AI claims handling that holds up under Swiss data protection law.
Claims contain health data, AI pilots often run with vendors abroad, and every decision has to be explainable years later. We deliver the architecture that keeps your AI triage compliant with the Swiss Federal Act on Data Protection (FADP), and we document it in ClearSky.
Insurers with claims business in Switzerland and more than about 50,000 claims a year. You are evaluating or already running an agentic triage system, for first review, for letters or for recourse checks. The open question is how that fits with the FADP.
Data location and disclosure abroad
Data and models stay in Switzerland or the EU, never with a company incorporated in the US. The Federal Council lists the EU member states as providing adequate data protection, so disclosure there is permitted under Art. 16 FADP without additional safeguards. Dxzio processes your data as a Swiss processor under Art. 9 FADP, not as a reseller of a hyperscaler.
Health data and the impact assessment
Claims often contain health data, which counts as sensitive personal data. Processing it at scale with AI usually requires a data protection impact assessment under Art. 22 FADP beforehand. We provide the technical basis for it: data flows, storage locations, access and retention periods, documented in ClearSky.
Data cards per use case
Every pipeline ships a machine-readable data card in DCAT format. It describes data categories, purpose and processing locations and serves as the basis for the record of processing activities under Art. 12 FADP. No separate compliance pipeline is needed: the card is built in CI and reviewed in the pull request.
Traceable decisions
Models that prepare claims decisions are versioned, signed and reproducible. A decision from 22 April 2026 can be recomputed in 2031 with the model of that day, the same input and the same rule set. When a decision is automated, you can inform the person concerned under Art. 21 FADP and, on request, have a human review it.
Tamper-evident audit trail
Every agent action is signed with Ed25519, hash-chained and stored tamper-evidently. We can give internal audit, your data protection advisor or the FDPIC the complete audit trail for any single claim in seconds, without anyone needing access to our system.
Checked in ClearSky
We don't document whether the architecture holds up in a spreadsheet but in ClearSky, our platform for assessing cloud services under Swiss law. Every cloud service and vendor of the use case is assessed there against the FADP and its ordinance, and every finding gets a severity, an owner and a status. When requirements or vendors change, you update the assessment there.
What we do not do
We are not a white-label wrapper around OpenAI or Vertex AI, and not a Salesforce integrator. We do not give legal advice. We deliver the architecture and the evidence that make the case easier for your legal and compliance advisors.
