CASUS
Open navigation

Product

Expand Product

Customers

Open Customers menu

Company

Open Company menu

Security

Pricing

CASUS / SECURITY · 2026

DO NOT WRITE IN THIS MARGIN

Security

Data security

is our top priority.

Client matters stay in Switzerland and the EU, the AI models keep nothing and never train on your data, and professional secrecy is guaranteed by contract.

AT A GLANCE

The key facts.

HOSTING

Client matter content and workspace data sit on Google Cloud in the Zurich region (europe-west6). Encrypted at rest (AES-256) and in transit (TLS 1.2+).

AI INFERENCE

Prompts and document text are routed exclusively to EU/CH regions: Google Vertex AI in Belgium, and Microsoft Azure OpenAI in Switzerland North and Sweden Central. No inference in the US.

AI TRAINING

Customer data is not used to train or fine-tune AI models, neither by CASUS nor by the model providers we use. Zero-data-retention is agreed with all LLM providers.

ZERO DATA RETENTION

Vertex AI (Google) does not retain data beyond the request. For Azure OpenAI, CASUS has obtained an opt-out from abuse monitoring: no 30-day buffer, no human review by Microsoft.

PROFESSIONAL SECRECY

CASUS and staff who may access plaintext are bound by the applicable professional-secrecy rules and country Annex. Infrastructure and AI providers have no human plaintext access. Written confirmation is available on request.

LEGAL FRAMEWORK

Swiss revFADP and EU GDPR. Third-country transfers for operational services are covered by EU Standard Contractual Clauses with the Swiss addendum.

SUBPROCESSORS

The full list is published in our Trust Center.

§ 1 - DATA BOUNDARIES

Your data.

Our promise.

Four commitments, contractually anchored by CASUS and in our enterprise agreements with Google Cloud and Microsoft Azure.

Switzerland · EU/EEA
Client matters
No AI training
No third countries
No third-party access
No co-mingling
  1. 01No use for AI trainingClient matter content and AI inputs and outputs are not used to train or fine-tune models. Contractually guaranteed by CASUS and through agreements with Google Cloud and Microsoft Azure.
  2. 02No processing in third countriesClient matter content is processed exclusively in Switzerland and the European Economic Area. No data export to the US or other third countries.
  3. 03No third-party accessNo staff of the cloud providers we use have access to client matter content. Microsoft Azure abuse monitoring is disabled for CASUS (no human review).
  4. 04No co-mingling of mattersData is processed under strict matter separation and is never accessible to other customers.

§ 2 - COMPLIANCE

Data protection

under Swiss and EU law.

CASUS follows the revised Swiss Data Protection Act and the GDPR, and preserves professional secrecy in Switzerland, Germany and Austria.

GDPR
EU General Data Protection Regulation
Processing in Switzerland and the EU. Transfers for operational services are covered by standard contractual clauses.
Compliant
revFADP
Swiss Federal Act on Data Protection
Client matters hosted in the Zurich region (Google Cloud europe-west6).
Compliant
§
Professional secrecy
Switzerland · Germany · Austria
Art. 321 SCC, § 203 StGB and § 9 RAO, anchored in every contract.
Compliant

§ 3 - PROFESSIONAL SECRECY

Professional secrecy

in Switzerland, Germany and Austria.

Professional secrecy is protected under the applicable law of the lawyer’s country of admission: § 203 StGB and § 43e BRAO in Germany, § 9 RAO and § 40 RL-BA 2015 in Austria, and Art. 321 SCC and Art. 13 LLCA in Switzerland.

The chain of confidentiality
01
Lawyer
Professional secrecy under the law of admission: Art. 321 SCC, § 203 StGB or § 9 RAO.
02
CASUS
Bound as auxiliary or contributing person, or by contract, under the country annex.
03
Authorised staff
A small group, plaintext access only for necessary troubleshooting, trained in secrecy.
04
Hosting and AI providers
Automated processing without human plaintext access, zero data retention, no training.
Law firms can request written confirmation at any time.

ZERO DATA RETENTION

No retention, no training.

CASUS applies a consistent zero-data-retention approach across all AI models in use. Client matter content and AI outputs are not used to train or improve AI models, neither by CASUS nor by our AI subprocessors Google Cloud Vertex AI and Microsoft Azure OpenAI.

Client matter content is stored on Google Cloud in Switzerland. For AI processing, text is transmitted exclusively to EU/CH locations: Google Cloud Vertex AI in Belgium, and Microsoft Azure OpenAI in Switzerland North and Sweden Central. All transfers are encrypted.

FREQUENTLY ASKED QUESTIONS

FAQs.

Yes. CASUS fully meets the requirements of the revised Swiss Federal Act on Data Protection (revFADP/revDSG) and the EU GDPR. Our Privacy Policy is explicitly drafted to satisfy both frameworks. International data transfers are covered by EU Standard Contractual Clauses with the Swiss addendum.

Client matter content is stored on ISO/IEC 27001-certified Google Cloud servers in Switzerland, with TLS encryption in transit and encryption at rest. Access is governed by strict role-based permissions with multi-factor authentication. No CASUS employee and no third-party provider has access to client matter content (no human review).

