Privacy and data sovereignty

No sale of data

Denali PRO SA does not sell, rent, or transfer to third parties, for advertising or commercial purposes, the data and content that the customer hosts on its systems (email, files, documents, communications).

No automated analysis of content

Denali PRO SA does not scan, index, or perform automated analysis (including use for training artificial intelligence models) of content hosted by the customer, except for technical operations strictly necessary to provide the service (e.g., antivirus/antispam scanning of email traffic, if enabled) or at the customer's explicit request.

Limited and logged data access

Access to customer systems by Denali PRO personnel is limited to what is necessary for maintenance, technical support, or incident resolution, and is logged.

Swiss jurisdiction

Denali PRO SA is a company incorporated under Swiss law, with no parent or affiliated companies subject to United States jurisdiction. Customer data is therefore not subject to the scope of the U.S. CLOUD Act (2018), the law that allows U.S. authorities to request access to data held by providers subject to U.S. jurisdiction, regardless of where that data is physically hosted.

Data processing compliant with Swiss law and simplified transfer with the EU

The processing of personal data is carried out in accordance with the Federal Act on Data Protection (nFADP), the Swiss law aligned with the European GDPR. Switzerland also benefits from an adequacy decision granted by the European Commission (reconfirmed in January 2024), which allows the free flow of personal data between Switzerland and the EU without the need for standard contractual clauses, impact assessments, or other additional safeguards — the same bureaucratic simplicity as a transfer within the EU.

For an Italian or European customer, this translates into a concrete advantage: moving email and business data to a Denali PRO server in Switzerland involves no additional formalities compared to keeping them with an Italian or European provider. The same cannot be said, to date, for transfers to U.S. providers — even when they offer datacenters physically located in the EU: the legal basis currently used for those transfers (the Data Privacy Framework) remains contested, and several observers consider a new invalidation by the EU Court of Justice likely, as has already happened in the past with similar agreements. A company that entrusts its data to a U.S. provider therefore builds its compliance on a legal balance that could change without notice; with a Swiss provider, the legal basis for the transfer does not depend on a bilateral agreement that is perpetually at risk.

Requests from third-party authorities

Any request for data access by a judicial authority will be assessed in light of Swiss law and, where legally possible, the customer will be informed.

Guaranteed portability

The customer retains, at all times, the right to fully export their data (email, files, configurations) in standard formats, without technical or contractual restrictions that would prevent migration.

Exclusive ownership of customer data

All data, content, files, emails, and communications placed by the customer on Denali PRO SA's servers remain the exclusive property of the customer at all times and without exception. Denali PRO SA acts solely as the provider of the technical infrastructure on which such data resides and does not acquire, as a result of providing the service, any right of ownership, use, license, or exploitation — commercial or otherwise — over the customer's data and content. Denali PRO SA does not claim any right over the data, either during the provision of the service or upon its termination, and undertakes to return or delete, upon the customer's request, all hosted data, without retaining any copy beyond what is necessary for legal obligations or contractually agreed backup purposes.