project is separated from other projects and customers.

In the event of a security incident, our incident response plan comes into effect. We analyse incidents immediately, remedy their causes and inform – where necessary – affected customers and authorities. Documented emergency procedures ensure that systems can be restored quickly.

All planix employees receive regular training on data protection, information security and secure conduct in day-to-day digital work. A strong security awareness is a central component of our corporate culture.

planix regularly reviews the effectiveness of its security measures, guided by ISO/IEC 27001 and ISO/IEC 42001. Findings from risk analyses, audits and security incidents are continuously incorporated into the further development of our security management.

For questions or information regarding security or data protection matters, our Security & Privacy Team is available to you at any time:

Bineo Systems GmbH
Stauberbergstrasse 15
8610 Uster