No. Under our Terms of Service, CASUS and its staff are explicitly recognised as auxiliary persons of the lawyer (Hilfspersonen des Anwalts) within the meaning of Art. 321 of the Swiss Criminal Code. They are therefore subject to the same criminally enforced duty of professional secrecy. We confirm this obligation in writing to law firms on request at any time.

No. Neither CASUS nor our AI subprocessors Google Cloud Vertex AI and Microsoft Azure OpenAI use your data to train or improve AI models. This is contractually guaranteed by our enterprise agreements with Google and Microsoft.

None. Zero data retention applies to all AI subprocessors. Google Cloud Vertex AI does not retain inputs or outputs beyond the request. For Microsoft Azure OpenAI, CASUS has obtained an abuse-monitoring opt-out, so prompts and completions are not stored beyond the request-response cycle there either.

Public AI tools often process inputs on servers outside Switzerland and the EU, retain data to improve their models, and operate under different legal regimes. CASUS stores client matter content exclusively in Switzerland, processes it only in EU/CH regions, does not use any data for training, has Microsoft's abuse monitoring disabled, and is purpose-built for the requirements of law firms — including attorney-client privilege and matter separation.

CASUS provides a central, compliance-ready solution with clear permission structures, single sign-on options for enterprise customers, and traceable audit logs. Firms get an officially sanctioned AI solution that removes the need for unauthorised tools.

Client matter content — the documents and prompts you process in the CASUS application — stays exclusively in Switzerland and the EEA. AI processing happens in Switzerland, Sweden and Belgium. For purely operational website and back-office services (e.g. demo bookings via Calendly, newsletters via Brevo, payments via Stripe, support chat via Intercom), personal data of website visitors may be transferred to the US. These transfers are covered by EU Standard Contractual Clauses with the Swiss addendum and are listed in our Privacy Policy.

Our Trust Center at trust.getcasus.com contains the current list of all subprocessors, a description of our technical and organisational measures, and other compliance documents. For specific security inquiries, data processing agreements, or other topics, contact us directly at contact@getcasus.com.

PRIVACY POLICY

At a glance.

Effective 1 April 2026

CASUS is a Swiss legal-tech platform. We help legal teams draft, review and manage documents with the support of Large Language Models (LLMs). Because you entrust us with sensitive documents, privacy is not an afterthought — it is a design constraint.

Who we are. CASUS Technologies AG, Uraniastrasse 31, 8001 Zurich, Switzerland. Contact for privacy matters: contact@getcasus.com.

What we process. Your account data (name, email, company, role), documents you upload, the prompts and instructions you send to our AI features, billing data, and technical data such as IP address and browser information.

Where your documents live. Customer documents and workspace data are stored on Google Cloud infrastructure in Switzerland. When you use AI features, document text and prompts are transmitted to Google Cloud (Vertex AI) in Belgium and to Microsoft Azure OpenAI in Switzerland and Sweden for inference. All transfers happen over encrypted channels.

AI and your documents. We use third-party LLMs (via Google Cloud Vertex AI and Microsoft Azure OpenAI) to power contract analysis and drafting. We do not use your documents to train AI models, and our enterprise agreements with Google and Microsoft prohibit them from doing so either. AI output can contain errors — please keep a human lawyer in the loop.

Who else sees your data. A small number of carefully selected service providers (listed in full in Section 10): payments (Stripe), support chat (Intercom), scheduling (Calendly), website analytics, and internal tools such as our CRM. None of them use your data for their own purposes.

Your rights. You can access, correct, delete, export, restrict or object to the processing of your personal data, and withdraw consent at any time. Write to contact@getcasus.com

Laws that apply. The Swiss Federal Act on Data Protection (FADP / revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR). This policy is written to satisfy both.

TERMS OF SERVICE

At a glance.

Who we are. CASUS Technologies AG, Uraniastrasse 31, 8001 Zurich, Switzerland. Contact: contact@getcasus.com.

Who these Terms bind. You are our contracting party as “Customer”. The Customer can be a natural person subscribing in their own name (typically via our self-service sign-up) or an organisation such as a law firm, company or public institution. Where the Customer is an organisation, the individuals who log in (“Users”) access the Service under the organisation’s account. Where the Customer is a natural person, that person is both the Customer and the User.

What we offer. CASUS is an AI-powered legal productivity platform — a web application plus a Microsoft Word Add-in — designed for trained legal professionals to draft, review and work on documents.

AI is a draft tool, not a lawyer. Our AI features produce drafts and suggestions. Outputs are probabilistic and may be incomplete or inaccurate. You review and verify before relying on them.

Your data stays yours. You own what you upload and what the AI generates from it. We do not use Customer Data to train AI models. Details are in our Privacy Policy and our Trust Center at trust.getcasus.com.

Attorney-client privilege. For customers who are law firms, CASUS and its staff act as Hilfspersonen des Anwalts under Art. 321 of the Swiss Criminal Code — strict professional secrecy applies.

Free trial. 14 days free, no auto-conversion to a paid plan. If you do not subscribe, access ends.

Swiss law, Zurich courts. Swiss law applies. Disputes go to the ordinary courts of Zurich.