Data Processing Agreement (DPA)

pursuant to Art. 9 of the Swiss Federal Act on Data Protection (FADP) and Art. 28 of the General Data Protection Regulation (GDPR) · Version 2026-11

1. Subject matter and term

The Provider makes the Trasso software available to the Customer as an online service, including the driver app «Trasso Driver» (main agreement under the terms and conditions). In doing so, the Provider processes personal data on behalf of the Customer. This agreement governs the parties' data protection obligations.

This agreement applies for the term of the main agreement and thereafter until all Customer data has been deleted or returned.

2. Purpose, types of data and data subjects

Purpose: dispatching of transports, handling of orders, communication with drivers, preparation of transport documents and invoices, management of the Customer's fleet and staff.

Types of data: contact and address data of the Customer's clients, suppliers and contact persons; order and shipment data; invoicing data; staff data (name, contact details, entry and exit, workload, licence classes and deadlines, working hours, absences, expenses); location data of vehicles or drivers during their shift; photos, signatures and names of recipients; user accounts and logs.

Sensitive data: for absences, the type «sick» or «accident» may be recorded, without diagnosis. No other sensitive data is intended; the Customer only records such data where entitled to do so.

Data subjects: the Customer's employees and drivers, the Customer's clients and suppliers and their contact persons, recipients of shipments.

3. Customer instructions

The Provider processes the data only on documented instructions from the Customer. The main agreement, this agreement and the Customer's use of the functions of Trasso constitute instructions. Further instructions are given in writing or by e-mail.

If the Provider considers an instruction unlawful, it informs the Customer without delay. It does not process the data for its own purposes and does not disclose it to third parties, except to the sub-processors under section 6 or where required by law; in the latter case it informs the Customer beforehand unless prohibited by law.

4. Confidentiality and security

The Provider commits all persons with access to the data to confidentiality, also after the end of their activity.

The Provider implements the technical and organisational measures set out in Annex 1 (TOMs). It may adapt them to the state of the art provided the level of protection is not reduced.

5. Assistance, notification of breaches

The Provider assists the Customer by appropriate means with requests from data subjects (access, rectification, erasure, portability), with data protection impact assessments and with notifications to authorities. Many requests can be handled by the Customer directly in Trasso, e.g. by changing, deleting or exporting data.

If the Provider becomes aware of a personal data breach affecting Customer data, it notifies the Customer without undue delay and at the latest within 48 hours, with the information available on its nature, scope, consequences and the measures taken.

6. Sub-processors

The Customer agrees to the engagement of the sub-processors listed in Annex 2. The Provider binds them contractually to an equivalent level of data protection.

The Provider notifies the Customer by e-mail at least 30 days in advance of new or changed sub-processors. The Customer may object for good cause; if no agreement is reached, it may terminate the main agreement as of the date of the change.

7. Place of processing and transfers abroad

The data is stored in a data centre in the European Union (Annex 2). Maintenance is carried out by the Provider from Switzerland.

Data is disclosed to countries without an adequate level of protection only to the sub-processors listed in Annex 2 and only on the basis of the EU Commission's standard contractual clauses (in the version recognised by Switzerland) or another recognised safeguard. AI recognition of orders is only used when the Customer uploads a document for that purpose.

8. Audit rights

On request, the Provider makes available to the Customer the information necessary to demonstrate compliance with this agreement. The Customer may carry out an audit, or have it carried out by a professional bound to confidentiality, at most once a year, with 30 days' notice, during business hours. The Customer bears the costs.

9. Return and deletion

The Customer can export its data in Trasso at any time during the term (e.g. as CSV, PDF or XML). After the end of the main agreement, the data is kept for 30 days for export. The Provider then deletes it within a further 30 days unless required by law to retain it. Copies in backups are overwritten after 14 days at the latest.

On request, the Provider confirms the deletion in writing.

10. Liability and final provisions

Liability is governed by the terms and conditions. In the event of conflict, this agreement prevails over the terms and conditions in matters of data protection.

Amendments must be made in text form. Electronic acceptance in Trasso or at sign-up satisfies the form requirement. If a provision is invalid, the remainder remains valid. Governing law and jurisdiction are as set out in the terms and conditions; mandatory provisions of the FADP or GDPR remain reserved.

Annex 1: Technical and organisational measures (TOMs)

Confidentiality – physical access

The servers are located in a data centre with access control, video surveillance and ISO 27001 certification (operator: IONOS). The Provider has no physical access.

Confidentiality – system access

Access to Trasso only with a personal user and password (at least 10 characters, checked against known and weak passwords). Passwords are stored only as a hash (PBKDF2-SHA256, 210,000 iterations, individual salt). Lock for 15 minutes after 5 failed attempts, rate limiting per IP address. Sessions expire (office 12 hours, app 30 days). Password reset only via a single-use link valid for 60 minutes sent to the stored e-mail address. The Provider's administration console requires two-factor authentication. Server access is restricted to the Provider.

Confidentiality – data access

Roles and permissions in Trasso (administrator, dispatch, office, workshop, driver); drivers only see their own tours and data. Staff data and costs are only visible to authorised roles; sickness is shown to others only as «absent».

Confidentiality – separation

Each company has its own database with its own database user that can only see that database. The company is determined exclusively by its own address (company.trasso.ch); files are stored separately per company.

Integrity – transfer

All connections are encrypted (HTTPS/TLS), including to the driver app and to sub-processors. Requests from foreign websites are rejected (origin check). Exports are created only by the authorised user.

Integrity – input

Changes to important data (logins, users, invoices, staff, absences, working time corrections) are logged with user, time and IP address. The Provider's administration console keeps its own log. Concurrent changes are detected (version check).

Availability and resilience

Daily backup of all databases and files, retained for 14 days, accessible only to the Provider. The driver app stores messages offline and sends them later. The service restarts automatically after a failure; updates are checked with automated tests before deployment.

Data minimisation and deletion

Location data is recorded only between «start shift» and «end shift» and deleted automatically after 90 days. Expired sessions and links are removed automatically. Deletion after the end of the agreement as per section 9.

Organisation

Confidentiality undertaking by all persons with access; process for reporting security incidents (section 5); sub-processors only under contract (Annex 2); review of these measures at least once a year and in the event of significant changes.

Annex 2: Sub-processors

IONOS

Server operation (data centre in Spain, EU) and e-mail delivery. All Trasso data.

Anthropic, PBC (USA)

AI recognition of orders: only the document the Customer uploads for recognition is transmitted encrypted and analysed; basis: standard contractual clauses. Not used for training.

Customers can download this agreement with their company details and the time of acceptance as a PDF in Trasso under Settings → Subscription.