Controller and service scope
local.tax is operated for the Diversus GmbH tax-intake workflow. The final controller details, postal address, commercial register information, VAT details, and privacy owner must be confirmed by launch authority before live customer intake is enabled.
Data categories
The application may process contact details, identity details, tax-request answers, uploaded document metadata, payment state, customer messages, audit events, and operational handoff records. Real tax documents and AHV values must not be used in demos, screenshots, logs, fixtures, or analytics payloads.
Swiss-hosted workflow baseline
Core application hosting, database, private document storage, secrets, logs, backup, and operational workflow data are designed for approved Swiss-hosted infrastructure. Selected processors may support payment, email, analytics, monitoring, support, and future AI features only where documented and contractually governed.
Payment and processor minimization
Payment state is owned by the server and confirmed through verified provider events. Tax documents, AHV numbers, birth dates, tax answers, tax notes, document contents, and unnecessary tax data must not be sent to the payment provider.
Retention and customer rights
Retention, deletion, access, export, cancellation, refund, and legal-obligation wording remains subject to final legal approval. The production launch checklist must link the approved policy version before accepting live traffic.