Trust Architecture

    Enterprise Trust &
    Compliance Foundations

    Built with privacy, consent, transparency, and outbound safeguards from day one. This is not a legal page — it is an operational summary of implemented controls.

    The items below reflect implemented safeguards, not aspirational policies. Each control is active in the current version of this site and platform.
    Privacy & Data Handling
    GDPR · Swiss nDSG

    GDPR and Swiss nDSG Aligned

    Data processing follows GDPR (EU 2016/679) and the Swiss revised Federal Act on Data Protection (nDSG, in force since September 2023). Data minimisation, lawful basis documentation, and data subject rights are implemented as operational controls, not policies.

    • Lawful basis documented per processing activity
    • Data minimisation applied to all input handling
    • Data subject rights: access, erasure, portability
    • Swiss Standard Contractual Clauses where applicable
    Cookie Governance
    ePrivacy · Google Consent Mode v2

    Default-Denied, Consent-First

    All non-essential cookies are blocked by default. Consent is requested before any tracking or analytics are activated. Google Consent Mode v2 is implemented to ensure advertising and measurement signals respect the user's choice in full.

    • No tracking cookies set without explicit consent
    • Google Consent Mode v2 integrated
    • Granular consent per category (analytics, marketing)
    • Consent withdrawal available at any time
    Transparent Data Processing
    GDPR Art. 13-14 · FADP Art. 19

    Full Legal Disclosure

    Processing purposes, data categories, retention periods, and recipient categories are documented and disclosed. Legal entity details, registered address, and responsible contact information are published in the site imprint as required by Swiss and EU law.

    • Privacy Policy covering all processing activities
    • Cookie Policy with full category explanation
    • Terms of Service with liability and limitation clauses
    • Imprint with legal entity and contact disclosure
    AI Transparency
    EU AI Act · Editorial Standard

    AI Usage Disclosed

    FinBridge uses AI-assisted extraction and structuring in its compliance pipeline. This usage is disclosed publicly. Where AI models contribute to regulatory output, the traceability chain is preserved so that outputs can be verified and challenged by human reviewers.

    • AI involvement in processing disclosed
    • Human review layer maintained on all outputs
    • Source document traceability preserved end-to-end
    • No autonomous regulatory decisions without review
    Outbound Communication Safeguards
    UWG · ePrivacy · CAN-SPAM

    Opt-In, Identified, Unsubscribable

    All marketing communications require prior opt-in consent collected via a form with a clear privacy notice. Every outbound message includes sender identification, physical address, and a functional unsubscribe mechanism. Consent records are retained.

    • Opt-in checkbox required before any marketing communication
    • Sender identity and address in every message
    • Unsubscribe link functional in all outbound emails
    • Consent timestamp and source recorded per contact
    Proof-Backed Claims
    Editorial Standard

    Evidence-First Editorial Standard

    All claims made on this site — statistics, performance benchmarks, regulatory references — are grounded in documented sources. Unverified projections are labelled as forward-looking. We do not use inflated vanity metrics. All platform stats are sourced from the FinBridge data infrastructure in real time.

    • Platform statistics pulled live from FinBridge infrastructure
    • Regulatory citations reference primary legal texts
    • Forward-looking statements labelled explicitly
    • No manufactured social proof or fake testimonials

    Questions About Our Trust Architecture?

    For enterprise due diligence, auditor reviews, or investor data room requests, contact us directly. We respond to compliance inquiries within one business day.