Terms & Privacy

There are no exceptions: we do not provide it to a relative you have given account access to, someone named in the file, an opposing party or anyone else who claims an interest in seeing it. For a business account, the account holder means the people authorised to sign on the company’s behalf. SQRIB has no right to withhold case files: if you ask, we provide a complete copy without delay.

Confidentiality and secrecy declaration, sections 4.7–4.8 · Privacy Policy, section 5.4

Before you decide, you can see exactly what will be shared. Once the lawyer accepts your request, they become responsible for their own processing of your data, in accordance with their professional rules.

Privacy Policy, sections 10.1–10.2 · General Terms, article 13

All access is logged. Every team member signs a confidentiality undertaking that remains binding after they leave, with no time limit.

Confidentiality and secrecy declaration, sections 4.2–4.4 · General Terms, article 18(2)

By default, abuse-monitoring systems temporarily retain content and may allow a person to review it. We have asked our providers to disable these features. Our providers must also meet confidentiality obligations at least as strict as ours, and cannot use your data for their own purposes.

Privacy Policy, section 8.3 · Confidentiality and secrecy declaration, section 9

SQRIB is not a law firm, so your case file is not covered by a lawyer’s professional secrecy until you request a consultation. Once you do, we prepare the file on the lawyer’s behalf and, as a matter of principle, resist disclosure by invoking that professional secrecy. A judge, rather than SQRIB, then decides. This does not guarantee that disclosure will ultimately be refused, and we want to be clear about that.

Confidentiality and secrecy declaration, sections 3 · 5 · 8

That applies to our systems and anyone else’s. There’s an important distinction: processing your case involves calls to AI systems, but that is not training. The systems perform a task and retain none of the content.

Confidentiality and secrecy declaration, section 4.5 · Privacy Policy, section 8.4

We have required our provider to keep content only for as long as it takes to process your request.

Privacy Policy, section 8.3

We don’t use it to target you or build a commercial profile, and we don’t publicly rank or rate the experts in our network.

Privacy Policy, sections 8.5 · 10.3

We carry out internal technical checks to make sure the process ran as intended, without reviewing the legal substance. We produce anonymous statistics at canton level or above, and never publish them for a canton with fewer than ten requests a year. We also improve our methods and analytical frameworks, without using machine learning.

Confidentiality and secrecy declaration, section 4.6 · Privacy Policy, section 8.5

You can share them with someone else or request a copy in a standard electronic format. We use your documents only for as long as, and to the extent, needed to provide our services. We also recommend anonymising what you upload and deleting your most sensitive case files once they have been processed. If we no longer hold a document, we cannot disclose it to anyone.

General Terms, article 21 · Confidentiality and secrecy declaration, section 4.10

We use Microsoft Azure’s Switzerland North region for hosting. It is operated by Microsoft MCIO Schweiz GmbH, a Swiss company contractually committed to keeping the data there. Certain technical data or metadata may undergo limited processing outside the region where this is expressly allowed by the contractual documentation.

Privacy Policy, sections 8.2 · 12

We respond as quickly as possible, and within thirty days at the latest. If your request is complex, we’ll let you know how much extra time we need. We may need to verify your identity to avoid giving your data to someone else.

Privacy Policy, sections 15–15.1

Backups are purged within ninety days of deletion. Technical logs are kept for twelve months, and support conversations for twenty-four months. Only accounting records are kept for ten years, as the law requires. When the retention period ends, the data is permanently deleted or irreversibly anonymised.

Privacy Policy, section 13

We also restrict access to what is strictly necessary, log access to the contents and follow a documented procedure for incidents. No system can offer absolute security, and we do not claim otherwise.

Privacy Policy, section 14 · Confidentiality and secrecy declaration, section 4.9

That period starts when we learn of the breach. We also notify the Federal Data Protection and Information Commissioner, whom you can contact at any time.

Privacy Policy, sections 14 · 15.4