Law and security

Legally sound in Switzerland and the EU

collever meets the legal requirements for electronic signatures, record keeping and data protection in Switzerland and the EU. Here you can see what each law requires and how collever meets it.

Legally sound in Switzerland and the EU

  • ZertES

    Swiss Federal Act on Electronic Signatures

    What the law requires
    A qualified signature from a recognized provider. Only that is equal to a handwritten signature (Art. 14 para. 2bis of the Swiss Code of Obligations).
    How collever meets it
    Qualified signatures and seals through Swisscom Trust Services, a recognized certification service provider.
  • eIDAS

    EU regulation on electronic identification and trust services

    What the law requires
    Signatures from a provider on the EU trust list, so they are valid in every EU and EEA state.
    How collever meets it
    Qualified eIDAS signatures through Swisscom Trust Services, listed on the EU trust list. Valid in Germany, Austria and Liechtenstein.
  • GeBüV

    Swiss ordinance on keeping business records

    What the law requires
    Keep business records for ten years, unchanged, complete and readable.
    How collever meets it
    A tamper-proof archive: checksums and a tamper-evident log reveal any change. Retention periods, legal hold, PDF/A archive format.
  • GoBD

    German principles for proper digital bookkeeping

    What the law requires
    Keep records unchangeable, traceable and complete, and make them available for audits.
    How collever meets it
    Versions instead of overwriting, a complete log of every change, full-text search and export for the audit.
  • DSG

    Swiss Federal Act on Data Protection (revFADP)

    What the law requires
    Process personal data only for its purpose, protect it properly and be able to give information about it.
    How collever meets it
    Role-based access, encrypted connections, passkeys and two-factor sign-in, data in data centres in Switzerland. AI only if you turn it on.
  • GDPR

    EU General Data Protection Regulation

    What the law requires
    The same principles for people in the EU, plus deletion and retention periods and demonstrable security.
    How collever meets it
    Deletion and retention periods per document, a log that proves every access, and signatures that stay verifiable for decades (PAdES-LTA).

What you can rely on

  • Qualified signatures from Swisscom Trust Services, listed on the EU trust list
  • Hosting in an ISO 27001 certified data centre in Switzerland
  • A free check of any signature against the Swiss and EU trust lists

What you decide

collever makes sure the technology meets the requirements. Which signature level a contract needs and how long you must keep a document is your decision. In the demo we show you what applies to your documents. For GoBD you describe your processes in your procedural documentation, as usual.

Questions and answers

Is collever legally compliant?

Yes. collever meets the legal requirements for electronic signatures, record keeping and data protection in Switzerland and the EU: ZertES and eIDAS for signatures, GeBüV and GoBD for record keeping, the Swiss FADP and the GDPR for data protection. Qualified signatures come from Swisscom Trust Services, a provider on the EU trust list. Which signature level and which retention period apply to your document is your decision. In the demo we show you what applies to you.

Is an electronic signature valid in Switzerland?

Yes. In Switzerland, the qualified electronic signature (QES) under the Federal Act on Electronic Signatures (ZertES) is equal to a handwritten signature. Most contracts have no form requirement, so a simple or advanced signature is also enough. collever offers all three levels.

Where is my data?

Your data stays in Switzerland, in an ISO 27001 certified data centre, protected under the Swiss Federal Act on Data Protection and the GDPR. It only leaves Switzerland if your organization itself turns on an AI feature with a provider abroad and explicitly confirms it. The Enterprise plan can also run in a data centre of your choice or on your premises.

Are the signatures valid in Germany and Austria?

Yes. collever supports signatures under the Swiss ZertES and under the European eIDAS regulation. For contracts in Switzerland you choose a signature under ZertES, for contracts in Germany, Austria and the rest of the EU one under eIDAS. Your data stays in Switzerland either way.

Does collever use artificial intelligence?

Only if you want it to. The AI features for translating, rephrasing and summarizing stay off until your organization turns them on. You choose the provider yourself and pay them directly. If you don't want a foreign provider for AI, choose a Swiss provider or your own model.

Let us show you how easy it is

In 30 minutes we show you collever with an example from your own work. Or try it yourself, free for 30 days.