Every SaaS vendor says your data is safe. Here is what we can show instead.
Legal. Your contract is with VNC AG in Zug. Governing law, subscription terms, DPA and SLA are published pages, not click-through surprises.
Hosting. Your tenant runs in EU or Swiss data centres certified to ISO 27001 and BSI C5 Type 2, operated from Europe. Data never leaves Switzerland or the EU. VNC AG's own certification roadmap is published with dates.
Access. Isolated tenant. SSO via SAML or OIDC. Two-factor authentication enforced for administrators. Audit log and SCIM in Professional.
Payment. Card and SEPA are processed by Stripe under a data processing agreement, listed in the sub-processor table. Your workplace data never passes through the payment provider.
AI. No AI runs on your data unless you enable it. Models are open-weight and hosted in the EU or Switzerland.
Exit. Full export of mail, calendar, contacts, files and records in open formats at any time. Cancellation takes effect at period end. Export stays open for ten days, then data is deleted on a published schedule. A SaaS customer can later move to its own infrastructure on the same product, because the whole organisation is declared as code.
The last point is the one that matters. A vendor that documents how you leave has no reason to trap you.
Book a demo — talk to an engineer.