Data protection at Swiss level
betterPortrait meets the highest data protection standards. All data is stored on certified Swiss servers in Zurich – nDSG and GDPR compliant, ISO 27001 certified and annually tested for security vulnerabilities by Compass Security AG.
Data protection isn't a duty – it's a conviction
Storage in Switzerland
All data is stored exclusively on certified Swiss servers in Zurich. No data is stored abroad.
Encryption
All data transfers are encrypted with TLS 1.3. Data at rest is protected with AES-256.
Annual penetration tests
Compass Security AG checks our entire infrastructure for security gaps every year.
Access control
Role-based access rights, two-factor authentication and audit logs for full transparency.
Deletion policy
Clear retention periods and automated deletion processes according to your requirements.
Audited subcontractors
All subcontractors are carefully audited and contractually bound to strict data protection standards.
Meeting every relevant data protection standard
nDSG compliant
Full compliance with the new Swiss Federal Act on Data Protection (nDSG), in force since September 2023.
GDPR compliant
Meets every requirement of the EU General Data Protection Regulation for customers in the EU.
ISO 27001
betterPortrait is ISO 27001 certified – the international standard for information security. Our hosting infrastructure meets the standard as well.
Swiss company
betterPortrait is a Swiss public limited company (AG) based in Switzerland and fully subject to Swiss law.
DPA
Individual Data Processing Agreement (DPA) for every customer – with customer-specific adjustments on request.
Tenant separation
Every customer works in an isolated instance, with strict separation of all customer data.
Frequently asked questions about data protection
Very secure. We take data security seriously and conduct regular audits of our infrastructure. All data is processed in compliance with Swiss nFADP and the GDPR and stored in Switzerland. Access is encrypted and managed using role-based permissions.
Yes, betterPortrait is fully compliant with the EU General Data Protection Regulation (GDPR) as well as the Swiss Data Protection Act (nDSG). We conclude a Data Processing Agreement (DPA) with every customer, which contractually regulates data protection-compliant processing.
Our servers for storing portraits and data are located in Switzerland (Zurich, with encrypted backups at a separate site in Switzerland).
All photos are stored on servers located in Switzerland. Upon request, we can automatically delete both the original smartphone photo and the edited version after you have downloaded them.
Only authorized individuals within your company have access to the headshots and master data. Access can be managed at team level in the dashboard. If the images are embedded on the website, only the processed versions of the selected presets are publicly accessible.
Yes, headshots can be deleted at any time by authorized users. The data is completely removed.
We apply company-specific deletion policies. By default, all employee data and headshots are permanently deleted from our servers 30 days after the employee leaves.
You retain 100% of the usage and copyright. When employees upload their own photos, we ensure they give consent via a checkbox. We only process the headshots you or your team have uploaded.
No, never. Your images are used exclusively for editing your portraits and are never used for training AI models. After the agreed retention period expires, all data is completely deleted.
Yes, a Data Processing Agreement (DPA) is concluded with every customer. This contractually regulates the data protection-compliant processing of your data. Upon request, we can adapt the agreement to your specific requirements.
Try it out – no commitment required.
Experience for yourself how easy professional portraits are today.
Try betterPortrait free for 14 days – with three free credits for your first portraits. No commitment, no credit card.