The Situation

When it comes to handling customer data, startups need to remember the classic Spider-Man mantra: “With great power comes great responsibility.” Your startup may have access to powerful data, but with that power comes the responsibility to protect it. With the Swiss Data Protection Act (DPA) & GDPR in play, EthonAI had to tighten its privacy policy, ensure secure data handling, and stay legally bulletproof—all while keeping its growth momentum.

Our Approach

Privacy Policy Overhaul: Built a clear, compliant, and user-friendly policy covering:

• Data Collection: Defined how personal data is gathered from customers, employees, and third parties.

• Processing & Usage: Ensured lawful data handling for contracts, communication, and legal obligations.

• Storage & Security: Implemented safeguards for data protection, retention, and access controls.

• Legal & Regulatory Alignment: Ensured compliance with Swiss DPA & GDPR, balancing transparency with operational needs.

• Investor & Customer Trust: Demonstrated clear accountability in data handling, strengthening credibility with stakeholders.

The Impact

The startup leveled up its privacy game, turning compliance into a competitive advantage. With a bulletproof policy, and full regulatory alignment, they secured investor confidence and built long-term trust with customers—scaling securely and stress-free.

"Alfred’s team made compliance painless. We’re investor-ready, trusted by customers, and can now focus on growing fast—without legal hurdles!" - Bernhard Kratzwald, CTO, EthonAI

The Team

Thierry Barbey, Founding Partner (Legal Advisory)

Thomas van Gammeren, Associate (Legal Advisory)

Sandro Stich, Senior Associate (Legal Advisory)